Privacy Policy

Black Phone s.r.o., a company registered in Slovakia, is the controller responsible for your personal data.

• Registered office: Pribinova 100263/4 Eurovea, 811 09 Bratislava, Slovakia
• Privacy contact: [email protected]

This policy applies to personal data we process about users of Pulse, including our website, dashboard, authentication, payments, and in-game integrations. It should be read together with our Terms of Service.

• Account and identity. When you sign in with Discord, we receive your Discord user ID, username, avatar, and email address associated with your Discord account.
• redENGINE link. If you link redENGINE, we store your redENGINE identifier and username so we can associate your entitlements and activity.
• Purchases. Records of orders, products, license keys assigned, and payment status. Card and crypto payments are handled by our payment processors; we receive confirmation and limited transaction metadata, not your full card number.
• In-game and usage data. Telemetry such as injections, recent servers, playtime, and session activity submitted through our integrations, and how you interact with the dashboard (for example, feedback, votes, and rewards activity).
• Technical data. IP address, device and browser information, and log data generated when you use the Service.
• Communications. Messages you send us for support or feedback.

We process personal data on the following legal bases under Article 6 GDPR:

• Performance of a contract. To create and manage your account, authenticate you, deliver products and license keys, run the dashboard, and provide support.
• Legitimate interests. To secure the Service, prevent fraud and abuse, maintain and improve features, and understand how the Service is used; balanced against your rights.
• Legal obligation. To keep accounting and tax records and to comply with applicable law.
• Consent. Where we ask for it, for example for certain optional communications. You can withdraw consent at any time.

We use strictly necessary cookies and similar technologies to keep you signed in and to secure the Service (database-backed sessions). These are required for the Service to function. We do not use them to build advertising profiles.

We do not sell your personal data. We share it only with service providers that process it on our behalf under appropriate agreements, including:

• Discord: for authentication and community features.
• Stripe: for card payment processing.
• Our cryptocurrency payment processor: for crypto payments and webhook confirmations.
• Hosting and infrastructure providers: to run and store the Service.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety, and property of Black Phone, our users, or others.

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data remains protected.

We keep personal data only for as long as necessary for the purposes described above. Account data is kept while your account is active; purchase and accounting records are kept for the periods required by law; telemetry and log data are kept for a limited period for security and operational purposes. When data is no longer needed, we delete or anonymise it.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Slovak supervisory authority, Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), or with the authority in your country of residence.

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your data and to address any incidents responsibly.

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the “last updated” date above and, for material changes, provide additional notice where appropriate.

For any privacy question or request, contact Black Phone s.r.o. at [email protected] or at the registered office listed above.