Personal data policy
The operator of Terra Enigmatica website data is Файзуллин Расуль Дамирович, Russian tax ID 161103904314. Send data requests to raazizizxc@gmail.com. See contact details.
1. Scope and legal grounds#
This policy covers the website, its Mini App, the Terra Enigmatica game server (mc.terra-enigmatica.ru) and support about the website, the server and orders, with regard to Russian Federal Law No. 152-FZ on personal data. Order processing is based on concluding and performing the agreement; mandatory records are processed to meet legal obligations. Consent, where separately required, is requested separately. Reading this policy is not itself such consent.
2. Data and purposes#
| Purpose | Data | Grounds |
|---|---|---|
| Order creation, delivery and support | Nickname, ordered items, price, email if supplied, payment ID, method and status | Concluding and performing the agreement |
| Support, delivery issues and refunds | Sender contact, nickname, payment information, message and supplied attachments | Contract support and legal obligations |
| Telegram Mini App sign-in | Telegram ID and profile fields sent at sign-in, authentication data, linked nickname if available | Providing the requested service function |
| Website operation and security | IP address, request and browser details, technical logs, language, theme and session settings | Service operation and protection of legitimate interests without infringing users' rights |
| Payment records and mandatory accounting | Order, payment, receipt and refund information | Legal obligations |
| Joining and playing on the game server | Nickname and account ID (UUID), hashed game account password, connection IP address, join and play times | Providing game server access at the player's request |
| Enforcing server rules, handling violations and restoring builds | Chat messages and entered commands, in-game action log (block changes, container interactions), punishment records | Legitimate interests of the project and players without infringing users' rights |
| Game statistics | In-game stats, play time, session data | Providing server features (leaderboards, statistics) |
Processing includes necessary collection, recording, storage, use, correction, disclosure to involved service providers, blocking and deletion. It can be automated or handled by a person dealing with a request. Do not send passwords, verification codes, identity documents or full card details for an ordinary support request.
Game server data is stored on the same server as the website and is available only to the project administration. Messages in public game chat are visible to other players online.
Public leaderboards display in-game nicknames and the relevant game statistics. When available, the recent-purchases feed displays a nickname, item name, quantity and purchase date, but not email or payment credentials. Contact the operator by email with questions about displaying your information.
3. External services#
The payment service (payment operator) receives order details, nickname and email; the website receives the payment ID and result. Card details are handled by the payment provider and not stored here. If you use CryptoBot, it processes the invoice and order details. Telegram provides Mini App and bot infrastructure. Email support is available without Telegram.
Hosting and email services support website operation and correspondence. External services have their own processing terms, including for infrastructure outside Russia. We do not claim that all their processing occurs only in Russia. Data is provided to public authorities on lawful grounds. Purchasing alone does not authorise advertising emails.
4. Browser storage#
Language and theme cookies last up to one year. The Telegram sign-in cookie, tg_sess, lasts up to seven days. Local storage holds the cart and details used to show the latest order status. Clearing browser data resets these settings and may require signing in again.
5. Retention#
Data is used only for as long as its purpose requires. Unresolved orders and requests are retained until fulfilled and resolved. Mandatory records follow statutory retention periods. After the purpose ends, data is deleted or anonymised unless a legal obligation or a specific dispute requires retention. Deletion and backup handling take account of those obligations.
6. Protection and your rights#
The website uses HTTPS. Order and support access is limited to authorised persons, payment keys are not sent to the browser, and payment notifications are checked to reduce duplicate delivery. In the event of a personal data breach, the operator notifies Roskomnadzor as required by Law No. 152-FZ and informs affected users through known contacts.
You may request information about processing, correction, blocking or deletion where legally applicable, and withdraw separately given consent. Withdrawal does not end processing based on another lawful ground, such as performance of an agreement or statutory accounting.
Email raazizizxc@gmail.com with your request and sufficient information to locate the order or correspondence. We may ask for proportionate verification that the data is yours. Requests follow the applicable statutory periods. You may contact Roskomnadzor or a court.
7. Updates#
The current policy is published here. Updating it does not itself permit incompatible new uses of data already collected. The Russian version is the original; this translation is for convenience.
Last updated: