ArenaWars

Imprint

Information per § 5 TMG / § 18 MStV.

Operator

[TODO: Legal name / company]
[TODO: Street and number]
[TODO: ZIP, City, Country]

Contact

Email: [TODO]
Phone: [TODO]

VAT ID

[TODO or remove if not applicable]

Responsible for content (§ 18 MStV)

[TODO: Name and address if different from operator]

Dispute resolution

We are not obliged and not willing to participate in dispute resolution proceedings before a consumer arbitration board.

Liability

Contents on these pages are created with care. We assume no liability for the accuracy, completeness, or topicality of the contents. As a service provider we are liable for our own content according to general laws (§ 7 TMG). According to § 8–10 TMG we are not obliged to monitor transmitted or stored third-party information.

Copyright

Content created by the operator is subject to copyright. Reproduction, editing, distribution, and any kind of exploitation outside the limits of copyright law require written consent.

Third-party assets

• Wonderland Engine runtime & SDK.
• heyVR Arena SDK.
• Sound effects: [TODO]

Privacy Policy

Information per Art. 13 GDPR.

1. Controller

[TODO: Name / company]
[TODO: Address]
Email: [TODO]

2. What we process

Server logs. IP, user-agent, timestamp, requested resource — basis Art. 6(1)(f) GDPR. Retention max. 14 days.

Guest accounts. Random account ID + auto name (e.g. Guest-1a2b) in browser localStorage and database — Art. 6(1)(b).

Registered accounts. Display name, optional email, bcrypt password hash, timestamps — Art. 6(1)(b).

Game state. Level, XP, kills, saves, leaderboard (name + score visible to others), inventory — Art. 6(1)(b).

Multiplayer. Position, rotation, hit/death events in real time. Voice chat uses WebRTC: audio peer-to-peer, only SDP/ICE through our server, never recorded — Art. 6(1)(b)/(a).

Transactional email. Reset / verify links delivered via SMTP provider [TODO]. Tokens expire after at most 60 minutes.

3. Storage on your device

Review or revoke choices any time via the Cookie settings tab.

4. Processors

• Hosting: [TODO]
• SMTP: [TODO]
• heyVR platform (only when joining via heyVR lobby): shapevr GmbH.

5. Your rights

• Access, rectification, erasure, restriction, portability, objection (Art. 15–22 GDPR)
• Withdraw consent with effect for the future (Art. 7(3))
• Complaint to a supervisory authority (Art. 77)

Self-service from inside the game: export via GET /api/account/export, delete via DELETE /api/account.

6. Retention

• Server logs: max. 14 days.
• Inactive guests: 12 months.
• Registered accounts: until you delete them.
• Leaderboard entries: anonymised on deletion.
• Reset tokens: 60 minutes.

7. Security

Passwords stored as bcrypt hash (cost ≥ 10). Auth via short-lived signed JWTs (HS256). Transport TLS-encrypted. Rate-limiting on sensitive endpoints.

8. No automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place.

Terms of Service

1. Scope

These terms govern the use of Arena Wars (“the Service”) provided by the operator listed in the Imprint tab.

2. Eligibility

The Service is intended for users aged 16 or older. Minors must obtain parental consent before creating an account.

3. Account & security

• You are responsible for keeping your password confidential.
• One person, one account. Sharing accounts is not permitted.
• We may suspend accounts that violate these terms.

4. Acceptable use

You must not:

• cheat, exploit bugs, automate gameplay, or manipulate the leaderboard;
• harass, threaten, or defame other players (incl. voice chat);
• upload or transmit illegal, infringing, or harmful content;
• attack, overload, or reverse-engineer the Service;
• impersonate other persons or operators.

5. User-generated content

Display names, chat messages, and voice transmissions are your responsibility. By transmitting them you grant the operator a non-exclusive right to display them to other players inside the Service as required for operation.

6. Availability

The Service is provided “as is”. Maintenance, updates, or outages may occur at any time without prior notice.

7. Liability

The operator is liable without limitation for intent and gross negligence and for damages from injury to life, body, or health. For slight negligence the operator is liable only for breach of essential contractual obligations and limited to typically foreseeable damages. Statutory product-liability claims remain unaffected.

8. Termination

You may delete your account at any time via the in-game menu or DELETE /api/account. The operator may terminate accounts that violate these terms with immediate effect.

9. Final provisions

German law applies, excluding the UN CISG. Mandatory consumer-protection provisions of the user's country of residence remain unaffected. Place of jurisdiction for merchants is the operator's seat. Should individual provisions be invalid, the remainder stays in force.

Cookie & Storage Settings

We only use storage that is strictly necessary by default. You can grant or revoke optional categories below at any time.