The Game That Ends It All

§ Legal

Privacy Policy

Last updated: 7 June 2026

1. Controller

The data controller is Reloflex SRL, a limited liability company registered in Romania:

  • Registered office: Strada Libertății 68, Cristuru Secuiesc, Harghita County, Romania
  • Trade Register number: J19/64/03.02.2023
  • VAT number / sole registration code (CUI): RO47568300

For any privacy request, contact contact@reloflex.com.

2. What we collect

  • Steam sign-in data: your SteamID, Steam display name, and Steam avatar image, received from Valve when you sign in.
  • Account data: an internal account identifier and your current support status.
  • Billing identifiers: the customer and subscription identifiers assigned by Paddle. We do not receive or store your card or bank details — payment data is handled entirely by Paddle as Merchant of Record.
  • Discord link (optional): only if you choose to link Discord, we store your Discord user ID and username to assign your supporter role. We use the OAuth identify scope and do not store Discord access tokens. You can unlink at any time.
  • Session cookie: one signed cookie named session that keeps you signed in for up to 7 days. It is strictly necessary for the site to function.
  • Server logs: standard technical logs such as IP address and request metadata, for security and reliability.
  • Privacy-preserving analytics: we use Google Analytics 4 and Cloudflare Web Analytics in cookieless modes to measure aggregate site traffic (pageviews, referrers, country, device category). No cookies or other identifiers are stored on your device, and no cross-site profile is built. Google Analytics runs with client_storage: 'none', IP anonymisation on, and Google Signals / ad personalisation disabled. Cloudflare Web Analytics is cookieless and fingerprint-free by design.

3. Why we use it (lawful basis)

  • Performance of a contract: account, sign-in, and providing supporter access.
  • Consent: the optional Discord account link. Withdrawable at any time by unlinking.
  • Legitimate interests: security, fraud and abuse prevention, and keeping the service reliable.

4. Who we share it with

We use a small number of processors and never sell personal data:

  • Valve (Steam) — authentication.
  • Paddle.com — Merchant of Record: payment processing, billing, tax, invoicing, and fraud prevention.
  • Cloudflare — website delivery and hosting, plus Cloudflare Web Analytics (cookieless aggregate traffic metrics).
  • Google (Google Analytics 4) — cookieless aggregate traffic metrics. Configured to disable cross-site advertising signals and personalisation.
  • Railway — backend application and database hosting, in the EU region.
  • Discord — only if you link your account.

Some processors may process data outside the EEA; where they do, it is under appropriate safeguards such as the EU Standard Contractual Clauses.

5. Retention

Account and support data is kept while your account exists and is deleted on request, subject to records we must keep by law (for example, billing records held by Paddle). Technical logs are kept only for a limited period.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. To exercise any of these, email contact@reloflex.com or create a ticket on our Discord.

7. Children

The Game is not directed at children under 16. Steam’s own age requirements apply to account holders.

8. Changes

We may update this policy. The current version is always posted here with the “Last updated” date above.