Consent to Personal Data Processing

1.Purposes

• account registration and maintenance, sign-in, including through third-party services;
• concluding and performing the hosting agreement: accepting and recording payments, creating and maintaining servers, renewal, suspension and termination of services;
• service notifications (email confirmation, access recovery, renewal reminders, suspension notices);
• customer support and handling of requests and claims, including drafting a reply with an AI assistant that a staff member reviews;
• site security, abuse and fraud prevention, error diagnostics;
• referral and partner programs, calculating and paying rewards;
• visit statistics and measuring advertising and partner links (how cookies are used is described in Section 4 of the Privacy Policy);
• meeting the Operator's legal obligations under Russian law, including tax and accounting.

2.Personal data covered

• email address, display name, password (stored only as a hash), interface language and currency;
• third-party profile data when signing in through it: identifier, name, email address;
• Telegram and Discord identifier and username — when contacting support through these services or applying to the partner program;
• contents of support requests and attached files;
• orders, servers, payments and balance (amounts, statuses, payment identifiers); the Operator does not receive bank card details;
• IP address, browser and device data, date and time of visits, pages viewed, cookies;
• traffic source: UTM tags, referral or partner code, ad-click identifier (e.g. gclid).

3.Operations and methods

Collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (provision, access), including cross-border transfer, depersonalization, blocking, deletion and destruction. Processing is carried out both with and without automation (mixed processing).

4.Processing by third parties

I agree that the Operator may entrust processing of my data to the following parties to the extent required for the purposes above:

• hosting providers and data centres (Germany) — hosting the website, database and game servers;
• payment services (LAVA, Stripe, NOWPayments) — accepting payments;
• Resend email delivery (USA) — service emails;
• OpenAI (USA) — drafting support replies from the text of a request;
• analytics and advertising services: Yandex LLC (Yandex Metrica, Russia), PostHog (EU), Google (Google Ads, USA);
• Sentry error monitoring (USA) — failure diagnostics;
• Google, GitHub, Discord (USA) — signing in with an account of these services, if I choose to; Telegram and Discord — support conversations held in these services.

5.Cross-border transfer

I consent to the cross-border transfer of my data to countries that ensure adequate protection of data subjects' rights (including Germany and other EU countries) and to countries that do not (including the USA), for the purposes and to the extent set out in this Consent.

6.Term and withdrawal

6.1. This Consent is valid until the purposes of processing are achieved or until it is withdrawn. After account deletion, data is deleted within 30 days, except data the Operator must keep by law (e.g. primary accounting documents and payment records — 5 years).

6.2. You may withdraw this Consent at any time by writing to support@elysiumup.com from your account email. The Operator stops processing and destroys the data within the period set by Art. 21 of 152-FZ, except where processing is permitted without consent (items 2–11 of Part 1, Art. 6 of 152-FZ), e.g. to perform an existing contract or comply with the law.

6.3. How data is processed and protected, and your rights, are described in the Privacy Policy.