Privacy Policy for L2TopZone

Last Updated: December 20, 2025

Welcome to L2TopZone, your premier Lineage 2 server listing and voting platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

1.1 Account Information

When you create an account on L2TopZone, we collect:

Name and Display Name: Used for identification on the platform
Email Address: For account verification, notifications, and communication
Social Login Data: If you sign in via Facebook, Google, Twitter, Microsoft, or Discord, we collect your social profile ID, name, email, and profile picture from those platforms
Profile Picture: Either uploaded by you or obtained from social login

1.2 Server Information

If you add a Lineage 2 server to our platform, we collect:

Server name, description, and technical details
Chronicle information and rates
Server website URL and contact information
Banner images and promotional content

1.3 Usage and Analytics Data

We automatically collect:

IP Address: For security, fraud prevention, and geographic analytics
Login Activity: Last login time and session information
Voting History: Records of your votes on servers
Click Statistics: Tracking of banner and text ad clicks (anonymized)
Browser and Device Information: For compatibility and user experience optimization

1.4 Premium Services Data

When you purchase premium services or Topzone Coins (TZC):

Transaction History: Premium listings, extensions, and upgrades
TZC Balance: Your virtual currency balance and transaction log
Payment Information: Processed through secure third-party payment providers (Stripe)

1.5 Communications

Support Tickets: Messages you send us for assistance
Notifications: Records of notifications sent to you
Audit Logs: Administrative actions on your account for security purposes

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Core Services

Authenticate users and maintain secure accounts
Display server listings and process votes
Enable premium advertising and promotional features
Process TZC purchases and transactions
Provide server statistics and analytics to server owners

2.2 Communication

Send important account updates and security notifications
Deliver premium service renewal reminders
Send vote notifications if enabled in preferences
Respond to support inquiries

2.3 Platform Improvement

Analyze user behavior to improve user experience
Monitor system performance and security threats
Prevent fraud, spam, and abuse
Develop new features based on usage patterns

2.4 Legal Compliance

Comply with applicable laws and regulations
Respond to legal requests and prevent illegal activity
Enforce our Terms of Service and community guidelines

3. Data Sharing and Disclosure

3.1 We Do NOT Sell Your Data

L2TopZone does not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We share limited data with trusted third-party services:

Cloudflare R2: For secure file storage (profile pictures, server banners)
Stripe: For payment processing (we never store payment card details)
AWS SES: For transactional email delivery
Pusher: For real-time notifications

3.3 Social Login Providers

When you use social login, your authentication is handled by:

Facebook: https://www.facebook.com/privacy/policy/
Google: https://policies.google.com/privacy
Twitter/X: https://twitter.com/privacy
Microsoft: https://privacy.microsoft.com/
Discord: https://discord.com/privacy

3.4 Server Owners

When you vote or click on server listings, server owners may see:

Anonymized voting statistics
Click-through rates on advertisements
Geographic distribution of votes (country-level only)

3.5 Legal Requirements

We may disclose your information if required by law, court order, or to:

Protect our rights and property
Prevent fraud or security threats
Comply with GDPR or other regulatory requests

4. Cookies and Tracking Technologies

4.1 Essential Cookies

Session Cookies: Keep you logged in and maintain security
CSRF Protection: Prevent cross-site request forgery attacks
Dark Mode Preference: Remember your theme choice

4.2 Analytics Cookies

Usage Analytics: Track page views and user interactions (anonymized)
Performance Monitoring: Identify slow pages and errors

4.3 Advertising Cookies

Click Tracking: Measure effectiveness of premium server ads
Vote Verification: Prevent duplicate voting (12-hour cooldown)

You can disable cookies in your browser settings, but this may affect functionality.

5. Data Security

We implement industry-standard security measures:

Encryption: HTTPS/TLS for all data transmission
Hashed Passwords: Using bcrypt with salts
Two-Factor Authentication: Optional 2FA for enhanced security
Regular Security Audits: Monitoring for vulnerabilities
Access Controls: Role-based permissions for admin actions
Audit Logging: Track all administrative changes

Despite our efforts, no system is 100% secure. Please use strong, unique passwords.

6. Data Retention

Active Accounts: Data retained while your account is active
Inactive Accounts: After 3 years of inactivity, accounts may be archived
Deleted Accounts: Data permanently deleted within 30 days of deletion request
Transaction Records: Retained for 7 years for accounting/legal purposes
Audit Logs: Retained for 2 years for security purposes

7. Your Rights (GDPR Compliance)

You have the following rights regarding your personal data:

7.1 Right to Access

Request a copy of all personal data we hold about you

7.2 Right to Rectification

Correct inaccurate or incomplete information in your profile

7.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your account and associated data

7.4 Right to Data Portability

Export your data in machine-readable format (JSON)

7.5 Right to Object

Object to processing of your data for certain purposes

7.6 Right to Restrict Processing

Request temporary restriction of data processing

7.7 Right to Withdraw Consent

Withdraw consent for data processing at any time

To exercise these rights, contact us at: privacy@l2topzone.com

8. Children's Privacy

L2TopZone is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

9. International Data Transfers

L2TopZone is hosted in the European Union. If you access our services from outside the EU, your data may be transferred to and processed in the EU. We ensure adequate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify users of significant changes via:

Email notification to registered users
Prominent notice on the website
Updated "Last Modified" date at the top

Continued use of L2TopZone after changes constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related questions, concerns, or requests:

Email: privacy@l2topzone.com
Data Protection Officer: dpo@l2topzone.com
Website: https://l2topzone.com/privacy

Your privacy matters to us. We are committed to protecting your personal information and being transparent about our data practices.