Effective from 29 October 2026.
This Policy explains what personal data the La2world.pw project (the “Service”, “we”) collects, why we need it, who we share it with, and what rights you have. We collect the minimum needed to run a game server.
1. Who processes the data
The data controller is the La2world.pw administration. You can reach us on Telegram @Rise_x5 or via the Support page.
2. What data we collect
- Account data: username, email address, password hash, registration date, IP address at sign-up and sign-in.
- Game data: characters, progress, login history, in-game events, chat messages and action logs.
- Technical data: IP address, browser and device type, language, pages visited, visit time, cookie identifiers.
- Payment data: amount, currency, status and transaction ID at the payment provider. We never receive or store card details - they are handled by the payment system.
- Support requests: messages you send to support and any attachments.
3. Why we process data and on what basis
- Performance of a contract: registration, sign-in, running your game account, purchases and credits.
- Legitimate interest: service security, anti-cheat, fraud prevention, multi-account detection, diagnostics and logs.
- Consent: analytics cookies and optional newsletters. You can withdraw consent at any time.
- Legal obligation: accounting records and responses to lawful requests from authorities.
4. Cookies and analytics
Cookies are small files stored in your browser. We use two groups.
Strictly necessary - the site cannot work without them, no consent required:
lw_session- user session, up to 2 hours;XSRF-TOKEN- form protection against request forgery;lw_consent- remembers your cookie choice, 180 days;- language and “remember me” cookies.
Analytics - loaded only after you consent in the banner:
- Yandex.Metrika: identifiers such as
_ym_uid,_ym_d,_ym_isad, up to 1 year. We see aggregated visit statistics, not your identity.
You can change or withdraw consent at any time using the “Cookie settings” link in the site footer. Once refused, analytics scripts are not loaded.
5. Sharing with third parties
- payment providers - to process payments and refunds;
- our hosting and infrastructure provider - to run the Service;
- the analytics provider (Yandex.Metrika) - only with your consent;
- authorities - where required by law.
We do not sell personal data or share it for third-party advertising.
6. Retention
Account data is kept while the account exists and for up to 12 months after deletion. Technical logs - up to 12 months. Payment records - up to 7 years where accounting law requires it. Data processed on consent is deleted once consent is withdrawn.
7. Your rights
You may request access to your data, rectification, erasure or restriction of processing; object to processing based on legitimate interest; receive a machine-readable copy; and withdraw consent. Contact us on Telegram or via Support - we respond within 30 days.
If you believe we break the law, you may lodge a complaint with a data protection authority (in Estonia - the Andmekaitse Inspektsioon) or with the authority in your country of residence.
8. Security
We use password hashing, restricted administrator access, form protection and security logging. No internet service can guarantee absolute security.
9. Children
The Service is not intended for anyone under 16. If we learn that an account belongs to a child below that age, we will delete it and the related data.
10. Changes to this Policy
We may update this Policy. The current version is always available on this page, with the effective date at the top. We will announce material changes on the site.
11. Contact
For any data protection question: Telegram @Rise_x5, or the Support page.