Privacy Policy
Last updated: 29 July 2026
Who we are
Buff Brigade: Battle Arena (“Buff Brigade”, “we”, “us”) is operated by Chartscout OÜ (registry code: 17444161), a company registered in the Republic of Estonia with its registered address at Tartu mnt 67/1-13b, 10115 Tallinn, Estonia. Chartscout OÜ is the data controller responsible for your personal data.
For any privacy question, or to exercise the rights described below, contact privacy@buffbrigade.com.
What we collect
Account data
If you create an account, our identity service stores a stable account identifier and the basic profile fields released by your chosen sign-in method: typically your email address and display name. We never receive or store your password. If you sign in via Google, Google authenticates you and returns only those profile fields; we do not gain access to your Google account beyond them.
Gameplay and entitlement data
For online play we store your progression, purchase entitlements, match results and competitive standing against your account identifier. Match hosts process the commands you send during a match in order to run it.
Technical data
Our servers log the request metadata needed to operate and secure the service: IP address, timestamps and client version. These logs are retained for a limited period for security, abuse prevention and debugging.
Analytics
The game may send anonymous gameplay analytics. This is a setting you control in the client, and it is not tied to advertising identifiers.
Website cookies and local storage
This website uses strictly necessary storage to provide features you request. If account sign-in is enabled and you sign in, authentication cookies maintain and protect your session. We also store your cookie preference in your browser's local storage so we can respect it on later visits.
Optional analytics storage and marketing or targeting technologies are disabled until you consent to the relevant category. No website analytics, marketing or advertising service is configured at the date shown above. If cookieless measurement is introduced, it may operate with storage denied; analytics cookies, advertising storage, personalisation and retargeting must remain disabled unless your saved preference allows the relevant purpose. You can change or withdraw either choice at any time through “Cookie settings” in the footer.
What we do not do
- We do not sell your personal data.
- We do not run behavioural advertising against your gameplay.
- We do not require an account to play the offline game.
Legal basis for processing
Account, gameplay and entitlement data are processed on the basis of contractual necessity, to perform the service you use. Security logging and abuse prevention rest on our legitimate interests in operating a safe service. Optional analytics rest on your consent, which you may withdraw at any time in the client or, for website analytics and marketing technologies, through Cookie settings in the footer. Some records are kept to satisfy a legal obligation.
Who we share it with
We share data with the infrastructure and platform providers required to run the game: cloud hosting and content delivery, our identity provider and, once public purchases are enabled, the platform storefront that verifies them. Each receives only what its function requires and is governed by the applicable data-processing terms.
Your rights
Under the GDPR, and subject to your local law, you may request access to your data, correction, deletion, a portable export, or restriction of processing, and you may object to processing based on legitimate interest. The game client exposes account export and account deletion directly.
You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you may equally complain to the authority in your own country of residence.
Children
Buff Brigade is not directed at children below the minimum age required by your country to consent to online services. We do not knowingly collect their data, and we delete such accounts when we learn of them.
Retention
Account and entitlement records are kept while your account exists. When you delete your account we remove or irreversibly anonymise personal data, except where we must retain records for legal, tax, dispute or fraud-prevention reasons.
International transfers
Where data is transferred outside the European Economic Area, we rely on an appropriate safeguard under Chapter V of the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses.
Updates to this policy
We will update the date at the top of this page when this policy changes, and will notify you in the client for any change that materially affects you.
Contact us
Chartscout OÜ
Tartu mnt 67/1-13b, 10115 Tallinn, Estonia
Registry code: 17444161
privacy@buffbrigade.com
