Privacy Notice

Aeon Perpetua is operated by Anitucai Ioan Bogdan, trading as Aeon Perpetua. We are the data controller for the personal data described in this notice. Contact: support@heroreturn.live.

• Account data (email address, login credentials managed by our authentication provider, sign-in provider identifier) — to create and secure your account. Legal basis: performance of our contract with you.
• Game data (characters, levels, inventory, wallet balance, VIP points, trade listings, purchase ledger) — to provide the Service and keep your progress across devices. Legal basis: contract.
• Support messages you send us — to answer your request. Legal basis: contract and our legitimate interest in supporting players.
• Technical and usage data (IP address, device and browser identifiers, page and request logs, error reports with stack traces, performance metrics) — for security, fraud and cheat prevention, debugging and improving the game. Legal basis: legitimate interests.
• Order records (order identifier, bundle purchased, amount, status) — to credit your purchase and meet accounting obligations. Card details are never seen or stored by us; they are handled by Stripe. Legal basis: contract and legal obligation.

• Service providers / subprocessors — hosting, database and authentication, email delivery and error monitoring providers, acting on our instructions.
• Stripe, our payment processor and merchant of record, for the sale of Grass Coin bundles, payments, invoicing, tax compliance and refunds.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities where required by law or to protect our legal rights.

We do not sell your personal data.

Some of our providers process data outside the European Economic Area. Where that happens we rely on adequacy decisions or the European Commission's Standard Contractual Clauses, together with appropriate technical safeguards.

We keep account and game data for as long as your account is active, and delete or anonymise it within 12 months of account closure. Technical logs and error reports are kept for up to 12 months. Order and tax records are kept for as long as accounting law requires (typically up to 10 years).

Depending on where you live, you have the right to access, rectify, erase, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing relies on it. Contact us at the address above and we will respond within one month. If you are in the EEA or UK you may also complain to your local data protection supervisory authority (in Romania, the ANSPDCP).

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, restricted administrative access, and logging of privileged operations.

We use strictly necessary cookies and browser local storage to keep you signed in and to remember game settings such as joystick calibration and autosell filters. We do not use advertising cookies. Stripe may set cookies necessary to complete checkout and prevent fraud. You can clear or block storage in your browser settings, but the game may not work correctly without it.

The Service is not directed at children under the age required for consent in their country. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this notice; the current version is always published on this page with its date.