Monster Pedestal Box
Boosted CreatureBoosted Boss
Contentbox headline
Tibia Privacy Policy
CipSoft GmbH, Prüfeninger Straße 20, 93049 Regensburg, Germany (referred to herein as "CipSoft") respects the privacy rights of all users and is aware of the importance of protecting stored personal data. Substantial organisational and technical measures have been taken to ensure the security of all personal data that is collected. This privacy policy explains in detail which information is collected and for which purposes it can be processed and used.
  1. CipSoft collects, processes and uses personal data for the conclusion and execution of a user's service agreement with CipSoft. Personal data comprises stock data such as a user's name and address, as well as usage data such as account number, password and IP address.

  2. CipSoft collects the usage data that is automatically determined and transmitted by web browsers or any other client software whenever CipSoft's websites (tibia.com, cipsoft.com or any other of CipSoft's websites) or one of CipSoft's other online services is used. Such usage data includes, but is not limited to, IP address, browser version, access time, information on the type and the aim of requests and data about hardware and software of the user's computer system. It is saved in protocol files, with some of the information being stored in anonymous form. Among other purposes, this data is used by CipSoft for the compilation of anonymous statistical surveys on the use of their online services and for the error analysis and the optimisation of their service.

  3. CipSoft uses, among other things, cookies to collect, process and use usage data in order to allow, for instance, the management of accounts and of personal settings, the participation in the discussion forum, and the use of further personalised services.

  4. CipSoft uses device cookies to improve account security. These are stored on the customer's device and used for validation when logging in. CipSoft only stores device cookies for a maximum of 24 hours in the event of failed login attempts. This period can be adjusted depending on technical necessity. These measures serve to protect player accounts from unauthorised access and constitute a legitimate interest on our part in accordance with Art. 6 para. 1 lit. f GDPR.

  5. CipSoft collects, processes and uses stock and usage data, to the extent that is necessary in individual cases, if it is required to reveal and to stop fraudulent behaviour or any other form of using CipSoft's services which violates legal regulations or the service agreement. In particular, CipSoft reserves the right to log, process and use information such as the time and the content of conversations and expressions of opinion that take place in their online services if there are complaints, reports or other credible indications of behaviour that violates legal regulations or the service agreement, for example the serious insulting of other users. This regulation extends to all parts of CipSoft's online service, including, but not limited to, guild channels, private channels and private messages.

  6. CipSoft collects, processes and uses personal data in connection with complaints and requests to their user support in order to comply with requests in as efficient and satisfactory a manner as possible. Data that is collected for such purposes includes, but is not limited to, the email address, the date of the contact and its content. Also, CipSoft processes and uses this data to compile anonymous statistical surveys for the optimisation of their customer support.

  7. CipSoft collects, processes and uses personal data for the purpose of conducting marketing actions such as the sending of emails that contain general information or promotional content, provided that the user agreed to receiving such emails separately during the account creation process or at any later time by selecting the option "Newsletter" on the account page. Every user can unsubscribe from receiving this kind of information at any time. This can either be done by deselecting the aforementioned account option "Newsletter" or by directly clicking on the unsubscribe link in any received newsletter. Also, CipSoft processes and uses personal data to compile anonymous statistical surveys for the purpose of improving their range of services.

  8. CipSoft displays character names to all visitors on all of CipSoft's websites as well as to all users in their online services in connection with certain game activities of a user in order to allow other users to selectively contact this user. This occurs, for example, when the user uses characters online, when they act as parts of character associations, or possibly when they are registered in high score lists. Furthermore, CipSoft generally makes usage data of characters, for example the time of its most recent use or information on its death, available to all visitors on all of CipSoft's websites as well as to all users in CipSoft's online services. CipSoft makes information, such as the record of rule violations or the list of defeated characters, available to certain other users, who have a supervisory role among the community of users.

  9. In so far as the transfer of data to third parties is not explicitly allowed by law, CipSoft
    • passes on personal data, to the extent that is necessary, to law enforcement and supervisory authorities for the purpose of preventing dangers to the national or public security as well as for the prosecution of criminal offences.
    • passes on the name, address and, to the extent that is necessary in individual cases, further personal data of users to its partner companies, for example for the purpose of handling payment transactions or to provide other services in the framework of the users' service agreement with CipSoft.
    Third parties may possibly be based in countries outside of the European Union, but they are bound to protect personal data to the same extent as CipSoft. CipSoft will not, aside from the aforementioned cases, pass on personal data to third parties, and solely employees of CipSoft have access to personal data in order to fulfil the tasks specified above.

  10. CipSoft processes IP addresses to measure the effectiveness of ad campaigns, track game progress and improve the gaming experience for new players. The purpose is to identify players who join via an ad campaign. However, this data will not be used to send individual advertisements or promotional emails to these players.
    Therefore, the IP address at the time of software download is compared to the IP address at the time of account registration. If they match, the account is associated with details such as the ad partner's name and campaign ID for billing purposes. This practice aligns with CipSoft's legitimate interest according to Art. 6 para. 1 lit. f GDPR.

  11. To increase the number of players, CipSoft uses advertising campaigns on its partners' websites, among other things. This allows CipSoft to identify new players who have created an account through an advertisement and to measure the effectiveness of the campaigns. Only when an account has been created, the so-called Click-ID is passed on to CipSoft's external advertising partners. This Click-ID is not personally identifiable, but may be combined with other information by CipSoft's partners:

    Google Ads: https://safety.google/privacy/ads-and-data/
    Meta: https://www.facebook.com/privacy/policy/
    CPMStar: https://www.cpmstar.com/privacyPolicy.html

    Since CipSoft provides its products free of charge to every player, the Click-ID is an important part of the revenue. The legal basis is therefore Article 6 para. 1 lit. b of the GDPR and is part of the account creation process.

  12. CipSoft provides users with the option to export Tibia Coins to a blockchain and import it from a blockchain to get Tibia Coins back.

    To ensure this functionality, CipSoft needs to process the following data:
    • Blockchain addresses: For each export and import of Tibia Coins, CipSoft stores the respective destination and source blockchain address.
    • Account information: The blockchain addresses are associated with the user's account information.

    By storing the blockchain address in connection with the user's game account, a link is created that cancels the anonymity of the blockchain address. CipSoft does not use this link for any other purpose and it is not further analysed or passed on to third parties.

  13. Our website uses Reown, a service provided by Reown Inc, 200 Continental Drive Suite 401 Newark DE 19713 USA, to give you the opportunity to connect your wallet. If you have consented to its use (Art. 6 para. 1 lit. b GDPR), your browser will send encrypted requests to the Reown servers when using Reown, which will then forward the request to your wallet. When you scan the Reown QR code, your wallet address is transmitted to us. To ensure functionality, Reown stores information in your local storage. You can revoke your consent at any time via our consent banner.
    If you would like to find out more about data processing by Reown, please read the Reown Privacy Policy.

  14. If you give your consent, we will use certain data (such as your account activity, preferences, interactions, pseudonymized identifiers, and interest profiles) to show you personalised advertising on external platforms and partners including Google, Meta (Facebook, Instagram), Reddit, and others. These platforms may then display tailored ads based on your profile. The legal basis for this processing is your consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time via your account settings. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

    In addition, for the evaluation and optimisation of our advertising campaigns, we may transmit specific technical event data (e.g., a so-called click ID) to advertising partners such as Google Ads on a server-side basis. This processing takes place on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR), as no personal data within the meaning of the GDPR is involved and no access to end devices occurs (ยง 25 TDDDG does not apply). A linkage with personal data or the use for profiling or remarketing purposes does not occur.
CipSoft may change this privacy policy at any time. All users are required to review this policy at regular intervals to keep themselves informed about any changes.

Users have the right of access to their personal data being processed by CipSoft (Art. 15 GDPR) as well as the right to rectify (Art. 16 GDPR) or erase (Art. 17 GDPR) these personal data. Furthermore they have the right to restriction of processing (Art. 18 GDPR), the right to object to processing of personal data (Art. 21 GDPR) and the right to data portability (Art. 20 DSGVO). Users can exercise these rights by sending an email to [email protected]. If users revoke their declaration of consent to the processing of their personal data, their accounts at CipSoft will be blocked, and CipSoft's personalised services will no longer be available via these accounts.

Users who have any questions about this privacy policy or about the processing of their personal data can also contact CipSoft's data protection officer Christian Volkmer, Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg, Germany, telephone: +49 941 2986930, email: [email protected]. In case the data protection officer is unable to answer the request to their satisfaction, users have the possibility of lodging a complaint with the supervisory authority that is responsible for their state or country.

(printable version)