PRIVACY POLICY

(Data Protection Notice)

Effective date: 12 January 2026

1. Data Controller

• Website name: World of Blocks
• Domains: https://wobs.us and https://worldofblocks.us
• Operator (Data Controller): Kasza Patrik E.V.
• Registered office: 2724 Újlengyel, Petőfi Sándor utca 48., Hungary
• E-mail address: info@epicstory.us

The Data Controller processes personal data in connection with the services provided through the website.

2. Legal Background of Data Processing

Data processing is carried out in accordance with the following legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
• Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Hungary)
• Regulations governing electronic commerce services
• E-privacy regulations regarding the use of cookies

3. Nature of the Website and the Service

World of Blocks is an online video game (web application) that operates through a registered user account system.

• closed user system
• no direct user-to-user communication (chat or messaging is not available)
• the only publicly visible profile data are the username, the (optional) nickname, the user-published game worlds and their names, and the optional profile flag
• users decide whether their created worlds are made public
• users’ selected profile flags are not verified and do not necessarily indicate their citizenship or place of residence

4. Categories of Personal Data Processed

4.1. Data processed during registration and account use

• username
• nickname (optional)
• e-mail address
• password
• registration date
• last login date
• last activity date
• profile flag (optional)

4.2. Data processed during purchases and invoicing

• billing name
• billing address
• other invoice-related data required by law

4.3. Data generated during the use of the service

• IP address
• favorite worlds list
• ratings related to worlds
• technical and in-game settings (e.g. interface and graphical preferences)

5. Purpose and Legal Basis of Data Processing

The Data Controller processes personal data for the following purposes and on the following legal bases:

• Creation and management of user accounts: Article 6(1)(b) GDPR – performance of a contract
• Ensuring the operation of the game: Article 6(1)(b) GDPR
• Purchases and invoicing: Article 6(1)(b) and (c) GDPR
• Compliance with legal obligations: Article 6(1)(c) GDPR
• Statistical analysis: Article 6(1)(a) GDPR – consent
• Website and system security: Article 6(1)(f) GDPR – legitimate interest

6. Data Retention Period

• user account data: until the user account is deleted
• invoicing data: 8 years, in accordance with legal requirements
• IP addresses and technical log data: up to 6 months
• statistical cookies: until the expiration of the cookie or withdrawal of consent

7. Data Processors and Data Transfers

To provide its services, the Data Controller uses the following data processors:

• hosting provider: Amazon Web Services
• invoicing service: Billingo
• online payment services: Barion, Stripe (outside Hungary)
• analytics service: Google Analytics

In the case of Stripe and Google Analytics, data transfers outside the European Union may occur, based on appropriate safeguards approved by the European Commission.

8. Cookie Management

The website uses cookies to ensure proper operation and to improve user experience.

8.1. Types of cookies used

• Necessary cookies: PHP session cookie
• Functional cookies:
  • language preference
  • login persistence token
  • in-game settings (e.g. toolbar configuration, graphical settings)
• Statistical cookies: Google Analytics cookies (only if not disabled by the user)

Cookie management is implemented through a custom-built solution, and statistical cookies can be disabled by the user.

9. Data Security

The Data Controller applies appropriate technical and organizational measures to protect personal data, including:

• HTTPS encryption
• access control and authorization management
• regular system backups
• logging and restricted access to data

10. Rights of the Users

Users are entitled to:

• request information about the processing of their personal data
• request access to their personal data
• request rectification of inaccurate data
• request erasure of personal data
• request restriction of data processing
• data portability
• withdraw their consent at any time

11. Legal Remedies

Users may submit a complaint to the Data Controller and are also entitled to seek judicial remedy or lodge a complaint with the competent supervisory authority:

• National Authority for Data Protection and Freedom of Information (NAIH)
• Website: naih.hu

12. Amendments to the Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy at any time. Amendments shall enter into force upon publication on the website.