Flumen World is run by a private entrepreneur registered in Ukraine. Contact: admin@flumen.world. Full details of the operator are provided on request.

• Account: login, email, password (stored only as a secure hash, never in plain text) and language.
• Steam sign-in: your SteamID, Steam name, avatar and profile link, received from Steam. We never see your Steam password.
• Game data: the game nickname you choose and data from our game servers, such as statistics, credits, items and rewards.
• Supporter data: if you link Patreon, your Patreon user ID, tier and membership status. We never receive card or bank details: payments are handled by Patreon and monobank.
• Technical data: IP address, browser and request details in server logs, and a session cookie.
• Messages you send us via Discord or email.

• to create and run your account and the player cabinet;
• to send the emails you need: confirming your email, resetting your password;
• to deliver supporter rewards on our game servers;
• to keep the sites and servers secure and stop cheating, spam and abuse;
• to answer your messages.

We rely on our agreement with you (providing the service you asked for), our legitimate interests (security, fighting abuse) and, where needed, your consent.

We use one cookie, fw_session, to keep you signed in (up to 30 days). We do not use advertising or analytics cookies and do not track you on other sites.

Other signed-in players see your game nickname, avatar, SteamID and registration date in the player list. Your login and email are never shown to anyone but you.

We do not sell your data. It is shared only with services needed to run Flumen World, under their own privacy policies: Valve (Steam sign-in), Patreon and monobank (donations), Discord (our community) and our hosting provider in Germany (EU), which stores the data on our behalf.

Account data is kept while your account exists and is deleted within 30 days after you ask us to delete the account. Server logs are kept for a short time, normally no longer than 30 days. Email confirmation links expire after 24 hours, password reset links after 1 hour. Some records may be kept longer if the law requires it.

You can ask us to show, correct, export or delete your data, and you can object to how we use it. Write to admin@flumen.world and we will answer within 30 days. If you think we handle your data wrongly, you can complain to a data protection authority: in the EU, the authority of your country; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

Passwords are stored as strong hashes, the sites work only over HTTPS, and access to the servers is limited to the administrators. No system is perfectly secure, so please use a unique password.

Flumen World is for users aged 16 and older. If we learn that we hold data of a younger user, we will delete it.

We may update this policy. The date at the top shows the latest version; important changes are announced on the site or in our Discord.