Polityka prywatności

Last Updated: October 18, 2026

This Privacy Policy explains what personal data L2TopZone collects when you use the website and its services, why, on what legal basis, who receives it, how long it is kept and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Who We Are

The data controller is L2TopZone.

For anything related to your personal data, write to privacy@l2topzone.com. We answer within one month (this can be extended by two more months for complex requests; we will tell you if so).

2. What We Collect

2.1 Your Account

• Name, display name, email address and password (the password is stored only as a secure hash).
• Social login: if you sign in with Facebook, Google, X (Twitter), Microsoft or Discord, we receive your profile ID on that platform, your name, email address and profile picture.
• Profile picture, language, time zone and notification settings.
• Sign-ins: the date of your last sign-in, the IP address used at registration, and your active sessions (IP address and browser) so you can see and end them.

2.2 Votes

Each vote is recorded with the server and the time, and with the details we need to make sure votes are real and cast by people:

• your IP address, the approximate location derived from it (country, region, city) and the network provider (ASN);
• whether the IP address belongs to a VPN, proxy or data centre;
• your browser and device: browser and device characteristics (such as browser type and language), network details exposed by your browser, and technical identifiers of your browser and device;
• the page you came from;
• if the server you vote for uses player codes (a code its game puts in your vote link): that code, stored only as a keyed hash;
• when the game server checks your vote: the time and technical details of the game server's request.

From your votes we also keep your vote history (server and time of each vote), your points, streaks and trophies.

2.3 Servers You List

Server name, description, chronicle, rates, website, worlds and their IP addresses, banners, uptime results, and the IP address used when you added the server.

2.4 Reviews, Ideas and Support

Reviews and replies you post, feature ideas, and support tickets with their messages and attachments.

2.5 Purchases and Rewards

• Payments: purchases of premium services and Topzone Coins (TZC), handled by Stripe. We never see or store your card details.
• Points shop: the rewards you redeem and, for physical rewards, the delivery address and phone number you give us.

2.6 Communications and Usage

Emails and notifications sent to you, browser push subscriptions if you enable them, clicks on server links and ads (counted per server; the clicking IP address is stored only in a hashed form), and technical logs of requests made to our API.

2.7 Cookies

See our Cookie Policy. Analytics and marketing cookies are used only if you accept them in the cookie banner; you can change your choice at any time.

3. Why We Use It and the Legal Basis

Where we rely on legitimate interest, we have weighed it against your rights; you can object (section 8).

4. Vote Protection and Automated Signals

To keep the ranking honest, our systems compare votes for signs of automation and abuse — for example many accounts voting from the same device or network, accounts created in bulk, or voting patterns no person would produce. Matching accounts are flagged for review.

• No account is restricted by a machine. Every restriction is decided by a person on our team after reviewing the evidence.
• A restriction may mean that your votes are not counted in the ranking, do not earn points, or that you cannot vote.
• Some votes may be counted only after additional checks.
• If you believe a decision about your account is wrong, write to privacy@l2topzone.com or open a support ticket: a person will review it again and explain the outcome.
• Our team may export the votes of a server over a period to investigate vote fraud; such exports are pseudonymised by default.

5. What Is Public

• Your profile: display name, picture, member since, vote totals and streaks, trophies, reviews, favourite servers and the servers you own (unless you hide a server from your profile).
• Leaderboards: display name and vote or point totals.
• Reviews you post, with your display name.
• Your L2 Journey and Wrapped recap — the servers you voted for and when (month and year), and your yearly summary — are hidden by default. They become visible to others only if you switch them on from your profile, and you can switch them off at any time.

6. Who Receives Your Data

We do not sell your data.

6.1 Server Owners

To give you in-game rewards for voting, the server you voted for can ask us whether a given IP address — or, on servers that use them, a player code — voted for that server recently; we answer with yes or no and the vote time. Server owners also see statistics about their votes and clicks — totals, countries and an estimate of real players — never your email or account details. Each server owner is responsible for what they do with the data on their own server.

6.2 Service Providers (processors)

They act only on our instructions and under a data-processing agreement:

• Our hosting provider — servers that run the website and store its database;
• Cloudflare — content delivery, protection from attacks, file storage (pictures and banners) and the anti-spam check on forms;
• Mailgun — sending emails;
• Stripe — card payments;
• Pusher — real-time notifications on the site;
• Google — analytics and advertising measurement, only with your consent;
• your browser's push service (e.g. Google, Mozilla, Apple), if you enable push notifications;
• a courier, which receives your name, address and phone number to deliver a physical reward.

6.3 Social Login Providers

When you sign in with Facebook, Google, X, Microsoft or Discord, that platform also processes your data under its own privacy policy.

6.4 Authorities

We disclose data when the law requires it, or when needed to establish, exercise or defend legal claims.

7. Transfers Outside the European Union

Some providers above (for example Stripe, Mailgun, Pusher and Google) are based in, or may process data in, the United States or other countries outside the EU. Such transfers rely on an adequacy decision (including the EU–U.S. Data Privacy Framework where the provider is certified) or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards used.

8. Your Rights

You have the right to:

• Access your data and get a copy — use Profile → Your data → Download my data for an instant JSON file, or write to us;
• Rectify inaccurate data — most of it you can edit in your profile;
• Erase your data — use Profile → Delete Account, or write to us;
• Data portability — the JSON file above is machine-readable;
• Restrict processing in certain cases;
• Object to processing based on legitimate interest, including your public profile and leaderboard listing;
• Withdraw consent at any time (journey visibility, optional notifications, cookies) — this does not affect what was done before;
• not to be subject to a decision based solely on automated processing with legal or similarly significant effects — see section 4.

Write to privacy@l2topzone.com. We may ask you to confirm your identity first.

You also have the right to lodge a complaint with a data protection authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro — or with the authority of the EU country where you live or work.

9. How Long We Keep It

When you delete your account, your profile, vote history, trophies, sessions, notifications, favourites, tickets and addresses are deleted immediately; your reviews stay without your name; your past votes stay only as anonymous counts for the server rankings, with the IP, device and browser details removed. Payment records are kept as the law requires. Copies in our database backups disappear as the backups rotate out.

10. Security

We use HTTPS for all traffic, hashed passwords, optional two-factor authentication, role-based access for our team, audit logs of administrative actions and regular security reviews. No system is perfectly secure; if a breach is likely to put you at risk, we will tell you and the authority as the law requires.

11. Children

L2TopZone is not intended for children under 16. You must be at least 16 to create an account; by registering you confirm that you are. If you believe a child under 16 has given us personal data, write to privacy@l2topzone.com and we will delete it.

12. Changes to This Policy

When we make significant changes, we will tell registered users by email or with a notice on the site, and update the date at the top.

13. Contact

Data controller: L2TopZone
Email: privacy@l2topzone.com
Website: https://l2topzone.com/privacy