Privacy Policy

About RivWorld and this Privacy Policy
Your privacy is important to us; this is why we created this Privacy Policy so that you are aware of what information is collected, how we use it, and who we share it with.
This Privacy Policy covers our websites on the rivworld.com domain and our other websites, products, software, applications, content, data feeds and other services ("Service") on which an authorized link to this privacy policy is posted. This Policy covers our practices with regard to RivWorld users of all ages, including a unique set of practices for those under the age of 13 ("children").
If you are an EU resident, this whole Policy applies to you. However, EU residents should see Section 14 below, which will inform you in detail about the personal data we process, how we process it, for which purposes we process it, with whom we share it, on what legal basis we process and transfer your personal data and which rights you have regarding the processing of your personal data.
RivWorld is also committed to protecting the privacy of our users, including children. Please see the "Children’s Privacy and Parental Controls" section below for more information about your rights as a parent or legal guardian of our children users and the measures we take to afford children users with additional protections and comply with the Children’s Online Privacy Protection Act ("COPPA").

If you have any questions, comments, or concerns regarding this Privacy Policy and/or data practices, please contact us at support@rivworld.com.

Definitions
"Personal data" means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
"Processing" means any operation which is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or any kind of disclosure or other use. Any other capitalized term that is not defined in this Policy is defined (and has the meaning) set out in our Terms of Use.

How RivWorld Works
RivWorld works like this:

  • A user creates a username and a virtual character that is his or her identity in RivWorld.
  • Registered users interact with other users through website chat, personal messaging (within the RivWorld environment), user forums, guilds, and other similar features, with available privacy settings designed to allow users to restrict or disable communications with other users.
  • RivWorld includes a virtual currency known as Tokens; users can earn or purchase Tokens in a variety of ways, and use them to buy or sell items for their characters, for in-game items, and other uses.
  • For more information on how our service works, please see our Terms of Service.

Setting Up an Account on RivWorld
Registered users
Users who want to save play statistics and participate in the RivWorld virtual economy must create an account on RivWorld. To create a RivWorld account, we will ask you to create a unique username and password, so you can log in to your account.
Users must not create a username that reflects their own name or other personal data. Users should also not pick a password that is easy to guess, and should not share their password. For security reasons, we store passwords in encrypted form.
Usernames are used for participating in Service features and we do not use them to identify individual users outside of their activities on our Service. Usernames are not passed along to third-party companies except for our third-party service providers who use or process the usernames for purposes of helping operate our Service, such as effectuating payments and website hosting.
Users may be asked to provide or may choose to add an email address to their account for added verification and/or to enable certain features. The primary purpose for this email address is to provide account security, as this is the only way for RivWorld to check the authenticity of an account owner. In this circumstance, users under the age of 13 are asked to provide a parent email address. Users may change the email address associated with their account at any time; however, a notification will be sent to the previously provided email address upon making that change.

Additional Features and Data Collection on RivWorld
In addition to account setup on RivWorld, we may collect and process information from you in connection with the following features and activities (as applicable):
  • When you make purchases on the Service. Users can purchase virtual currency or premium subscriptions, for example, in the form of Tokens, RivWorld Plus membership, etc., and use a variety of payment methods. When making purchases, users or their parents may be required to enter billing information, including name, billing address, credit card or other payment information, and billing email. RivWorld may also retain your billing information, transaction details, and purchase history to resolve subsequent billing disputes and inquiries. RivWorld does not retain the full credit card numbers of our users.
  • When you post or otherwise transmit comments or messages on RivWorld via community features such as public chat or private chat, forums, guilds, personal posts, etc. we may collect these comments and messages, and they may be monitored, filtered and moderated for purposes such as removal of profanity, personal data, and other inappropriate conversations. We may use pre-filtered chat, comments and messages (of EU and US users over 13) for purposes such as training and improving our filter technology, except that we will not engage in these activities with private chat, comments, and messages of EU users.
  • When you contact or send communications to RivWorld, for example when you contact customer support, report a problem, or submit questions, concerns, or comments regarding our Service or its content, in which case we may collect contact information such as your email address and other important information about your inquiry or concern. This information is used to respond to your communications, fulfill your requests, or provide other customer support.
  • When you use or interact with third-party plug-ins that may be available on the Service for users 13 and older, such as third-party social media widgets, share buttons, and/or login mechanisms. These features may include social plugins from Google, Facebook, Twitter or other platforms, and may be subject to the privacy policies of these other companies as posted on their respective websites. When you use these features, certain information from your social media accounts may be accessed by or shared with RivWorld, and likewise, certain information about your use of RivWorld may be posted to your profile on those platforms
  • When you participate in contests, competitions, sweepstakes, giveaways, prize draws or other promotions that we may run on our Service or sponsor from time to time. These promotions may involve the collection and use of certain contact information (such as your name, email address, and/or phone number) for prize fulfillment purposes, as well as other information or content needed for the specific promotion.
  • When you respond to or participate in voluntary surveys, which we may offer on our Service from time to time to conduct research or demographic studies. These surveys may collect anonymous information about your likes and dislikes, game play interests and habits, general hobbies and interests, and other lifestyle information or preferences. These surveys will not collect personal data about you.
  • When you subscribe to other features or activities that we may offer from time to time on the Service and submit or upload information in connection with such features. The data being collected for such features and their intended uses will be evident at the time of data collection.
  • When you browse, navigate, or otherwise interact with the Service, as outlined in the "Cookies and Similar Technologies" section below.
You are under no obligation to provide personal data to RivWorld when requested. However, if you choose to withhold any requested information, we may not be able to provide you with certain services and features.
In addition to the specific uses above, any information that you provide or that we collect on the Service may be generally used for the following purposes:
  • To operate, maintain, and improve the Service;
  • To give you access to the Service and related features, or restrict your access;
  • To personalize the Service or content on the Service, as well as make it more user-friendly;
  • To allow you to manage your RivWorld account or account information, update your account settings, and (where applicable) make purchases or subscribe to services;
  • To communicate with you about the Service (product changes, feature updates, etc.);
  • To provide technical support or customer service;
  • To deliver advertising that may be relevant to your interests;
  • To protect the integrity, safety, or security of the Service or our users, comply with legal obligations, or enforce compliance with our Terms of Service or other restrictions placed on your use of the Service.

Cookies and Similar Technologies
Like most websites, we use cookies and other standard Internet technologies to help us improve our Service.
Cookies
A cookie is a small text file that is placed on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, for example so you don’t have to re-enter them whenever you come back to the website or browse from one page to another.
A cookie can be classified by its lifespan and the domain to which it belongs. By lifespan, a cookie is either a:
  • Session cookie which is erased when the user closes the browser; or
  • Persistent cookie which remains on the user's computer/device for a pre-defined period of time.
As for the domain to which it belongs, there are either:
  • First-party cookies which are set by the web server of the visited page and share the same domain (in this case rivworld.com domain); or
  • Third-party cookies stored by a different domain to the visited page's domain. This can happen when the webpage references a file, such as JavaScript, located outside its domain.
How we use cookies
When you visit or access the Service, we may – by means of cookies, beacons, tags, scripts, and/or other similar technologies – automatically collect technical information about the devices and software you use to access the Service, such as the type of Internet browser or mobile device you use, the website or source that linked or referred you to the Service, your IP address or device ID (or other persistent identifier that uniquely identifies your computer or mobile device on the Internet), the operating system of your computer or mobile device, and other similar technical information. These same technologies (or a combination of them) may also be used to help us:
  • Capture and store users' preferences, account settings, and certain login information (mainly for convenience, user verification, and account security);
  • Compile statistics and analytics about your use of and interaction with the Service, including details about how and where our Service is downloaded from or accessed, how often a user visits or uses the Service, the date and time of user visits to, and actions on, the Service, which areas of the Service are visited and for how long, information regarding in-game activities, and other similar traffic, usage, and trend data;
  • Mobile analytic tools to allow us to better understand the functionality of our mobile software on your device and gain insights about how mobile software is used;
  • Gather important functionality, testing, and performance data about our Service;
  • Moderate user behavior on the Service, such as protecting against payment fraud and other inappropriate activities;
  • Gather demographic information about our user base; and;
  • Perform other similar functions
You can also learn more about cookies by visiting www.allaboutcookies.org, which includes additional useful information on cookies and how to block or delete cookies that are already on your computer.
Please note, however, that by blocking or deleting cookies used on the Service, you may not be able to take full advantage of the Service and you may not be able to log on to the Service or play the RivWorld game.

Information Sharing
RivWorld may share your information as set forth below. Please note that RivWorld does not sell personal data about you to third-party companies for their marketing purposes.
Agents and contractors
RivWorld may share users’ information, including personal data like billing information or usernames, with our third-party agents, contractors, or service providers who are hired to perform services on RivWorld’s behalf. These providers may operate or support certain functions of the Service. Below is an illustrative list of functions for which we may use third-party service providers and the names of the providers we may use to perform these functions:
  • Analytics services (e.g., Google Inc);
  • Advertising services (e.g., Google Inc);
  • Billing services and payment gateway providers (e.g., Stripe); and
  • Hosting and content delivery network services (e.g., AWS).
These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. RivWorld takes steps to ensure that all service providers with access to personal data are capable of protecting the information we share with them.
Public forums and community areas
We offer users the ability to use forums and similar means of public discussion. If you use any messaging, posting, or chat functions on RivWorld, you should be aware that any personal data submitted there will be available to anyone who has access to that content, including other users, and can be read, collected, or used by other users of these forums, and could be used to send unsolicited messages. We are not responsible for how other individuals use the information posted in this manner.
Legal disclosures
We may disclose personal data about you as required or permitted by law and/or comply with a judicial proceeding, court order, or legal process served on our Service. To the extent permitted by applicable law, we also may disclose personal data about you in response to a request from law enforcement agencies, regulators, or other public agencies (including schools or children services) or if such disclosure may prevent the instigation of a crime, facilitate an investigation related to public safety or protect the safety of a child using our Service, protect the security or integrity of our Service, or enable us to take precautions against liability or to protect our rights.
Business transfers
Information about our users, including personal data, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets. Where necessary, we will inform you of such disclosure and obtain your consent.
Anonymized information
We share aggregated, automatically-collected, or otherwise non-personal data with third parties for various purposes, including (i) compliance with reporting obligations; (ii) for business or marketing purposes; (iii) to assist us and other parties in understanding our users' interests, habits and usage patterns for certain programs, content, services, advertisements, promotions and/or functionality available through the Services. We do not share personal data about you in this case.

Security and Data Retention
Security
The security of your personal data is important to us. When you enter sensitive information (such as credit card numbers) on our order forms, RivWorld (or the service provider operating the function on our behalf) will encrypt that information using secure socket layer technology (SSL) or similar technologies. We have security measures in place to attempt to protect the personal or other sensitive information submitted to us against the loss, misuse and alteration of personal data under our control. While we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use reasonable efforts to prevent it. No method of transmission over the Internet, or method of electronic storage, is 100% secure.
Retention
RivWorld may retain users’ account data internally for the following purposes:
  • Billing information and transaction histories are retained to resolve subsequent billing disputes and inquiries;
  • User account history is retained to support subsequent customer service inquiries and to provide, improve and develop the Services;
  • To promote safety and security on and for the Services; and
  • To comply with legal obligations.
We may retain your information for as long as is necessary and relevant to your use of the Service and our operations, which may include retaining your information beyond the end of your use of the Service.
External links
Our Service may, from time to time, contain links to external sites or applications. We are not responsible for the privacy policies or the content of such sites or applications. To make clear when you are linking to a third-party site or application, we may display a warning message informing you when you are leaving our Service.
Children's Privacy and Parental Controls
We recognize that children deserve added protections with regard to their personal data and privacy online. For this reason, when users under the age of 13 register for the Service, their account is automatically set to "Privacy Mode." This means that children users will not have access to certain features, such as social media plug-ins, some forms of third-party advertising, and certain types of notification alerts.
When a child creates an account on RivWorld, we may collect a username, password, birthdate, and parent email address. This information is used to give the child access to the Service (with certain default settings) and to communicate with the parent about the child’s account. For example, we may use the parent’s email to send an email notification about the child’s account creation and an invitation for the parent to review, update settings, and approve of their child's account. We may use the birthdate the child provides when signing up for the Service to determine which features on RivWorld the child should have access to and to determine when the child will turn 13 years old and can be given broader access to features on our Service. In general, we will not use or share account information (including personal data) from your child’s account, except for the permissible purposes stated in this Privacy Policy, and, if required by law, only with the prior verifiable consent of a parent or legal guardian.
To make any requests for changes to your child’s account or requests for the removal of personal data collected about you or your child from our Service (as applicable), or to request that we stop the further collection or use of your or your child's personal data in connection with the Service (as applicable), please contact support@rivworld.com. We offer all accounts, including children accounts, the ability to modify chat/communication settings (for example, limiting interaction to just friends or no one), as well as a special "Restricted Account Mode" which turns off all forms of chat and public commenting and which allows the user to access only a selection of filtered games on RivWorld. We recommend that parents familiarize themselves with all of the safety features and parental controls available in the Settings area of the Service and to accompany their children when they are playing online.
We proactively filter all public and comment areas of the Service (such as chat, forums, guilds, personal posts, etc.) to remove references to addresses, emails, phone numbers, or other personal data regardless of security and privacy settings. All text is also filtered for profanity, phishing, and adult or suggestive content. Our system uses a combination of human and automated processes. However, like all filtering technology, our systems are not 100% effective.
In general, if you are under the age of 13, it is a good idea to talk to and ask your parent(s) or guardian(s) for permission before using or playing on the Service. If you do not get such permission, you should not use our Service. Parents should contact RivWorld immediately if they have any concerns regarding the Service. Please see the Contact Information section below for further details.

Accessing and Updating Your Personal Data
If personal data about you changes, or if you no longer desire to use our Service, you may correct, update, amend, or deactivate your account under your account settings or by contacting RivWorld using the information set out above in Sec. 1. We will respond to your request within a reasonable timeframe. For children under the age of 13, please see the "Children’s Privacy and Parental Controls" section above.

Storage and International Transfer of Your Personal Data
RivWorld is based in the U.S. Your personal data which we collect are sent to and stored on secure servers located in the United States of America. Such storage is necessary in order to process the information.
RivWorld operates globally and we may transfer the personal data that we collect from you to our other offices and/or to the third parties mentioned in the circumstances described above (see "Information Sharing"), which may be situated outside of your country or regional area, and may be processed by staff operating outside your country or regional area. In particular, information provided to us or collected by us likely will be transferred to and processed in the United States by us or our agents and contractors. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in your country of residence. Wherever we transfer your personal data, we will take reasonable steps to ensure that your privacy rights continue to be protected.

Additional Information for EU Residents
In the course of visiting our websites and apps, and/or using our services and products, we may process the following personal data:
  • Login information, which may include your IP address, device type, name, date and time of your visit, information on your browser version, information on your operating system, including language settings, MAC addresses, and User ID. We will process this information to provide you with the websites, apps and our online services. The legal basis for this processing activity is Article sec. 1 sent. 1 lit. b ("performance of a contract") and lit. f ("legitimate interest") GDPR. It is our legitimate interest to guarantee the websites' stability and security.
  • Account information, e.g. information such as your name, username, login and password details, location information, user-generated content, contact details and other personal data that are used for participating in the Service feature we are offering. We process this information to provide our Services to you. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR ("performance of a contract").
  • Email addresses you provided us with for added verification and/or to enable certain features. The bases for processing this personal data are Article 6 sec. 1 sent. 1 lit. b ("performance of a contract") and f ("legitimate interest") GDPR. RivWorld has a legitimate interest of providing a safe and secure Platform, especially to protect under-aged Users.
  • Billing and payment information, when you purchase virtual currency or premium subscriptions, including your name, billing address, credit card or other payment information and billing information. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR ("performance of a contract"). We may also retain transactions details and purchase and payment history. The legal basis for processing these personal data is our legitimate interest in being able to resolve subsequent billing disputes and inquiries, Article 6 sec. 1 sent. 1 lit. f GDPR ("legitimate interest").
  • Information relating to contacting our customer service, e.g. when you report a problem, submit questions, concerns or comments. We may process your email address, your name and information relating to your inquiry or concern in order to respond to your communications, fulfill your requests, or provide other customer support. This processing activity is based on your (implicit) consent according to Article 6 sec. 1 sent. 1 lit. a GDPR and/or Article 6 sec. 1 sent. 1 lit. b GDPR ("performance of a contract"), depending on the initial purpose for contacting our customer support.
  • Comments or messages you post or transmit on RivWorld via public chats, forums, guilds, personal post, etc. We process this information to monitor, filter and moderate this information for the purposes of being able to remove profanity, personal data, and other inappropriate conversations. Additionally, we may use pre-filtered comments and messages for other purposes such as training and improving our filter technology. The legal basis for this processing activity is RivWorld’s legitimate interest in being able to defend ourselves from possible liability claims that may arise from unlawful comments posted by you, Article 6 sec. 1 sent. 1 lit. f GDPR ("legitimate interest"). Please note that any personal data submitted by you in forums and similar means offered by us is available to anyone who has access to this forum including other users. The personal data posted by you can be read, collected or used by other users of these forums and could be used to send unsolicited messages.
  • Information relating to your use of or interaction with third party plug-ins, e.g. social plugins from Google, Facebook or Twitter. When you use these features, certain information from your social media accounts may be accessed by or shared with RivWorld, and likewise, certain information about your use of RivWorld may be posted to your profile on those platforms. The legal bases for this processing activity are Article 6 sec. 1 sent. 1 lit. a ("consent") and f ("legitimate interest") GDPR. We have a legitimate interest to improve your website experience and to optimize our service.
  • Information processed to enable advertising. To market our services, inter alia, via social media platforms in order to bring new users to our websites and to maintain and increase our user base, we may process personal data such as IP addresses, information on users’ browser or operating system, including language settings, location information and user names or user IDs. The legal basis for the processing of this data is RivWorld’s legitimate interest in maintaining our user base, bringing new users to our websites and informing (potential) users about interesting events, Art. 6 sec. 1 sent. 1 lit. f GDPR ("legitimate interest").
  • Information relating to your participation in contest, competitions, sweepstakes, giveaways, prize draws or other promotions that we may run on our Service or sponsor from time to time. We may process certain contact information (such as your name, email address, and/or phone number) for prize fulfillment purposes, as well as other information or content needed for the specific promotion. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR ("performance of a contract").
Please note that we do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.
Personal data of minors
Please note that when users under the age of 13 register for the Service, their account is automatically set to "Privacy Mode." This means that these users will not have access to certain features, such as social media plug-ins, some forms of third party advertising, and certain types of notification alerts.
When a minor creates an account on RivWorld, we may process a username, password, birthdate and parent email address. We process this information to give the user access to the Service and to communicate with the parent about the minor’s account (if a parent email was provided). For example, we may use the parent’s email to send an email notification about the child’s account creation and an invitation for the parent to review, update settings, and approve of their child's account. We may use the birthdate the child provides when signing up for the Service to determine which features on RivWorld the child should have access to and to determine when the child will turn 13 years old and can be given broader access to features on our Service. This processing activity is based on Article 6 sec. 1 sent. 1 lit. b GDPR ("performance of a contract"). In general, we will not use or share account information (including personal data) from a minor’s account except for the permissible purposes stated in this Privacy Policy, and, if required by law, only with the prior verifiable consent of a parent or legal guardian (Article 6 sec. 1 sent. 1 lit. a and Article 8 sec. 1 GDPR).
Data sharing
RivWorld may share users’ information, including personal data like billing information or usernames, with our third party agents, contractors, or service providers who are hired to perform services on RivWorld’s behalf. These providers may operate or support certain functions of the Service. Below is an illustrative list of functions for which we may use third party service providers and the names of the providers we may use to perform these functions:
  • Analytics services (e.g., Google Inc);
  • Advertising services (e.g., Google Inc);
  • Billing services and payment gateway providers (e.g., Stripe); and
  • Hosting and content delivery network services (e.g., AWS).
The legal basis for this data transfer and processing activity is Article 28 of GDPR in conjunction with the data processing agreements we concluded with respective third-party agents. These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. RivWorld takes steps to ensure that all service providers with access to personal data are capable of protecting the information we share with them.
Legal disclosure
We may disclose personal data about you, including the content of your communications on the Service, to comply with legal process, including court orders and subpoenas, served on our Service. In addition, we also may disclose personal data about you, including content, in response to a request from law enforcement agencies, regulators, or other public agencies (including schools or children services), or if such disclosure may (i) prevent the instigation of a crime, (ii) facilitate an investigation related to public safety or protect the safety of a child using our Service, (iii) protect the security or integrity of our Service, or (iv) enable us to take precautions against liability or to protect our rights. The legal basis for such disclosure is Article 6 sec. 1 sent. 1 lit. c ("compliance with legal obligation") and lit. f ("legitimate interest") GDPR. It is our legitimate interest to comply with the legal requirements of EU Member States and U.S. law.
Storage and international transfer of your personal data
RivWorld is based in the U.S. Your personal data that we collect is sent to and stored on secure servers located in the United States of America. Such storage is necessary in order to process the information.
Some of our agents and third party service providers are located outside the European Union, e.g. the United States. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in your country of residence. Wherever we transfer your personal data, we will take reasonable steps to ensure that your privacy rights continue to be protected, e.g. conclude the EU Standard Contractual Clauses with third parties.
Your rights
If you are a user based in the European Union, you may be entitled to exercise some or all of the following rights:
  • Require (i) information whether your personal data is retained and (ii) access to or duplicates of your personal data retained, including the purposes of the processing, the categories of personal data concerned, and the data recipients as well as potential retention periods;
  • Request rectification, removal or restriction of your personal data, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
  • Refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
  • Object, on grounds relating to your particular situation, to processing of your personal data, in case such processing is either based on our or a third party’s legitimate interests or on a performance of a task carried out in the public interest. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your personal data or present you our compelling legitimate grounds for an ongoing processing;
  • Object to the use of your personal data for direct marketing at any time;
  • Take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators; and/or
  • Require (i) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side. Where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller.
You may (i) exercise the rights referred to above, (ii) pose any questions, or (iii) make any complaints regarding our data processing by contacting us under the contact details set out above in Sec. 1.
Privacy Policy Changes and Updates
We may update this Privacy Policy to reflect changes to our information practices at any time, so please review it frequently. If we update this Policy, changes will be reflected on this page and we will update the "Last Updated" date posted below. If we make any material changes to this Privacy Policy, we will attempt to notify you by email (by sending an email to the email address specified in your account, if an email account is associated with your account), or by means of a prominent notice on this website prior to the change becoming effective. We will obtain prior parental consent if any changes we make to this Policy affect users under the age of 13 in a way that requires such consent under COPPA or the age of 16 in a way that requires such consent under the European General Data Protection Regulation.

Last Updated: April 15, 2019