This Privacy Policy explains how LEGENDARY LABS COMPANY LIMITED (“Legendary Labs”, “we”, “us”) collects, uses, and shares information when you use Legendary Labs Shop, our direct-to-player web shop for Legendary Labs games (the “Service”).
Information We Collect
We collect the following categories of information:
- Account identifiers — your in-game player ID, display name, and the game you are buying for, which you provide when linking your purchase.
- Transaction data — the items you purchase, amount paid, currency, timestamp, and a payment reference issued by our payment processor. We do not store full card numbers or CVV codes.
- Device and usage data — IP address, browser type, device type, pages viewed, and approximate location derived from your IP.
- Cookies and similar technologies — see Section 04.
How We Use Information
- Process purchases and deliver purchased items to the correct in-game account.
- Prevent fraud, abuse, chargebacks, and violations of our Terms.
- Operate, secure, and improve the Service.
- Comply with tax, accounting, and other legal obligations.
- Communicate transactional messages such as purchase confirmations.
How We Share Information
We share information only with the following categories of recipients:
- Payment processors — Stripe and other licensed providers, who process your payment under their own privacy policies.
- Infrastructure providers — Google Cloud / Firebase, used to host the Service and store purchase records.
- Authorities — where required by law, court order, or to protect rights, safety, or property.
We do not sell your personal information.
Cookies
We use strictly necessary cookies to maintain your session and to enable secure payment flows. We may use analytics cookies to measure aggregate usage of the Service. You can block non-essential cookies in your browser settings; the Service may not function correctly without strictly necessary cookies.
Data Retention
Transaction records are retained for the period required by applicable tax and accounting law (typically up to 10 years). Account identifiers and device data tied to a transaction are retained for the same period to evidence the purchase. Other operational logs are retained for up to 24 months.
International Transfers
The Service is operated from Vietnam and uses cloud infrastructure located in the United States and Asia-Pacific regions. By using the Service, you understand that your information may be processed in countries other than your own.
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to restrict or object to certain processing, and to lodge a complaint with your local data protection authority. To exercise these rights, contact us at the address in Section 10. We may need to verify your identity and your link to the in-game account before acting on a request.
Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.
Security
We use industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, and audit logging. No method of transmission or storage is 100% secure.
Changes & Contact
We may update this Policy from time to time. Material changes will be announced on this page with a new effective date. For privacy inquiries, contact [email protected].