更新された翻訳を準備中です。以下に最新の英語版全文を掲載しています。
1. Controller and scope
FORCEFORE SRL, registration number BE1002.643.270, Avenue de Maire 44, 7500 Tournai, Belgium, is responsible for the personal-data processing it determines for its services. Contact us through https://forcefore.com/support or at contact@forcefore.com for questions and data-rights requests.
This is the common privacy framework for all FORCEFORE websites, accounts, games, stores, community features and support services. It covers visitors, account holders, players, customers and people who contact us. A game’s existing Agreements, including the data chapter of its EULA, explain the particular data, features and providers involved in that game. They supplement this framework without removing the rights described here.
Recruitment processing is explained at https://jobs.forcefore.com/privacy. Employment processing is also covered by information provided to staff. Third-party websites and applications have their own notices for processing they determine independently.
2. Personal data and necessary information
Personal data is information that identifies you or distinguishes you, directly or indirectly. Account, player, installation and session identifiers can be personal data even when they do not contain a real name. A guest profile is not necessarily anonymous.
We distinguish information needed for a requested feature, processing required for legal obligations or security, and optional uses. If information is necessary to handle a request, not providing it may prevent that particular function. This does not mean that every other function requires the same information. Please avoid providing sensitive data or documents unrelated to your request.
3. Information you provide
Account information can include email address, username, name, birth date, country, language, a password hash and, where the corresponding feature is chosen or required, telephone and verification information. Preferences, consent records and the versions of documents acknowledged or accepted are associated with the account when necessary.
Profile and community functions can process avatars, banners, biographies, relationships between users, contact requests, posts, comments, reactions, messages and files you submit. Visibility depends on the feature, settings and recipient you select. Information sent to a recipient is not necessarily restricted to your own account.
Orders can require billing identity, delivery address, products, transaction reference, payment status, return or refund information and order correspondence. Card information entered with a payment provider is handled by that provider; we do not retain your full card number.
Support, moderation, recovery and deletion requests can include contact details, an account or player identifier, descriptions, correspondence, attachments and proportionate verification evidence. Never send a password, one-time login code or a complete payment-card copy.
4. Information generated by use
Operation and protection of the services can generate technical identifiers, IP addresses, browser or device information, connection dates, sessions, errors, security events and indicators of abnormal use. Approximate location can be inferred from an IP address, for example to give context to a connection. This is different from access to precise GPS location.
Depending on the requested service, we also process actions, purchase or access-entitlement status, preferences and information needed for continuity. Sharing an account identifier between services does not make every service’s data public or accessible to every employee.
If you choose an offered third-party sign-in or account link, we receive information authorised through that connection, such as a provider identifier, display name and email address. The provider describes its permissions. Technical tokens may be needed to maintain or revoke the connection. We do not receive the password for your third-party account.
5. Requested services and contractual purposes
We use necessary information to create and manage accounts, authenticate users, remember choices, provide requested functions, process orders, deliver products, handle refunds and respond to support requests. Where objectively necessary for a contract with you or steps you request before a contract, the basis is GDPR Article 6(1)(b).
That basis does not permit unrelated advertising or collection merely because it is mentioned in terms. Each feature must have an actual need for its data. Where a service concerns a child, capacity, parental-authorisation requirements and other relevant legal bases must also be respected.
6. Legal obligations and legitimate interests
Information required for accounting, tax, a legally grounded request or another applicable legal obligation is processed under GDPR Article 6(1)(c). We retain information relevant to that obligation rather than invoking a general obligation for every activity.
After considering necessity and the impact on your rights, legitimate interests can support service security, fraud and abuse prevention, incident investigation, technical reliability and establishing or defending legal claims. Those interests must be balanced against your circumstances, especially where children are involved. You may object to processing on this basis under the conditions of the GDPR.
Security and moderation measures may use automated signals and examination by authorised staff. A restriction can be challenged through the indicated route or support. Automation does not remove the safeguards applicable to decisions with legal or similarly significant effects.
7. Consent and communications
Where consent is required, including for certain tracking technologies or optional communications, we request it for the particular use. Consent must be capable of refusal or withdrawal. Accepting terms, acknowledging a privacy policy or continuing to use an account is not blanket consent to every processing activity.
Use the available preferences or a marketing message’s unsubscribe link to change a choice. Withdrawal operates for the future and does not invalidate earlier lawful processing. Limited evidence of the choice and information needed to respect an objection may be retained.
Necessary service messages, such as order confirmations, support replies, security alerts and required contractual notices, are distinct from promotions. Unsubscribing from marketing does not by itself stop those messages. Feature-specific communication mechanisms are explained in the relevant document.
8. Cookies and device storage
Cookies and equivalent technologies can maintain a session, provide security, remember a language or preserve a privacy choice. Technologies strictly necessary for an expressly requested function are distinguished from optional functional, analytics and marketing categories.
The consent controls explain the categories offered and allow available choices to be changed. We record the decision and its version to implement it and retain evidence. A refusal or absence of consent must not be treated as permission.
Browser settings can also remove or block storage. Blocking an essential element can interrupt sign-in or prevent a preference from being remembered. A choice on one website does not automatically replace settings in an application or third-party service. Consult the corresponding interface and information.
9. Games, advertising and notifications
Depending on the features used, game data can include a player or installation identifier, display name, age information, country, language, progress, virtual items and currencies, rewards, sessions and purchase references. Guest mode can use server-side saving. Account linking can associate data with an account or require a choice between saves; it does not guarantee that saves will be merged.
Where advertising is offered, the providers involved can receive device, software and network information, an IP address, impression or interaction events and identifiers permitted by the applicable settings. Contextual or non-personalised advertising can still involve personal data and network requests. The relevant service’s Agreements describe its advertising choices, age restrictions and actual partners.
Operating-system notification permission is not consent to advertising or every marketing purpose. A local reminder can be scheduled on the device; remote notifications can require a delivery token shared with a notification provider. Available permissions and preferences can be changed. Refusing an optional function can prevent its particular result, such as a reminder or an ad-dependent reward, without authorising any other processing.
Acknowledging this policy does not authorise behavioural advertising directed at children. Child-protection, consent, device-storage and objection safeguards apply to each relevant feature. Saving progress, validating a transaction and protecting security remain distinct from advertising purposes.
10. Visibility and recipients
Public contributions can be seen, copied or shared by others. A message recipient may keep a copy. Check the intended audience and avoid disclosing other people’s private information. Removal from our services cannot guarantee removal of independent copies held by others or search engines.
Inside FORCEFORE, access is limited to people who need it for their duties, such as support, security, moderation, commercial administration and technical operation. An authorisation is not permission to use your information for personal purposes.
Providers involved in hosting, protected storage, payments, communications, order production or delivery and functions actually used receive the relevant information. Depending on their role, they act on our instructions or as separate controllers for their own obligations and activities. Particular game providers are identified in the relevant Agreements.
Information may be shared with a competent authority, adviser or party to proceedings when legally grounded and proportionate. We do not sell our account or player database. A business reorganisation does not remove the purposes, safeguards and information duties owed to affected people.
11. International transfers
Some providers or contacts may process information outside the European Economic Area. Where GDPR transfer rules apply, a transfer must use an appropriate mechanism, such as an adequacy decision or standard contractual clauses, with the assessment and additional safeguards required in the circumstances.
A provider’s reputation, encryption or your acknowledgement of this policy is not by itself a transfer safeguard. You can request information about relevant safeguards and, where legally required, a copy or means of accessing them, while protecting confidential information and the rights of others.
12. Retention
There is no single retention period for every category. Account and service information remains while operationally needed, then is deleted, anonymised or restricted according to any remaining purpose. Account closure does not remove tax obligations, necessary litigation evidence or an unresolved security investigation.
Invoices and accounting evidence are generally retained for ten years under applicable Belgian tax rules. The precise period and starting point depend on the record and relevant obligation. Account data can be dissociated from an order without erasing evidence that must legally remain.
Security and connection histories are normally purged after one year; revoked credentials after 30 days. Technical registration information and technical evidence of choices are cleaned according to their function. A temporary link does not remain usable merely because a record of its issuance is still retained.
Deleted community content is normally retained for 90 days before final removal. An open report or investigation can justify keeping necessary evidence longer. Such retention does not authorise restoring the content to public view as though removal had not been requested.
For cookie choices, IP and browser details are removed after twelve months; superseded records after 36 months, while the current choice can remain to be implemented. Support and dispute records remain for the time needed to handle, follow up and document the issue. Recruitment and game-specific criteria are set out in their respective documents.
Backups and technical archives can create a delay between operational removal and erasure of all copies. They must not be used to reactivate a deleted account or resume a use without a legal basis. You can ask what categories remain, why and under which retention criteria.
13. Your rights
Subject to applicable conditions, you may obtain confirmation and access, correct inaccurate information, request erasure or restriction and object to processing. Portability applies to data and processing that meet its conditions; it does not require disclosure of every internal record or information that infringes another person’s rights.
You may withdraw consent and object to direct marketing. Where GDPR safeguards for solely automated decisions with legal or similarly significant effects apply, you may exercise those safeguards, including the relevant rights to explanation and human review.
Rights are not all absolute. Legal retention, freedom of expression, another person’s rights or the defence of claims may justify a lawful restriction. A relevant restriction must be explained; a general reference to security is not sufficient to extinguish your rights.
14. Deletion requests and verification
The common entry point for account and game-data deletion is the dedicated section at https://forcefore.com/support. Specify whether the request concerns the entire account, a particular game or a guest profile. A game-only request can preserve the account and other services, subject to necessary dependencies explained during handling.
Provide references needed to locate the profile without providing login secrets. For an unlinked profile or reasonable doubt about ownership, proportionate evidence may be requested. We must not delete another person’s data merely on a third party’s assertion.
Submitting the form opens a request; it does not necessarily cause immediate erasure. We examine the categories, verify legal exceptions and explain the outcome. Uninstalling an application, deleting cookies or signing out does not itself request deletion of server-held data.
15. Responses, complaints and children
Exercise rights through support or contact@forcefore.com. Under the GDPR we respond without undue delay and normally within one month of receipt. Where an extension is permitted because of complexity or the number of requests, we explain it within that first month. Requests are normally free, subject to statutory exceptions for manifestly unfounded or excessive requests.
You may complain to the Belgian Data Protection Authority, https://www.dataprotectionauthority.be, or another competent supervisory authority, including that of your habitual residence, without giving up other remedies.
A FORCEFORE account requires a minimum age of 13. This is not a universal age rating for every game or permission for every processing activity involving a child. Service access and particular features are described in the relevant Agreements. Where parental consent or authorisation is required, acknowledging this policy cannot replace it. A legal representative can contact us about a child’s data; proportionate verification may be necessary.
16. Security and changes
We use appropriate technical and organisational measures, including protected access, password hashing, role-based restrictions, protected file storage and security-event monitoring. No system eliminates every risk. Report suspicious access promptly and do not share links that grant access to private documents.
This policy may change as services, processing or applicable rules change. The version and effective date identify the applicable text. Material changes receive the required information through relevant channels. Public announcements supplement any individual notice required. Publishing a revised policy does not itself provide consent for a new optional purpose.