1. Data Controller

Matteo Pasini (Editor-in-Chief of Malagazzetta)
Email: malagazzetta@hotmail.com

2. Data We Collect

2.1 User-provided data

To register an account we collect:

• Name or nickname
• Email address

No phone numbers, physical addresses or ID documents are collected.

2.2 Data generated by using the App

Users may upload:

• real-life match results
• warband and character statistics
• wyrdstone found
• injuries, XP gains, earned gold

These data are used only to operate the campaign and may be visible to other participants as required by the game system.

2.3 Aggregated statistics

The App displays public statistics in anonymous form:

• total registered players
• active warbands
• total wyrdstone collected
• other campaign totals

These do not identify any user.

2.4 Payments via PayPal

Payments are processed through PayPal, which acts as an independent data controller.

The App only receives:

• confirmation of payment
• buyer's email address

No credit card or bank details are ever accessed or stored.

See PayPal's privacy policy for full details.

3. Purpose of Processing

We process personal data to:

• Create and manage user accounts
• Operate the App and campaign functionalities
• Manage the annual subscription
• Deliver activation codes
• Produce anonymous statistics
• Ensure security and prevent abuse

We do NOT sell or share personal data with third parties.

4. Legal Basis

Processing is based on:

• GDPR Art. 6(1)(b) – performance of a contract
• GDPR Art. 6(1)(f) – legitimate interest
• GDPR Art. 6(1)(a) – consent (for optional communications)

5. Data Retention

• Account data are retained as long as the account is active.
• Accounts inactive for 24 months may be removed.
• Match data may be retained in anonymized statistical form.

6. User Rights

Under GDPR, users may request:

• access
• rectification
• deletion
• restriction
• objection
• data portability
• withdrawal of consent

Requests may be sent to malagazzetta@hotmail.com

7. International Transfers

The App is accessible worldwide. Any transfer performed by external services (e.g., PayPal) follows GDPR-approved safeguards.

8. Security Measures

We use:

• HTTPS encryption
• anti-unauthorized access measures
• infrastructure-level security controls

9. Data Sharing

We do not share personal data except with:

• essential service providers (e.g., PayPal)
• authorities if legally required

We never sell personal information.

10. Children

The App is not intended for users under 16 years old. Parental consent is required for younger users.

11. Changes to this Privacy Policy

Updates will be posted on this page. Continued use of the App constitutes acceptance of the updated policy.

12. Contact

For any privacy-related inquiries:
📧 malagazzetta@hotmail.com