The Game That Ends It All

Legal

Privacy Policy

Last updated: 27 October 2026

1. Controller

The data controller is Reloflex SRL, a limited liability company registered in Romania:

  • Registered office: Strada Libertății 68, Cristuru Secuiesc, Harghita County, Romania
  • Trade Register number: J19/64/03.02.2023
  • VAT number / sole registration code (CUI): RO47568300

For any privacy request, contact contact@reloflex.com.

2. What we collect

  • Steam sign-in data: your SteamID, Steam display name, and Steam avatar image, received from Valve when you sign in.
  • Account data: an internal account identifier, your current support status, and, if you bought the Founder Pack, the date of that purchase.
  • Billing identifiers: the customer and subscription identifiers assigned by Paddle, and the Paddle transaction identifiers of your purchases. We link each transaction identifier to your account so we can deliver the Founder Pack to the right account and verify it later, for example when it is refunded. We do not receive or store your card or bank details — payment data is handled entirely by Paddle as Merchant of Record.
  • Discord link (optional): only if you choose to link Discord, we store your Discord user ID and username to assign your supporter roles. We use the OAuth identify scope and do not store Discord access tokens. You can unlink at any time.
  • Session cookie: one signed cookie named session that keeps you signed in for up to 7 days. It is strictly necessary for the site to function.
  • Server logs: standard technical logs such as IP address and request metadata, for security and reliability.
  • Crash reports (optional): the first time you start the game, it asks whether to send crash reports automatically. You can change your answer at any time in the game's settings. Only while crash reports are switched on, if the game crashes we receive technical crash data: a memory snapshot of the crashed game process (minidump), the game's log file, the game version, the map and match identifier, your operating system version, and hardware details such as processor, graphics card and memory. While they are switched off, crash data is not sent.
  • Game server crash reports: our own game servers always send a crash report when they crash, without a log file. The memory snapshot of a crashed server can incidentally contain technical data about the match it was running, such as the connection details of the players in that match.
  • Error reports (minimal): when the game detects an internal error it can recover from, it sends a short technical report: the error message and its category, the game version and build, whether the game was playing, hosting a match, or running as one of our servers, the map, the match identifier if you are in a match, and the same operating system and hardware details. Error reports never include your SteamID, your name, your IP address, or a log file, and they are sent whatever your crash report choice is.
  • Privacy-preserving analytics: we use Google Analytics 4 and Cloudflare Web Analytics in cookieless modes to measure aggregate site traffic (pageviews, referrers, country, device category). No cookies or other identifiers are stored on your device, and no cross-site profile is built. Google Analytics runs with client_storage: 'none', IP anonymisation on, and Google Signals / ad personalisation disabled. Cloudflare Web Analytics is cookieless and fingerprint-free by design.

3. Why we use it (lawful basis)

  • Performance of a contract: account, sign-in, and providing supporter access.
  • Consent: the optional Discord account link (withdrawable at any time by unlinking), automatic crash reports (given or refused when the game first asks, and changeable at any time in the game's settings), and voice chat (section 7).
  • Legitimate interests: security, fraud and abuse prevention, and keeping the service reliable, including the minimal error reports described above, which we need to find and fix defects and which contain no direct identifiers, and crash reports from our own game servers.

4. Who we share it with

We use a small number of processors and never sell personal data:

  • Valve (Steam) — authentication.
  • Paddle.com — Merchant of Record: payment processing, billing, tax, invoicing, and fraud prevention.
  • Cloudflare — website delivery and hosting, plus Cloudflare Web Analytics (cookieless aggregate traffic metrics).
  • Google (Google Analytics 4) — cookieless aggregate traffic metrics. Configured to disable cross-site advertising signals and personalisation.
  • Railway — backend application and database hosting, in the EU region.
  • Functional Software, Inc. (Sentry) — receives crash reports (only while you have them switched on) and minimal error reports from the game and our game servers. Data is hosted in Sentry's EU region (Germany).
  • Discord — only if you link your account.
  • Epic Games (Epic Online Services) — voice chat, only if you enable it (section 7).

Some processors may process data outside the EEA; where they do, it is under appropriate safeguards such as the EU Standard Contractual Clauses.

5. Retention

Account and support data is kept while your account exists and is deleted on request, subject to records we must keep by law (for example, billing records held by Paddle). Technical logs are kept only for a limited period. Encrypted database backups are kept for at most 90 days, then deleted.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. To exercise any of these, email contact@reloflex.com or create a ticket on our Discord.

7. Voice chat

The game has an optional voice chat. It is not switched on for players yet. This section describes what happens when you enable voice chat once it is available. It is off until you turn it on in the game's settings, and you can play without it.

What happens when you enable voice chat

In a match you can talk to your team, and to nearby players of both teams with proximity chat. By default your microphone is only sent while you hold a push-to-talk key. Before voice chat turns on, the game shows you what is sent and asks you to confirm.

What data is involved

  • Your voice: the audio from your microphone, sent in real time to the other players in your voice rooms. It is not recorded or stored, by us or by Epic.
  • Voice identity: an Epic Online Services player identifier (ProductUserId) linked to your SteamID. You do not need an Epic account.
  • Room membership: which voice rooms you are in: your team's room and the match's proximity room, for one match at a time.
  • IP address: your IP address is passed to Epic so it can connect you to a nearby voice server.
  • Consent record: when you turned voice chat on or off.
  • Reports and moderation records: if you report a player, or a player reports you, we keep the report: who reported whom, in which match and voice room, when, the reason and the optional note. We also keep any voice restriction placed on an account.

Players you mute are remembered only on your own device.

Lawful basis

Your consent. Voice chat only starts after you enable it, and you can withdraw consent at any time by turning it off.

Retention

  • Audio: none. It is transmitted, never stored.
  • Voice identity, consent record, reports about you and voice restrictions: kept while your account exists and deleted with it. Reports you filed are kept without being linked to you.

Epic Games

Epic Games provides the voice service (Epic Online Services) and processes this data on our behalf as our processor. Epic operates globally, so voice data may be processed outside the EEA and the UK; where it is, it is under appropriate safeguards such as the EU Standard Contractual Clauses. See Epic's privacy policy.

Your rights for voice chat

You can turn voice chat off at any time in the game's settings. This withdraws your consent and takes you out of every voice room at once. You can also mute or report any player during a match. For access, erasure or objection requests, use the contacts in section 6. If a personal data breach affects voice data, we notify the supervisory authority within 72 hours as the GDPR requires.

8. Children

The Game is not directed at children under 16. Steam’s own age requirements apply to account holders.

9. Changes

We may update this policy. The current version is always posted here with the “Last updated” date above.