LoliLand Privacy Policy

Effective Date: 3 March 2026

Company: LoliLand Studios (“we”, “us”, “our”)

This Privacy Policy explains how we collect, use, share, and protect personal information when you access or use our websites, game, launcher, and related online services (the “Service”). It also describes your rights and choices.

This Privacy Policy applies to our Service and any related support or communications. It should be read together with our Terms of Service, EULA, and Cookie Policy.

1. Who We Are

LoliLand Studios is the controller of personal information processed through the Service, unless stated otherwise in this Policy.

2. What Information We Collect

2.1 Account and Profile Information

When you create or use an account, we may collect:

Email address
Username / nickname
Authentication credentials (stored securely, e.g., in hashed or tokenized form)
Selected language and basic account settings
User identifiers
Public profile data (see Section 2.4)

We do not require phone number registration. We do not require your date of birth by default. If we need age verification for legal compliance, safety, or enforcement, we may request confirmation of age or additional information in a proportionate way.

2.2 Gameplay, Social and Community Features

Depending on features available in the game/launcher, we may collect:

Gameplay statistics and progress (e.g., time played, blocks placed/broken, in-game events)
Friends / guilds / groups (membership, invites, relationships)
Reports and moderation-related data (complaints, evidence, enforcement history)
UGC and related metadata (see below)

2.3 Communications (Chat, Voice, Support)

Text chat. If text chat is available, we may process:

Messages you send and related metadata (timestamps, sender/recipient identifiers)
Moderation signals (toxicity indicators, spam signals, abuse patterns)

Voice chat. If voice chat is enabled, we may process:

Voice communications and technical metadata (such as connection data and moderation-related signals)

Support. If you contact support via our ticket system, we may process:

Contact details (email), issue description, attachments, logs you share
Support case history and internal notes

We may retain communications as long as reasonably necessary for safety, moderation, dispute handling, and legal obligations.

2.4 Public Profile Information

Some parts of your profile may be visible to other users, such as:

Username / nickname
Avatar (UGC image)
Gameplay statistics (e.g., time played, blocks placed/broken, similar in-game stats)

We do not intend public profiles to include sensitive personal data. Please avoid uploading content that reveals private information.

2.5 Technical, Device, and Usage Data

We collect technical and usage information when you use the Service, such as:

IP address and approximate location (country/city level)
Device identifiers and device type
Operating system, browser version, language settings
Network and connection data
App/launcher logs, diagnostics, crash reports
Performance metrics, error codes, reliability signals
Events (feature usage, clicks, gameplay interactions)

2.6 Anti-Cheat, Security, and Integrity Data

We process data to prevent cheating, fraud, and abuse, including:

Server-side integrity checks
Client-side telemetry and signals related to cheating prevention and security
Suspicious activity indicators, ban/mute flags, device/IP risk signals

We do not deploy kernel-level anti-cheat.

2.7 Payments and Purchases (Virtual Content)

Purchases are processed by third-party payment providers. We generally receive limited transaction information, such as:

Purchase status (success/failed/refunded)
Transaction ID, product identifier, timestamps
Limited masked purchaser details (as provided by the processor)

Payment providers may include:

Tebex (merchant of record / reseller)

We do not store full payment card details.

2.8 Cookies and Similar Technologies

We use cookies and similar technologies for required functionality, security, and analytics. For details, see our Cookie Policy.

3. Why We Use Information (Purposes)

We use personal information for the following purposes:

3.1 Provide and Operate the Service

Create and manage accounts
Authenticate users and maintain sessions
Provide game, launcher, and online functionality
Enable social features (friends, guilds, profiles)

3.2 Security, Anti-Fraud, and Safety

Prevent cheating, fraud, and abuse
Protect accounts and users from malicious activity
Enforce rules, Terms of Service, and EULA
Detect bots, suspicious logins, or automated abuse (CAPTCHA/WAF)

3.3 Moderation and Compliance

Review and act on reports
Remove prohibited content and enforce restrictions
Respond to lawful requests and legal obligations

3.4 Analytics, Diagnostics, and Improvements

Understand feature performance and service stability
Fix bugs, monitor reliability, prevent crashes
Improve gameplay, UX, and product quality

3.5 Support and Communications

Respond to requests, troubleshoot issues
Communicate service updates and important notices
Manage support cases and technical investigations

4. Legal Bases (EU/EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process personal information under one or more of these legal bases:

Contract (to provide the Service you request, including account and gameplay features)
Legitimate interests (security, anti-cheat, fraud prevention, service reliability, analytics necessary to maintain and improve the Service)
Consent (where required by law for certain cookies/technologies or optional features)
Legal obligations (compliance with applicable laws, lawful requests, enforcement)

Where consent is used, you can withdraw it as described in Section 10.

We may share information in limited circumstances:

5.1 Vendors and Service Providers (Processors)

We share information with trusted vendors who help us operate the Service, such as:

Hosting and infrastructure providers (e.g., AWS, Yandex, Cloudflare)
Analytics providers (Google Analytics, Yandex Metrika)
Security and anti-abuse providers (Cloudflare, Google reCAPTCHA, Yandex SmartCaptcha)
Email delivery (Mailgun)
Payment processors and merchants (Tebex)
Support/ticketing platform providers

These providers are authorized to process information only as needed to provide services to us.

5.2 Legal and Safety Disclosures

We may disclose information when we believe it is necessary to:

comply with law, legal process, or lawful government requests
investigate or prevent fraud, cheating, abuse, or security incidents
protect the rights, property, or safety of users, the Service, or LoliLand Studios

5.3 Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate safeguards.

6. International Data Transfers

We operate globally. Your information may be processed in countries other than your country of residence, including the United States, EU, and other locations where our vendors or infrastructure providers operate.

Where required by EU/UK law, we implement appropriate safeguards for international transfers (such as standard contractual clauses or equivalent measures) and limit access to authorized personnel and vendors.

7. Data Retention

We retain personal information for as long as necessary to provide the Service and for legitimate business and legal purposes, including safety, fraud prevention, and dispute resolution.

Typical retention periods:

Account data: up to 2 years after account deletion/termination
Security logs, anti-fraud, enforcement history: up to 5 years
Support tickets and support communications: up to 3 years
Technical logs and diagnostics: retained as needed for reliability and security, then deleted or anonymized

We may retain certain information longer if required by law, for chargeback disputes, fraud investigations, or the establishment or defense of legal claims.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption where appropriate, and monitoring for security incidents.

No method of transmission or storage is 100% secure. You are responsible for protecting your account credentials and using strong passwords.

9. Children and Minors

The Service may be accessed by users in different jurisdictions with different age rules.

If you are a minor in your place of residence, your parent or legal guardian must review and accept our Terms on your behalf and supervise your use of the Service, where required by law.

We apply additional protections for minors where required, including high-privacy default settings and proportionate safety measures.

We may request age confirmation or parental authorization where necessary to comply with applicable laws.

You must not misrepresent your age. Parents/guardians who accept the Terms for a minor are responsible for the minor’s compliance.

10. Your Rights and Choices

10.1 EU/EEA and UK Users (GDPR / UK GDPR)

Depending on your location, you may have the right to:

Access your personal information
Correct inaccurate or incomplete information
Delete your information (in certain circumstances)
Restrict or object to processing
Data portability (where applicable)
Withdraw consent (where processing is based on consent)
Lodge a complaint with your local data protection authority

10.2 US Users (State Privacy Rights Where Applicable)

Depending on your state of residence, you may have rights to:

Access, delete, or correct certain personal information
Opt out of certain processing (if applicable under law)

We do not sell personal information and do not share personal information for cross-context behavioral advertising in a way that is intended to fall under “sale” or “sharing” definitions under certain US laws.

10.3 How to Submit Requests

To make a privacy request, contact us at: privacy@loliland.ru

We may need to verify your identity before completing requests, and we may deny requests where permitted by law.

11. Automated Decisions and Profiling

We may use automated systems to detect cheating, fraud, bots, and abusive behavior (for example, risk scoring or spam detection). These systems support security and enforcement actions.

Where required by law, we provide appropriate safeguards, including meaningful review mechanisms and the ability to appeal certain enforcement outcomes as described in our Terms.

12. Third-Party Links and Services

The Service may include links to third-party sites or services. We are not responsible for third-party privacy practices. You should review their privacy policies before interacting with them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our business practices. We will post the updated version on our website(s) and update the “Last updated” date.

By continuing to use the Service after changes become effective, you agree to the updated Privacy Policy to the extent permitted by applicable law.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: privacy@loliland.ru