Privacy Policy

Last updated: 04/2026

GemWorld Studio (“GemWorld”, “we”, “us”, or “our”) is committed to protecting the privacy of its users. This Privacy Policy explains how we collect, store, use, and protect your data when you access our games, website, and related services (collectively, the “Service”).

By using the Service, you agree to this Policy. If you do not agree, you must not use the Service.

This Privacy Policy should be read in conjunction with the Terms and Conditions of Use, and the Cookie Policy, which form an integral part of the contractual framework of the Service.

1. Data Controller

GemWorld Studio acts as the Data Controller under the EU General Data Protection Regulation (GDPR) law.

GemWorld Studio determines the purposes and means of processing personal data collected within the framework of the Service in accordance with the GDPR.

In accordance with GDPR, GemWorld Studio will appoint a Data Protection Officer (“DPO”) if the nature or volume of data processing requires it.

If a DPO is designated, their contact details will be published in this Policy and available on the Service. In the meantime, any request relating to data protection may be addressed to the contact details below.

2. Data we collect

We collect personal and technical data necessary to operate the Service, secure the platform, and prevent fraud.

2.1. Data provided during account creation

  • email address
  • password
  • date of birth
  • gender (optional and collected only for analytics and personalisation; it is never required to use the Service)
  • first name / surname (if requested for verification)
  • country / region
  • language
  • anti-fraud technical data (IP address, browser fingerprint, device info)

Account creation is strictly reserved for users:

  • aged 18 or over
  • not using VPNs or IP-masking tools
  • residing in countries where GemWorld Studio can legally operate

Accounts suspected of belonging to minors are deleted.

Access may be restricted based on local regulations. If access is restricted, the account may be terminated without liability.

2.2. Data collected during use of the Service

  • account and gameplay data: gold earned, achievements, missions, levels
  • device and connection data: IP, browser, OS, language, device type
  • login logs

Used to:

  • operate games and systems
  • secure the Service
  • fight fraud (bots, multi-accounts, VPN usage)

2.3. Passive data (visitors without an account)

We collect:

  • IP address
  • browser/device data
  • pages visited, duration, clicks

Used to improve security and site performance.

2.4. Sensitive data

We do not collect special categories of sensitive data (e.g., health, religion, biometrics).

If such data were accidentally collected, it would be immediately deleted in accordance with GDPR requirements.

3. Identity verification

To prevent fraud, GemWorld Studio may request identity documents such as:

  • government-issued ID

Identity verification may be performed by trusted third-party providers. These service providers act as data processors within the meaning of the GDPR and are bound by contractual data protection agreements and may only use data for verification purposes.

If documents are requested, failure to provide them may lead to suspended access or account termination.

When verification is provided directly by GemWorld Studio, relevant documents are stored for a maximum of 6 months, then deleted, unless legally required to retain them longer.

4. Legal basis for processing

Data is processed under GDPR Articles 6.1:

PurposeLegal Basis
Account creation & gameplayContract
Anti-fraud protectionLegitimate interest
Security & analyticsLegitimate interest
Account notificationsLegal obligation + contract
Optional marketing by GemWorldConsent

GemWorld Studio does not send third-party marketing and never sells user data.

No personal data is sold, rented or used for commercial purposes by third parties.

5. Emails & notifications

GemWorld Studio may send:

  • account security notices
  • important account updates
  • push notifications with in-game content
  • optional experience surveys
  • optional content about promotions, upcoming events, and other news about GemWorld games or content
  • optional marketing content only from GemWorld Studio

You can unsubscribe from promotional newsletters at any time:

  • via link in each email

Push notifications are only enabled after you provide express consent in your device or browser settings. You can unsubscribe from push notifications directly from your device.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

Core operational emails cannot be disabled without deleting your account.

6. Cookies & tracking

GemWorld Studio uses cookies to:

  • recognise users
  • secure sessions
  • improve user experience
  • measure site performance
  • display advertisements and optional ad-based promotional content (with consent)

We may use:

  • Google Analytics / GA4
  • advertising cookies (Google Ads, rewarded advertisement format (as defined by advertising providers), etc.)
  • Consent Management Platform (IAB TCF compliant)

Cookies strictly necessary for the operation of the site do not require prior consent in accordance with applicable regulations.

You can modify cookie consent at any time via the Cookie Management page.

6.1. Third-party advertising cookies

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

You may opt out of personalised advertising by visiting Google Ads Settings.

For more information on how Google uses data when you use our partners’ sites or apps, visit: How Google uses data.

6.2. Consent to the use of cookies

For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

  • Your consent status or the withdrawal of consent
  • Your anonymised IP address
  • Information about your Browser
  • Information about your Device
  • The date and time you have visited our website
  • The webpage url where you saved or updated your consent preferences
  • The approximate location of the user that saved their consent preference
  • A universally unique identifier (UUID) of the website visitor that clicked the cookie banner

6.3. Ad networks

GemWorld Studio uses advertising to help fund the site. Third-party ad networks, including Google, may place and read cookies on your browser, or use web beacons, to collect information when ads are served on this website. The advertisers may collect and use information about you, such as your Service session activity, device identifier, MAC address, IMEI, geo-location information and IP address. They may use this information to provide advertisements of interest to you. Advertising identifiers are only collected when you consent through our cookie/permission tools.

In addition, you may see our games advertised in other services. After clicking on one of these advertisements and installing our game, you will become a user of our Service. In order to verify the installs, a device identifier may be shared with the advertiser.

Advertisements may be displayed between gameplay sessions or during natural pauses in platform navigation. Advertisements are clearly labelled as advertisements, are distinguishable from gameplay elements, and are not integrated into gameplay mechanics.

Interstitial advertisements may appear between gameplay sessions or during natural navigation transitions, but never during active gameplay interaction.

Some advertisements may provide you with in-game items or virtual currency (rewarded ads, as defined by advertising providers), but otherwise, advertisement interaction does not affect gameplay outcomes, virtual currency allocation, reward calculations, or reward eligibility.

7. Anti-fraud measures

To protect the Service, GemWorld Studio analyses:

  • IP and geolocation consistency
  • connection history
  • gameplay behaviour
  • anti-bot signals

These analyses are carried out to protect the security of the platform and prevent abuse, bots, multiple accounts, and fraudulent activities.

In case of fraud (multi-accounting, bots, VPNs, fradulent purchases, or exploits), GemWorld Studio may:

  • suspend or delete the account
  • cancel gold and purchased items
  • block future registration

8. Data sharing

We do not sell or rent your data. Data is shared only with:

  • hosting and infrastructure providers (e.g., AWS)
  • analytics and security partners
  • payment processors (if applicable)
  • identity verification providers

GemWorld Studio may also disclose data when necessary to protect its legal rights, prevent fraud, or comply with a legal obligation (court orders, fraud investigations).

GemWorld Studio may share your information in connection with any merger, sale of our assets, or a financing or acquisition of all or a portion of our business to another company. You will be notified via email and/or notice on our site of any change in ownership or users of your personal information. You will have the right to object to further processing by the new entity.

GemWorld Studio is not responsible for the data practices of third-party sites or services you access via links or external platforms.

9. International transfers

Data is stored in the EU (France). If transferred outside the EU, we apply GDPR safeguards:

  • Standard Contractual Clauses (SCCs)
  • adequate protection frameworks
  • data minimisation and encryption

When international technical suppliers are used, GemWorld Studio ensures that appropriate safeguards are in place in accordance with the GDPR.

10. Children’s privacy

GemWorld Studio does not allow minors to use the Service and does not knowingly collect data from anyone under 18.

If we discover a minor’s data, it will be deleted immediately.

If you believe a minor has registered, contact us at: support@gemworld-thegame.com

11. Data retention

We retain data only as long as necessary to:

  • maintain your account
  • provide the Service
  • comply with legal obligations
  • protect against fraud or abuse

When an account is deleted:

  • unnecessary data is deleted or anonymised
  • some logs and security records may be retained for up to 12 months for fraud prevention or legal purposes
  • verification documents are deleted after max. 6 months
  • gold, items, and purchases are lost permanently

12. Account deletion & rights

You may request deletion at any time by contacting support

Under GDPR, you may request:

  • access to your data
  • rectification
  • erasure
  • restriction
  • data portability
  • objection to processing

Requests processed within 30 days.

13. Security

GemWorld Studio applies technical and organisational security measures to protect data. Only authorised personnel can access the information strictly necessary for their duties. However, no system is 100% secure. We cannot guarantee absolute protection against unauthorised access (e.g., hacking), but we take reasonable security precautions.

14. Changes to this policy

We may update this Privacy Policy at any time. Material changes will be communicated via email or site notification. Continued use of the Service after updates signifies acceptance.

15. Hosting & storage

Data is hosted by Amazon Web Services (AWS), Paris, France

16. Contact information

GemWorld Studio
16 Place des Quinconces
33000 Bordeaux
France

support@gemworld-thegame.com