Privacy Policy

1. Data controller

The Site is operated by the owner of the Moba Universe project, who organizes personal data processing for the Site.

For data requests, account or profile issues, user rights, and withdrawal of analytics cookie consent, contact:

• Project: Moba Universe
• Email: the.grootoss@gmail.com
• Policy page: /privacy
• Cookie settings: available in the Site footer and on this page

2. Scope

This Policy applies to visitors and registered users who view guides, register, sign in to the personal cabinet, fill in and submit a profile for moderation, open a preview of their own profile, use public profile pages after publication, and use interface preferences (language, theme).

The Site does not process payments and provides informational guide content published by the operator (editorial content). Registration exists to create, moderate, and (after approval) publish a public player profile.

3. Data we process

Depending on your actions and consent, we may process:

• Account data on registration and login: email address, nickname (username), password hash (the password itself is not stored in plain text), account role (user / moderator / administrator)
• Profile data: display nickname and “about” text (moderated before publishing and again if changed after approval); selected MOBA games and ranks from the Site catalog (saved immediately and may update without a separate review); moderation status (draft / pending / approved / rejected); moderator notes (on rejection); public visibility flag
• Auth session data: JWT access/refresh tokens on the client (browser) and server-side token validation data
• Technical visit data: IP address, browser type/version (User-Agent), language, approximate device/screen data, visit date/time, page URLs, referrer — may appear in web server/hosting logs when you use the Site, and may be collected by Yandex Metrika if you consent to analytics
• Usage data: page views, clicks, engagement metrics (when analytics is enabled)
• Interface preferences: language (lang) and theme (theme) in browser localStorage
• Consent records: cookie_consent (accepted / rejected); on registration — your consent to personal data processing
• Data collected by Yandex Metrika if you consent (including webvisor and click map features where enabled)

4. Registration, authentication, and profiles

To create an account you provide an email, nickname, and password and confirm consent to personal data processing. Email is used as the login identifier and for account/moderation-related communication. Regular users sign in via the Site login page; staff (administrator / moderator) use a separate administration login page.

After registration you open the personal cabinet. Nickname and “about” text are submitted for review; while under review those fields are view-only for you. Before publication you may open a preview of your profile page — available only to you as the account owner (and Site staff), not a public page for other visitors.

Games and ranks are chosen from Site lists and saved immediately without a separate review; they may appear on the profile page together with approved text. The user directory shows published profiles.

A profile becomes public for other visitors at /user/{id} after nickname/about moderation: an administrator or moderator approves it. If rejected, you may see a note; after editing nickname/about you may submit again. Changing nickname or about after publication removes the profile from public view until it is approved again.

Passwords are stored only as cryptographic hashes. Access and refresh tokens maintain your session; you can end the session by logging out and clearing site data in the browser.

5. Purposes

Data is processed to:

• register and authenticate users
• create and edit profiles, moderate nickname/about, save games and ranks, preview and display public profiles
• provide Site interface features (language, theme)
• publish editorial materials (guides) by the Site operator
• communicate about the account, moderation, and data-subject rights
• comply with personal data, cookie, and analytics transparency duties
• analyze traffic and improve content/UX (only after Yandex Metrika consent)
• protect the Site (abuse prevention and account security)

6. Legal bases

Account and profile data are processed based on your consent (including the registration checkbox) and/or as needed to provide the profile cabinet and public profile features you request (under 152-FZ and, where applicable, GDPR Art. 6).

Necessary interface preferences and your cookie Accept/Reject record are processed to operate the Site and inform users.

Yandex Metrika analytics runs only with your explicit consent via the “Accept” button on the cookie banner.

You may withdraw consent for account/profile processing by contacting the operator, and withdraw analytics consent via cookie settings. Withdrawal does not affect processing performed before withdrawal. Withdrawing account-related consent may make the personal cabinet unusable.

7. Cookies and local storage

We use cookies and similar technologies in these categories:

• Necessary / functional: language and theme — needed to remember preferences; not used for ad profiling
• Authentication: session tokens in browser localStorage (access/refresh) to keep you signed in
• Consent preference: stores Accept / Reject for analytics
• Analytical (Yandex Metrika): enabled only after consent, for statistics and Site improvement

8. Yandex Metrika

After analytics consent, the Site loads Yandex Metrika counter 110819737. Features may include visits, click map, webvisor, bounce and link tracking.

Processing in Yandex Metrika is also governed by Yandex documents. Please review:

• Without consent, the Metrika script is not loaded
• After consent, SPA navigations are tracked as separate page views
• Withdrawing consent stops further Metrika launches in that browser

Yandex Metrika Terms of Use

9. Retention

Account and profile data are kept while the account is active, or until deletion/blocking upon your request or by the operator for violations of rules/law, and for periods required to meet legal duties.

Language, theme, consent, and session tokens remain in your browser until logout, manual removal, or clearing site data.

Retention in Yandex Metrika follows the counter settings and Yandex policy.

10. Third parties and cross-border transfers

With analytics consent, visit data may be processed by Yandex (and related parties per their documentation) as the analytics provider.

Hosting, database, and Site infrastructure providers may process data as processors on the operator’s instructions as needed to run the Site.

We do not sell personal data or share it with third parties for marketing outside the analytics described above, except where required by law.

If infrastructure outside Russia/your country is used, cross-border transfers may occur subject to applicable law, consent, and/or other legal bases.

11. Your rights

Where applicable (including under 152-FZ), you may:

• request information about processing of your personal data
• request rectification, blocking, or deletion where legally grounded
• withdraw consent to account/profile processing and/or analytics
• lodge a complaint with Roskomnadzor or a court (for users in Russia)
• restrict cookies/storage via browser settings

12. Security

The operator applies organizational and technical measures to reduce unauthorized access: access control by role, password hashing, HTTPS on the public Site, and limited admin/moderator privileges. Editorial guide HTML is published by staff and rendered as trusted content.

Internet risks cannot be eliminated entirely; use a unique password, an up-to-date browser, and do not share credentials.

13. Children’s data / minors

The Site may be used by persons under 18. When you register, we may process an email address and other registration/profile details, including where the data subject is a minor.

By registering, you confirm that you are allowed to provide the data and, where required by applicable law (including where you are below the age of independent consent), that a parent/guardian has consented to the processing and to use of the Site.

The operator does not intentionally request special categories of data about minors. A legal guardian may contact the operator to rectify, restrict, or delete a minor’s data where legally possible.

If you believe a child registered or data was processed without required consent, contact the operator at the email above.

14. EU visitors / GDPR

The Site is primarily intended for users in the Russian Federation and CIS countries. However, it may also be accessible to visitors from the European Union (EU) and the European Economic Area (EEA).

If the GDPR applies to you, the following also applies:

• Data categories: email, nickname, password hash, profile data, technical and analytics data — as described above
• Purposes and bases: consent (registration, analytics); performance of a requested service for the cabinet/profile; and, where applicable, necessity for basic interface preferences
• Age of consent: if you are below the digital age of consent in your country (often 13–16), registration and data submission should involve parent/guardian consent
• Yandex Metrika and analytical cookies run only after explicit consent (“Accept”)
• If you consent to analytics, visit data may be transferred to and processed by Yandex, including infrastructure outside the EU/EEA
• You may request access, rectification, restriction, erasure (where applicable), portability (where applicable), and withdrawal of consent by emailing the operator
• You may lodge a complaint with a data protection supervisory authority in your country of residence, work, or of the alleged infringement

15. Policy changes

The operator may update this Policy. The current version is always available at /privacy. The update date is shown at the top. Material changes to account processing or analytics may require renewed consent.