- The information we collect, how we collect such information and the purposes of our collection;
- How we use and with whom we share such information;
- How you can access and update your information; and
- How we protect the information we store about you.
2. Information We Collect
When you interact with our Services, we may collect and store information from you directly as described below:
2.1 Registration Information
You must purchase a valid copy of the Game and create a user account through our website before you can play or access any of our games (your “Account”). Your Account grants you access to player tracking and multiplayer features available in our Game, and may be used to publicly identify you as part of the social features of the Services. These may include but are not limited to user-to-user interaction, game forums, chat or messaging functionality, competitive or cooperative gameplay and matchmaking, and other similar features.
We may also offer you the option to complete a user profile or provide information in a player dashboard or on our forums, accessible and editable only by you, and that may be viewable to other end users. Your user profile may include your Citadel username and/or in game handle, biographical details that you voluntarily provide, details about the Games you play, and a Citadel user ID number that is created by Citadel and used to identify your profile.
Your username will be public and will be shown to other users, but will only permit access to information that is considered public or that you have designated as public in your user profile settings. The information you include in your profile is optional, and we advise you to limit the information you share through this feature if you have concerns about your privacy.
Your Account will be used to identify your transactions and payment history, player sessions and player ratings or rankings, individual user settings and customized characters, in-game currency, and other in game features that we may make available from time to time. We discourage you from sharing your Account information or password with anyone, and we will never request such information in order to provide Services to you.
2.2 Payment Information
When you order any good or service through the Game, including any virtual currency or virtual good, the purchase will be made directly through our payment, currency, and account solutions provider BrainTree, who may collect relevant information in connection with such purchase. Please review the terms and conditions and privacy policies of the third party marketplace through which you accessed the Game for more information. In addition, each time you make a purchase, we will collect information relating to that in-app purchase, including but not limited to player ID, device ID, session ID, your current available currency, the USD value of the currency, an other information related to the transaction. Our payment processing service provider may also retain this information to enable you to purchase additional items through our Game without having to re-enter it each time. Please note that purchases from third parties may also be subject to additional policies.
2.3 Information Collected by Customer Support
When you ask for assistance from our Customer Support team, we will collect and store the contact information you provide (generally your name and email address), information about your game play or activity on the Games, and your user name or account ID. We will also store the correspondence and any information contained within.
2.4 Technical and Usage Information
When you access our Services, we may collect (i) certain technical information about your gaming device, mobile device, or computer system, including IP Address, device ID (IDFA, Google Advertising ID or other identifiers), anonymized Player and Account ID, session ID, marketplace purchases, transaction history and currency information, game play and player information, and the current version of your operating system; and (ii) usage statistics about your interactions with the Games. In certain Games we will create and assign to your device an identifier that is similar to an account number. We may collect the name you have associated with your device, device type, country, and any other information you choose to provide, such as user name, character name, or email address. This information is typically collected through the use of third-party software development kits.
2.5 Location Information
3. How We Collect Your Information
We may collect information about you in any one or more of the following ways:
3.1 Communications Features
You may be able to take part in certain activities through our Services that give you the opportunity to communicate or share information not just with Citadel, but also with other users of our Services. These include:
- Participating in player forums and message boards;
- Posting public comments to other users’ profiles or gameboards;
- Sending private messages or invitations to other users, either directly through the Games or to their email accounts;
- Sharing user generated content or photos, if such feature is made available; and
- Chating with other users
We may use, record and store archives of these communications on Citadel’s servers to protect the safety and well being of our users and Citadel’s rights and property in connection with the Services.
3.2 Cookies and Automated Information Collection
When you access our Services, we collect certain technical information in order to (i) analyze the usage of our Services; (ii) provide a more personalized experience; and (iii) manage advertising. We and service providers acting on our behalf may use Log Files and tracking technologies to collect and analyze certain types of technical information, including Cookies, Flash Cookies, and Web Beacons.
“Log Files” means certain information about how a person uses our Services, including both registered and unregistered users (either, a “User”). Log Files may include information such as a User’s Internet Protocol (IP) addresses, device name, user language, time played, platform type, number of page clicks, player skill levels, player history, pvp sessions and rankings, Game state and the date and time of activity on our Site or the Games, webpage interactions and pages viewed, and other similar information. In some cases, we will associate this information with your Account ID number for our internal use.
”Web Beacons” (also known as web bugs, pixel tags or clear GIFs) are tiny graphics with a unique identifier that may be included on our Services for several purposes, including to deliver or communicate with Cookies, to know if a certain page was visited or whether an email was opened,to advertise more efficiently by excluding our current users from certain promotional messages, to identify the source of a new installation, to delivering ads to you on other websites. Unlike Cookies, which are stored on the device, Web Beacons are typically embedded invisibly on web pages (or in an email).
“Flash Cookies” are local shared objects, which help us to prevent fraud, remember your in-Game preferences and speed up load times.
3.3 Other Sources
We may collect or receive information from other sources including (i) other Citadel users who choose to upload their email contacts, and (ii) third party information providers. We do not condition participation in our Services on you providing more personal information than is reasonably necessary for that activity.
4. How We Use the Information We Collect
In general, we collect, store and use your information to provide you with a customized experience. For example, we may use information collected from you in any one or more of the following ways:
We use your personal information to fulfill a contract with you and provide you with our Services, to comply with our legal obligation, protect your vital interest, or as may be required for the public good. This includes:
- To create Accounts and allow play of the Games;
- To facilitate in-app purchases;
- To enable user-to-user communications;
- To provide technical support and respond to user inquiries;
- To prevent, detect, mitigate, and investigate fraud or potentially illegal activities, and enforce our Terms of Service;
- To provide other services requested by you as described when we collect your information;
- To provide in-Game leader boards and to promote in-Game player achievements.
We use your personal information to pursue our legitimate interests where your rights and freedoms do not outweigh these interests. We have implemented controls to balance our interests with your rights. This includes:
- To track user retention and aggregated gameplay information to improve the overall user experience for Citadel’s products and services;
- To solicit input and feedback to improve Citadel’s products and services and customize your user experience;
- To use general location information to provide you with location based services (such as matchmaking, search results, and other personalized content);
- To contact you with information that we reasonably believe may be relevant to you; and
With your consent, we or our authorized third parties may use your personal information:
- To inform users about new products or promotional offers;
- To provide personalized and targeted advertising through our third party advertising partners
If you have provided your email address to us, we may use it to respond to (i) customer support inquiries, and (ii) keep you informed of your in-Game activity, including comments from friends and notifications about in-Game status. With your consent, we may also send promotional email messages (“Promotional Communications”) directly or in partnership with parties other than Citadel. Each Promotional Communication will generally offer recipients choices about withdrawing consent so you no longer receive additional messages.
5. Sharing of Your Information
We may share your information (in some cases personal information) with third parties in the following circumstances:
5.1 Third Party Service Providers and Third Party Products and Services
We will provide your information to third party companies to perform certain services, including but not limited to payment processing, data analysis, email delivery, hosting services, customer service and to assist us in our marketing efforts. We direct all such third party service providers to maintain the confidentiality of the information disclosed to them and to not use your information for any purpose other than to provide services on Citadel’s behalf.
We do not routinely share personal information with third parties except as may be necessary to provide Services to you. We may share (i) aggregated information (information about you and other users collectively, but not specifically identifiable to you); (ii) anonymous information; (iii) certain technical information (including IP Addresses and device or player IDs) to develop and deliver Services to you, including payment solutions; (iv) personally identifiable information, including first and last name, payment information, address, phone number, identity verification, credit card number, and other personal information as may be necessary to provide such Services.
We may also allow third parties to collect these types of information within the Games and they may share it with us. Advertisers may collect this information through the use of tracking technologies like browser cookies and web beacons.
We may disclose aggregated and anonymous information to describe the Services to prospective partners, advertisers, and other third parties, and for other lawful purposes. We may use aggregate, non-personally identifiable information for our own internal promotion or marketing purposes and we may share such aggregate non-personally identifiable information with others for marketing purposes.
In certain instances, you may need to opt in or opt out of advertising directly through our partners.
You may view a complete list of our third party service providers with links to their respective privacy policies here.
5.2 Friends and Other Players
In many Games, friends and other players will be able to see your Game profile, which may include your name or a “game name” and your profile photo, which in certain cases can reveal your Account ID. Access to an Account ID may allow others to view the public information associated with your related Citadel account. This information may also be shared with friends you invite to play when you participate in our Referral Program.
5.3 Safety, Security and Compliance with Law
Your information may be disclosed: (i) when we have a good faith belief that we are required to disclose the information in response to legal process (for example, a court order, search warrant or subpoena); (ii) to satisfy any applicable laws or regulations; (iii) where we believe that the Games are being used in the commission of a crime, including to report such criminal activity or to exchange information with other companies and organizations for the purposes of fraud protection and credit risk reduction; (iv) when we have a good faith belief that there is an emergency that poses a threat to the health and/or safety of you, another person or the public generally; and (v) in order to protect the rights or property of Citadel, including to enforce our Terms of Service.
5.4 Sale or Merger
In the event that Citadel undergoes a business transition, such as a merger, acquisition by another company, change of control, or sale of all or a portion of its assets, we may transfer all of your information, including personal information, to the successor organization in such transition.
6. Our Policies Concerning Children
Our Services are intended for a general audience and are not intended for Children. We do not knowingly collect personal information from users deemed to be children under their respective national laws. If we learn that we have collected PII of any child we will take steps to delete such information from our files as soon as possible. We urge parents to instruct their children to never give out their real names, addresses or phone numbers without permission. We recognize a special obligation to protect personal information obtained from young children.
Should you wish to have your child’s personal information deleted from our records, please contact us at email@example.com. We will be happy to remove your child’s information as appropriate.
7. How to Control Your Information
Under the EU General Data Protection Regulation, individuals residing in the EU and other territories that have adopted GDPR compliance or comparable regulation have a right to:
- Access your user data
- Correct the data you have provided to us
- Have information provided to you in a portable format
- Request the deletion of the data we have collected
- Restrict processing
- Object to processing or the legal basis on which we rely to process your data
You may send an email to firstname.lastname@example.org with your request to exercise any of the rights identified above. Place the reason for your request (e.g. “Delete my Data” or “Correct my Data”) in the subject line and include your first name, last name, and email address in the body of the email. We will respond to your request within thirty (30) days. Please note that certain records, for example those pertaining to payments or customer service matters, will be retained for legal and accounting purposes. If you have sent or posted content through the Services, we may not be able to delete it. Accounts created with Citadel are considered active until we receive a user request to delete them or deactivate them. Any request to deactivate or delete an account will not automatically result in information deletion unless so requested by the End User, and only to the extent we are not required to retain such data to satisfy our legal obligations.
Please note that requests to restrict processing or delete your data may require the termination of your user account if we require the information subject to the deletion request to maintain your user account or otherwise provide gameplay services to you.
We are unable to delete data controlled solely by third parties; for example, if you purchase our Game through Steam, we won’t be able to delete your Game from your Steam library, nor the data collected by Valve in connected with your purchase or your Valve account. Similarly, if you access any of our Services through third party social media or service platforms, such as Discord, or if you are routed to a third party service provider’s web page through our Services, you will need to make any deletion requests to those respective third parties separately.
8. Opt Out Options
8.1 Opting out of Promotional Communications
You can choose to opt out of receiving promotional emails and product updates from Citadel by clicking on the “unsubscribe” link in any such e-mail, or by opting out of such communications in your Game or Account preferences. Please note that once we receive your request, it may take an additional period of time for your opt-out to become effective. Your unsubscribe or e-mail preference change will be processed promptly, usually within 10 business days.
8.2 Opt Out Limitations
9. Security of Your Information
Accessing your account or any personally identifiable information stored through your account is password protected and requires two-step authentication using OTP when first accessing our Services through any new computer or device, or when cookies are disabled. It is important that you protect and maintain the security of your Account and that you immediately notify us of any unauthorized use of your Account. We encrypt the transmission of all information using secure socket layer technology (“SSL”).
We further encrypt all data we store or share, and each transfer of data is tokenized and signed with a secret. However, while we take reasonable precautions against possible security breaches of our Services, no website or Internet transmission is completely secure, and we cannot guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. Although we strive to protect your personal data, we cannot guarantee the security of your data while it is being transmitted through our Services; any transmission is at your own risk. Once we have received your information, we have procedures and security features in place to try to prevent unauthorized access.
11. Sharing Your Information for Direct Marketing Purposes
We do not share personal information with third parties for their direct marketing purposes unless you affirmatively agree to such disclosure, typically by “opting in” to receive targeted advertising from a third party (such as Facebook or Twitter) through our Services. If you do ask us to share your personal information with a third party for its marketing purposes, we will only share information in connection with that specific promotion, as we do not share information with any third party (other than our service providers) on a continual basis. To prevent disclosure of your personal information for use in direct marketing by a third party, do not opt in to such use when you provide personal information through our Services.
12. Links to Other Sites
13. California Residents: Responding to Do Not Track Signals
In September 2013, California enacted amendments to the California Online Privacy Protection Act (California Business & Professions Code §§22575-22579) which require operators of websites to disclose how they respond to “do not track” (DNT) signals from browsers used by consumers or other mechanisms that provide consumers a choice regarding the collection of personally identifiable information about the consumer’s online activities over time and across different websites or online services. While some newer browsers have incorporated “Do Not Track” features which, when turned on, send a signal or preference to the web sites you visit indicating that you do not wish your online activity to be tracked, a DNT protocol that can be implemented across multiple devices and sites has not yet been widely adopted. Currently, our computer system does not support, and cannot act on DNT signal headers that we may receive; accordingly, the choices that we provide you concerning out collection and use of personally identifiable information will continue to operate as described in this policy.
14. International Transfer
Your personal information may be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you’re located outside the United States and choose to provide your personal information to us, we may transfer your personal information to the United States and process it there.
15. Contact Us
11571 Purse Drive
Manassas, Virginia, USA 20112