Privacy Policy
Privacy Policy for Soulbound.game
This Privacy Policy explains how Webb Technology Limited ("Soulbound", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use Soulbound.game ("the Game"), our website, and associated services. This policy complies with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and the Children’s Code.
1. Who We Are
Webb Technology Limited is a company registered in England and Wales. We develop and operate Soulbound.game, a browser-based multiplayer RPG. We are the controller of your personal data.
If you have questions or concerns about this policy, you can reach us at:
Email: [email protected]
2. What Data We Collect
We collect and process the following categories of personal data:
a. Account Information
Username, email address, Discord ID (via OAuth)
Date of account creation, login timestamps
b. Wallet & Blockchain Data
Public wallet addresses used for in-game token features
Blockchain transaction metadata (non-custodial, public ledger only)
c. Gameplay & Usage Data
Game session duration and in-game activity
Analytics on items collected, levels achieved, and quest progression
Interaction with in-game AI, voice NPCs, and user-generated content
d. Communication & Support Data
Messages sent via in-game chat, forums, and Discord channels
Support queries, bug reports, feedback submissions
e. Technical Data
Device type, browser, operating system
IP address, time zone, crash logs
f. Cookies and Tracking Data
Behavioural tracking via Mixpanel
Session management cookies (see our separate Cookie Policy)
3. How We Use Your Data
We process your data for the following purposes:
To operate and maintain the Game
To provide customer support and moderate user activity
To ensure safety, compliance, and fraud prevention
To track performance, progression, and gameplay analytics
To personalise experiences using AI-powered systems
To comply with legal obligations under UK law
4. Legal Bases for Processing
We rely on the following legal grounds under UK GDPR:
Contractual Necessity – Data required to provide the Game
Legitimate Interests – Security, analytics, development
Consent – Optional marketing communications or cookies
Legal Obligation – Compliance with law enforcement and data authorities
5. How We Share Your Data
We may share your data with:
Analytics Tools – e.g. Mixpanel, to understand player behavior
Hosting Providers – Infrastructure services to run the Game
Moderation Tools – AI tools and human moderators for safety enforcement
Legal and Regulatory Bodies – When required by law or to protect rights
Payment Platforms – All payments are processed via Discord; we do not store payment data
We do not sell your personal data.
6. International Transfers
Some of our service providers are based outside the UK. When we transfer your data internationally, we rely on appropriate safeguards including:
Standard Contractual Clauses (SCCs)
UK International Data Transfer Addendum
Adequacy decisions (where applicable)
7. Retention Policy
We retain personal data only as long as necessary for the purposes described:
Account Data
12 months after last login
Gameplay Analytics
18 months (aggregated thereafter)
Support Logs
24 months
Wallet Metadata
Indefinitely (public blockchain data)
Chat Logs (Moderation)
6 months (unless flagged for investigation)
After these periods, data is either deleted or anonymised.
8. Your Rights Under UK GDPR
You have the following rights:
Right to Access – Request a copy of your personal data
Right to Rectification – Correct inaccurate or incomplete data
Right to Erasure – Ask us to delete your data (“right to be forgotten”)
Right to Withdraw Consent – Revoke consent for optional features (e.g. cookies)
You may exercise these rights by contacting us at [email protected]. We respond within 60 days.
9. Children's Privacy
We do not knowingly collect personal data from children under 13. If we become aware that such data has been collected, we will delete it. If you believe your child has used the Game inappropriately, contact us immediately.
10. AI & Automated Decision-Making
Soulbound uses artificial intelligence to:
Power NPC interactions and synthetic voice responses
Detect abuse and moderation triggers
We ensure that:
Human review is involved in any critical moderation outcome
Players can appeal automated moderation decisions
AI systems are monitored for bias, fairness, and impact.
11. Data Security
We use technical and organisational measures to protect your data:
Encryption of sensitive data in transit
Role-based access controls
Secure hosting providers and SSL certificates
Regular security audits and vulnerability assessments
However, no system is 100% secure. You are responsible for keeping your login credentials private.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via the Game and website. Continued use of the Game constitutes acceptance of the updated policy.
By using Soulbound, you agree to the terms of this Privacy Policy.
Last updated