1. Data the Operator receives from Service users

   To access certain Service features, you may be asked to provide the following information: your first and last name, phone number, and email address. You are not required to provide additional information in your profile. The information you provide will not be made public.

2. Data the Operator receives from third parties

   All ZOMBIECASE Service features become available after you sign in through Steam. When you first sign in, we receive your Steam ID, profile image, and profile name from Valve Corporation. Your Steam ID is used to create a ZOMBIECASE account and provide information about your in-game items on Steam. When your ZOMBIECASE account is created, you are assigned a User ID, a unique numeric identifier in the ZOMBIECASE system.

3. Transaction and payment data

   Payments to top up a virtual account cannot be made directly through the Service. However, these actions may be completed through other payment systems, which are offered based on your location. The Operator may provide your contact information to the payment provider you select so that the transaction can be completed and anti-fraud checks can be performed. The Operator may likewise receive data from your payment system operator for the same purposes. We also collect, store, and process information about your in-game items, exchanges, and preferences.

4. Cookies

   As described in the Cookie Policy, the Operator uses cookies and similar technologies, including web beacons, advertising tags, and device identifiers, to identify you and your device both within and outside the Service. The Operator also allows certain third parties to use cookies as described in the Cookie Policy. You can manage cookies through your browser settings and by other available means. You can also opt out of the use of cookies and similar technologies by third-party advertisers to track your activity on third-party websites.

5. Information about your device and location

   When you visit our website, the Operator receives the address of the website from which you arrived. The Operator also receives information about your IP address, proxy server, web browser, selected website color settings, screen resolution, operating system version, and other data that may identify you and your device.

6. Messages

   This includes information you send in messages or comments on our website forum and in technical support chats. When you post information on the forum, you make it publicly available. Information shared in a support chat is confidential and protected.

7. Google Analytics

   Our website uses Google Analytics, a web analytics service provided by Google, Inc. (Google). Google Analytics primarily uses first-party cookies to assess how you interact with the website. You can disable all cookies or delete individual cookies. For more information, visit: https://policies.google.com/technologies/cookies. To fully prevent Google from collecting data about the websites you visit, Google provides the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout.

1. Operating the Service

   The Operator uses your data to provide access to the Service for purchasing, selling, and exchanging in-game items. Depending on your location, we provide a list of payment systems available in your region. We use cookies to remember your selected website design, language, and other settings so that the Service is easier to use.

2. Marketing

   The Operator displays advertising to website visitors both within and outside the Service, either directly or through partners, using the following data:

   • data collected using marketing technologies, including advertising tags, cookies, and device identifiers;
   • contact information provided by Service users;
   • data generated through use of the Service, including search history, website sections visited, products viewed, selected website color scheme, and similar information;
   • data derived from the information listed above.
3. User support

   The Operator uses your data to answer questions and review complaints concerning the Service so that they can be analyzed and resolved.

4. Security

   The Operator uses your data to maintain security and to investigate suspected or actual fraud and other unlawful activity.

5. Statistics

   The Operator uses your data to produce and distribute aggregate statistics that do not identify you. For example, we may count advertising impressions and clicks, visits, and use of the Service across different regions and countries.

The Operator stores your personal data for as long as your account exists or for as long as necessary to operate the Service. Even if you use the Service only once every several years to search for, exchange, sell, or purchase items, we will retain your personal data and account until the account is closed. After your account is closed, your personal data will be deleted, blocked, or anonymized as required by applicable law, unless legal claims or other overriding lawful purposes require longer retention. In some cases, complete deletion is not possible because transaction records for exchanges, sales, and purchases on the marketplace must remain consistent.

If you exercise your right to object to the processing of your personal data, we will review your objection and delete data processed for the purposes to which you objected, unless another lawful basis permits its processing and storage or applicable law requires it to be retained.

If you withdraw consent to the processing of your personal data or your child's data, we will delete the data to the extent that its collection and processing were based on consent.

Data protection laws in different jurisdictions grant you certain rights regarding your personal data. To exercise these rights, you may contact us using the contact information on the website or through your personal account.

1. Right to information

   You may request a copy of your personal data by contacting us through any available method.

2. Right to rectification

   You may update certain personal data in your personal account or ask us to change or correct data that is inaccurate.

3. Right to erasure

   You may request the deletion of all or part of your personal data, for example, when:

   • it is no longer needed for the original purposes of processing;
   • consent was the lawful basis for its processing;
   • there is no legitimate interest supporting continued processing of the personal data;
   • it was used for marketing purposes.
4. Right to restrict processing

   You may request that the processing of all or part of your personal data be suspended, for example, if the data is inaccurate or you believe it is being processed unlawfully.

5. Right to data portability

   You may ask us to provide a copy of personal data that you previously supplied in a machine-readable format, such as XML or CSV.

6. Right to object

   You may require us to stop using your personal data for direct marketing.

Because the core information required to operate our Service is obtained from Valve Corporation, we follow an approach similar to Valve's policy on children's personal data (section 7 at: https://store.steampowered.com/privacy_agreement). We recommend that parents explain to their children when they may disclose personal data online and when they should not.

The Operator processes personal data on the following legal bases:

• consent provided by you;
• a contract, including our contractual relationship with you for access to all Service features or steps taken before entering into a contract;
• legitimate interests;
• legal obligations requiring us to comply with applicable law.

Personal data is processed on the basis of legitimate interests for the following purposes:

• protecting you and us from privacy and security threats and from fraudulent activity by third parties;
• ensuring compliance with legal requirements;
• analyzing and improving the quality of the Service provided to you;
• maintaining the conditions necessary to conduct our business.

When personal data is processed on the basis of your consent, you may withdraw that consent at any time.

When personal data is processed on the basis of legitimate interests, you have the right to object to those interests.