Aviso de privacidade

• character name, server, region, class, race, gender of the character and level (class, race and gender are also stored as the game’s code for them)
• combat power, item level and legion name
• equipped items with enchantment level, skills and stigmas with level, unlocked Daevanion nodes, equipped titles, wings and pets
• technical identifiers of the character (character ID and the character key from the profile image address)
• when we first and last saw the character (for the deletion periods)

We do not process profile pictures, contact, account or payment data.

The data comes from the publicly accessible, official AION 2 character pages and character search of NC Corporation (aion2.plaync.com). We retrieve it slowly, one request at a time, and store only the information listed above.

• Class statistics: from the tracked characters we determine the strongest by combat power and show in aggregate what this group uses.
• Character check: on request we read a single character and compare it with these figures.
• Building the pool: level and combat power of tracked characters are the basis for the selection.

Art. 6(1)(f) GDPR. Our legitimate interest is to give the player community transparent information about common play styles and to let players compare their character. The data is publicly visible anyway and only concerns the game, class pages show aggregated figures, character pages are not indexed by search engines, and every character can be hidden (section 7).

• We keep only the most recent build snapshot of each character; a new one replaces the previous one. We keep no history of combat power or of earlier builds.
• Data of tracked characters (level 45 and found in the game) is kept while the character is tracked.
• Characters that are not or no longer tracked, for example because they are below level 45 and only known from a character check, or because they can no longer be found in the game, are deleted with all their data once we have not seen them for 30 days.
• Character check requests (server, name, time, status) are deleted after 30 days.
• Backups: we back up the database daily on the same server and delete each backup after 7 days. Deleted data, including data deleted after an objection, therefore remains in the backups for up to 7 days. Backups are only used to recover from a failure; when we restore one, we apply all objections (section 7) again.

Notifying every tracked player individually is impossible for us, because we have no contact details, and would involve a disproportionate effort (Art. 14(5)(b) GDPR). We therefore make this information publicly available here.

When you start a character check or use the form in section 7, we process the server and character name you enter. To prevent abuse through too many requests, we derive a hash from your IP address with a secret key (HMAC-SHA-256). The application does not store the IP address itself. For character checks the hash is stored with the request and deleted after one hour; for the objection form it is kept in memory for one hour only. The legal basis is Art. 6(1)(f) GDPR (preventing abuse and overload of the official character pages).

This website runs on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (data centre in Germany), under a data processing agreement according to Art. 28 GDPR. The upstream web server (reverse proxy) writes no access logs for this website. Only on technical errors does it log the time, IP address and requested address; these error logs are rotated weekly and deleted after at most eleven weeks. Legal basis is Art. 6(1)(f) GDPR (secure and stable operation).

If you email us, we process your email address, the content of your message and the technical details of the email (e.g. time) to handle your request. Legal basis is Art. 6(1)(f) GDPR (answering requests), or Art. 6(1)(c) GDPR where we fulfil your data subject rights. The mailbox is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, under a data processing agreement. We delete messages once your request is settled, at the latest after twelve months; records of settled data protection requests are kept for up to three years.

Your browser loads item, skill and class icons directly from servers of NC Corporation (assets.playnccdn.com), delivered through a content delivery network. For technical reasons the operator of these servers receives your IP address and information about your browser; we do not send the address of the page you are on. The legal basis is Art. 6(1)(f) GDPR (showing the original artwork without distributing copies of it). NC Corporation is based in the Republic of Korea, for which an adequacy decision of the European Commission exists.