Privacy Policy

Last updated: April 2026

XPByte is operated from the Netherlands and processes your data in accordance with the General Data Protection Regulation (GDPR / AVG).

1. Data We Collect

Account data (name, email), usage data (quests completed, XP, arena results), and technical data (IP, browser, device) for platform functionality.

2. Legal Basis

We process data based on: (a) your consent, (b) contract performance (providing the platform), and (c) legitimate interest (security, analytics with anonymized data).

3. Cookies

We use essential cookies for authentication and session management. Analytics and marketing cookies require your explicit opt-in consent. See our Cookie Policy for details.

4. Your Rights

Under GDPR/AVG you have the right to access, rectify, delete, port, and restrict processing of your data. You can withdraw consent at any time. Contact us at privacy@xpbyte.dev.

5. Data Retention

We retain account data while your account is active. Usage data is anonymized after 24 months. You can request deletion at any time.

6. Contact & DPA

Questions or complaints? Email privacy@xpbyte.dev. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).