The operator of the www.landofheroes.eu website (the "Website") and the Land of Heroes online game (the "Game"), as service provider and data controller, hereby informs the visitors of the Website and the users who access the service through the Website (the "Users") about its data processing practices.
We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"). By registering and using the Website and the Game, the User acknowledges that they have read and understood this Privacy Policy.
Last updated: 10 June 2026
The details of the data controller are:
Company name: Vibestro Interactive - FZCO
Registered address: Building A1, Dubai Silicon Oasis, Dubai Digital Park, Dubai, United Arab Emirates
E-mail: [email protected]
Phone: +971 58 541 9922
Hereinafter: the "Controller". Privacy-related requests may also be sent to our support team at [email protected]. Full operator details are available on our Imprint page.
The Controller processes the personal data of Website visitors and Users that are necessary for contact and communication, for providing information about the service (i.e. participation in the Game and its conditions), and for the performance of the legal relationship that arises between the Controller and the User in connection with this service.
Use of the Website and participation in the Game require registration, during which the User provides certain personal data. By registering, the User consents to the recording and processing of the data provided during registration. The User also consents that, for the purpose of monitoring the operation of the Website and the Game and preventing abuse, the Controller may record login data, the amount of time spent in the Game, and data relating to transactions involving items obtained during the Game. For quality-assurance purposes, the Controller may also record messages sent by the User to other users or to the Controller.
The personal data processed by the Controller fall into the following categories:
Personal data are processed by the Controller and by the processors engaged by the Controller, only for as long as necessary to fulfil contractual or legal obligations, to enforce claims arising from the contract, or to achieve the relevant processing purpose. Personal data are deleted from the Controller's records, or appropriately anonymised, once they are no longer needed.
The User has the right to request that the Controller erase their personal data without undue delay where the data are no longer necessary or where any other ground under Article 17(1)(b)–(f) GDPR applies. Where the User has used a paid service, taken part in trading between users, or where this is necessary to investigate a user issue, and in view of accounting and tax legislation, the Controller retains the data for the limitation period prescribed by law.
Erasure or modification of personal data may be requested primarily through the support portal at portal.landofheroes.eu or via [email protected].
In the event of unlawful or deceptive use of personal data, a criminal offence committed by the User, or an attack against the Controller's IT systems, the Controller is entitled to delete the personal data concerned without delay; however, where required for an official or judicial procedure, the Controller retains the data for the period ordered by the authority or court.
This Privacy Policy does not extend to services and/or data processing carried out by third parties other than the Controller named herein, which may appear on or be linked from the Website. Such processing is governed by the privacy policies of the third parties operating those services, for which the Controller accepts no responsibility.
During the operation of the Website the Controller uses cookies to improve the user experience, to ensure the proper functioning of the Website, and for statistical analysis. A cookie is a small data file that the Website stores on the User's device and that contains certain information about the visit.
Non-essential cookies are used on the basis of the User's prior, express consent, which can be given through the Website's cookie banner and withdrawn at any time. The types of cookies used are session cookies, persistent cookies, and third-party cookies. The third-party services that may set cookies or process technical data include:
Most browsers accept cookies automatically, but cookies — including their deletion and blocking — can be managed in the browser settings. For full details, see our Cookie Policy.
The Controller does not apply automated decision-making — including profiling — based solely on automated processing that produces legal effects concerning the User or similarly significantly affects them.
The Controller may analyse user behaviour (e.g. time spent in the Game, items obtained, messaging habits) solely for statistical purposes or to improve service quality, but these processing operations do not lead to a decision that individually affects the User. Should the Controller apply automated decision-making or profiling in the future, it will provide separate prior information and ensure the appropriate rights under Article 22 GDPR.
The Controller carries out processing in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
Providing personal data to the Controller is voluntary, but in the absence of certain data, or in the case of inaccurate data, the Controller may be unable to maintain proper contact and/or to conclude and perform a contract; Users are therefore asked to provide the requested data accurately and completely. The Controller does not verify the personal data provided by the User; responsibility for the accuracy of the data rests solely with the person providing it, while the Controller takes all reasonable steps to erase or rectify inaccurate or unnecessary data without delay.
7.1 Data processors. For its business activities the Controller uses services provided by third parties (e.g. accounting, financial). Under the contracts concluded with these service providers as processors, a defined set of personal data (name, e-mail address, billing data) may be transferred to or made accessible by them for processing purposes. A processor may process such data only in accordance with the Controller's instructions, unless required to act otherwise by EU or member-state law.
7.2 Processing in connection with payment transactions. The financial service providers acting in payment transactions have their own privacy policies regarding the data required to process payments. Personal data entered on a payment interface are processed solely by the payment service provider; the Controller does not have access to these data and, in particular, does not store full card or banking details. Users should review and accept the provider's privacy policy before initiating a transaction. The payment service provider used is Stripe (https://stripe.com/privacy).
7.3 Processing in connection with support and customer-service requests. The Controller handles support and customer-service requests primarily through its support portal at portal.landofheroes.eu and by e-mail. Where the User contacts the Controller through the official Discord server of the Game, the data provided are governed by the Discord Terms of Service (https://discord.com/terms) and Privacy Policy (https://discord.com/privacy); Discord Inc. may store and, where necessary, transfer data on its own servers, including data centres outside the EU/EEA. The Controller itself does not transfer personal data to countries outside the EU/EEA other than as described in this Policy.
The Controller's IT system, and thus the actual place of processing, is operated on cloud-based servers provided by OVHcloud (OVH Groupe SAS, 2 rue Kellermann, 59100 Roubaix, France, www.ovhcloud.com). Notwithstanding the use of the cloud service, the Controller bears full responsibility for the hosting and processing of the data.
The Controller protects the data with appropriate measures, in particular against unauthorised access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental loss or damage. The Controller applies technical, organisational and operational measures that provide a level of protection appropriate to the risks of the processing, including server-level and application-level protection. The Controller selects and operates the IT tools used so that the processed data are accessible to authorised persons (availability), their authenticity is ensured, their integrity can be verified, and they are protected against unauthorised access (confidentiality). Security measures include encrypted connections (HTTPS), hashed password storage, optional two-factor authentication (2FA), and access controls.
The Controller informs Users that electronic messages transmitted over the internet are vulnerable to network threats. The Controller takes every reasonable precaution against such threats and monitors its systems in order to record any security incident and to verify the effectiveness of the measures applied.
Every natural person whose personal data are processed by the Controller has the following rights in connection with the processing:
In this Privacy Policy the Controller refers to the General Data Protection Regulation — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC — by its abbreviated English name, GDPR.
If a User considers that the processing of their personal data infringes the GDPR, they have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of their habitual residence, place of work, or the place of the alleged infringement. The User may also bring proceedings before a court against the Controller or a processor if they consider that their rights have been infringed as a result of the unlawful processing of their personal data.
The Controller has not appointed a data protection officer. Questions, comments and requests relating to the processing of personal data may be sent directly to:
Vibestro Interactive - FZCO
E-mail: [email protected]
Support: [email protected]
Phone: +971 58 541 9922
This Privacy Policy was finalised on 10 June 2026. The Controller reserves the right to amend this Privacy Policy and, in the event of a change in legislation, to supplement or clarify it in accordance with the applicable legal requirements, and will at all times inform the data subjects of any changes through the Website.
Vibestro Interactive - FZCO — Data Controller
English
Hungarian
Spanish
Romanian
Turkish
German
Polish