Privacy Policy

Last updated: March 31, 2026 | Effective immediately

ABCD Systems LLC ("we", "us", "our") operates COMMONWEALTH: Worlds at War ("the Game"). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Data	Purpose	Stored
Username	Account identity	Permanently
Email address	Account recovery, notifications	Permanently
Password (hashed)	Authentication	Permanently (bcrypt hash only)
Age bracket	Content gating, COPPA compliance	Permanently
Age verification data	18+ verification for adult content	Verification result only, not source documents
Gameplay data	Game function, leaderboards, anti-cheat	Permanently
Chat messages	Delivery, moderation, safety monitoring	90 days, then purged
IP address	Anti-cheat, abuse prevention	30 days
Device fingerprint	Anti-cheat, ban enforcement	Duration of ban or 1 year
Purchase history	Transaction records, support	Permanently

1.1 — What We Do NOT Collect

Real names (unless voluntarily provided in display name)
Physical addresses
Phone numbers
Photos or images of players
Precise GPS location
Social media accounts
Financial information (payments processed by Square; we never see card numbers)

2. Special Protections for Minors

Under-18 Player Data Protections:

We collect minimal data from under-18 players: username, email (or parent email for under-13), and age bracket.
Under-18 chat messages are subject to elevated safety monitoring using automated keyword, pattern, and AI-assisted review to detect grooming, bullying, and inappropriate contact.
Under-18 players cannot use direct/private messaging or voice chat. All their communications occur in monitored public channels.
Under-18 player usernames are displayed in green in all channels, identifying them as minors to other players and our monitoring systems.
Adult content assets are never downloaded to the devices of under-18 players.
We track adult-to-minor interaction patterns to detect predatory behavior. Adults who exhibit grooming indicators are automatically restricted and may be permanently banned and reported to authorities.

2.1 — COPPA Compliance (Under 13)

For players under 13, we require verifiable parental consent before account creation. We collect only: username, parent/guardian email, and age bracket. Parents may review their child's data, request deletion, or revoke consent at any time by emailing support@abcdsystems.com.

3. How We Use Your Information

Game operation: Authentication, gameplay, progression, matchmaking, leaderboards.
Safety: Content moderation, anti-cheat detection, minor protection monitoring, grooming prevention.
Communication: Account notifications, support ticket replies, system announcements. We use Brevo for transactional email only.
Improvement: Aggregate gameplay analytics to improve game balance and features. Individual data is never sold.

4. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited cases:

Payment processor (Square): Processes purchases. They receive only the transaction details necessary to complete the payment.
Email service (Brevo): Delivers transactional emails (support replies, account notices). Receives only email address and message content.
AI services (Google Gemini): Chat moderation and bug report triage. Receives message text only — no usernames, emails, or identifying information.
Law enforcement: We may disclose account data in response to valid legal requests, or proactively when we detect activity that threatens the safety of minors.

5. Data Security

All connections use HTTPS/TLS encryption.
Passwords are stored as bcrypt hashes — we never store or see plain-text passwords.
The game uses server-authoritative architecture — sensitive game state is never trusted from the client.
Session tokens expire after 24 hours of inactivity.
Admin actions are logged in an immutable audit trail.
Age verification documents are processed for verification only and not retained.

6. Data Retention

Account data: Retained while account is active. Deleted within 30 days of account deletion request.
Chat messages: Retained for 90 days for moderation review, then permanently purged.
Gameplay data: Retained while account is active for leaderboards and progression.
IP addresses: Retained for 30 days.
Anti-cheat logs: Retained for the duration of any investigation, then 90 days.
Minor interaction logs: Retained for 1 year for safety review purposes.
Banned account data: Retained permanently to prevent ban evasion.

7. Your Rights

Access: Request a copy of your personal data.
Correction: Request correction of inaccurate data.
Deletion: Request account and data deletion (subject to legal retention requirements).
Portability: Request your data in a machine-readable format.
Objection: Object to specific data processing activities.

To exercise any of these rights, contact support@abcdsystems.com. We will respond within 30 days.

8. GDPR (European Users)

If you are located in the European Economic Area, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is contract performance (providing the Game) and legitimate interest (safety, anti-cheat, minor protection).

9. Cookies & Local Storage

The Game uses session cookies (LWSESSID) for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics that track individual users. No data is stored in browser local storage.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated via in-game notification. Continued use of the Game constitutes acceptance.

11. Contact

For privacy questions, data requests, or concerns:

Email: support@abcdsystems.com
Company: ABCD Systems LLC