Website privacy policy

Controller and contact

The controller is Profuturis Michał Oleszczak, Morelowa 3, 87-148 Łysomice, Poland. For privacy requests, write to info@profuturis.net. This policy covers tower.profuturis.net, its public archives and community forum. The native game has a separate iOS privacy policy.

Browsing and language

You can read the website and public discussions without an account. The website uses no advertising scripts, behavioral analytics or marketing cookies and does not sell personal information. Your browser sends technical information such as an IP address, requested address, browser information and preferred languages to deliver pages and protect the service. Hosting and network infrastructure may process request and error logs for operation, security and troubleshooting.

We detect English or Polish from your browser's language preferences. A language selection in the top-right corner stores a first-party language cookie for up to 365 days. It contains only the language choice. You can change it at any time or remove it in browser settings. With cookies blocked, language links and browser detection still work, but the preference may not persist.

Signing in and forum identity

Apple, Google or a personal Microsoft account can authenticate you when that provider is enabled. The provider processes the sign-in and returns identity information for verification; we never receive your password. The website validates the signed provider response, including email-verification information where the provider supplies it, and derives a pseudonymous local identifier from the provider issuer and subject. Different provider accounts remain separate even when they use the same email address.

Our forum database and session do not retain your provider email address, profile, access token or refresh token. We retain the local identifier, generated Commander display name, session-validation information and timestamps needed to run the account. The generated name accompanies your posts. A forum account is separate from game saves, Game Center and App Store purchases.

Cookies and session protection

The website uses a sign-in cookie for an eight-hour session without automatic extension, anti-forgery cookies to protect forms, and short-lived correlation and nonce cookies for provider login. The login flow lasts up to ten minutes. These first-party cookies support the service you request and are not used for advertising. Sign out to end the current session; account deletion invalidates the account's other sessions on their next request. Blocking essential cookies prevents signing in or submitting protected forms. The language cookie is described above.

Public posts and moderation

We store topic titles, messages, replies, categories, authorship identifiers and creation/activity times to provide discussions. Your posts and generated display name are public and may be indexed or copied by others. Do not publish passwords, receipts or private personal details. Reports include the reported item, your local identity, your reason and timing. Reports and moderation controls are restricted to authorized moderators. Hidden posts remain stored and accessible to moderators. Security measures include request rate limits; login limits use the request address and posting limits use the account identifier.

Why we process data

Where the GDPR applies, operating your requested forum account and publishing your contributions relies on performance of a contract (Article 6(1)(b)). Delivering and securing the website, preventing abuse, moderation, answering general inquiries and defending claims rely on our legitimate interests (Article 6(1)(f)); you may object where applicable. Legal obligations rely on Article 6(1)(c). If a particular activity requires consent, we will request it and you can withdraw it without affecting earlier lawful processing. We do not use personal data for advertising profiles or solely automated decisions with legal or similarly significant effects.

Providing a provider identity is necessary to create an account; topic and reply fields are necessary to publish them. You can instead browse without signing in. Contacting us is voluntary; an email provides your address and whatever you include, which we use to answer and follow up on your request.

Recipients and international services

Public readers and search engines can access published posts. Authorized moderators access reports and hidden material. Hosting, database, backup and email providers may process data on our behalf to operate the service. We may disclose relevant information to authorities or advisers where required by law or needed to establish, exercise or defend claims.

Apple, Google and Microsoft process provider sign-in under their own privacy information and may operate outside the European Economic Area. See Apple Privacy, Google Privacy and Microsoft Privacy for their practices and transfer safeguards. For any transfers we arrange, applicable data-protection requirements govern the safeguards; contact us for details about recipients and safeguards relevant to your data.

Retention and deletion

Account information is kept while the account exists. Topics, replies and moderation material remain stored while needed for the forum and its safety; hiding a post does not delete it, and the application does not automatically expire old discussions. You can delete your local account from My account. This removes the local identity and your submitted reports, replaces your topic titles, messages and replies with deletion notices, and removes their authorship. Other participants' contributions remain. Deleting a forum account does not delete your provider account or game data. Signing in again creates a new local account.

Search indexes, quotations and copies outside our control may retain earlier content. Operational backups may retain earlier copies until replaced or expired under the hosting backup schedule. Request logs, support correspondence and records needed for legal obligations or claims are retained only for their operational purpose and applicable legal period. Those periods depend on the type of record, incident and service provider; contact us for the applicable period for your records. You can request deletion or restriction where applicable instead of posting private information publicly.

Your rights and complaints

Where applicable, you may request access, correction, deletion, restriction and portability, or object to processing based on legitimate interests. Send requests to info@profuturis.net. We may request reasonable verification; the account reference shown in your account settings can help identify your forum data. You may complain to the President of the Polish Personal Data Protection Office (UODO) or your competent supervisory authority. For data controlled separately by a sign-in provider, contact that provider as well.

Children and policy updates

We do not ask forum members for a date of birth. Do not post a child's private information. A parent or guardian can contact us about a child's account or information so we can address the request. Provider account eligibility and parental controls are governed by the provider. We update this policy when the website's practices or legal requirements change and identify material changes with the revised policy. The revision date is shown above.