Privacy Policy

Last updated: 2026-09-14. The English version is the binding one. Operator: the account owner, reachable at [email protected] (legal entity to be published before public launch) (see the imprint at https://carbonui.app/imprint). Contact for anything about your data: [email protected].

1. What we store and why

Your sign-in. CARBON signs you in with Telegram. We store your Telegram user id and username, the chat id the bot talks to, and your language choice. Purpose: to know which dashboard is yours and to send you the alerts you switch on. Legal basis: the contract with you.

Your game accounts. To act for an account you add, CARBON stores the game login details you give it (e-mail and password or session material) and the game data it reads for that account: cities, resources, buildings, units, movements, messages and similar. Your login details are never shown to other customers and never shared with anyone. Passwords and session material are stored encrypted (AES-256-GCM) with a server-side key, and our off-site backups are themselves encrypted before they leave the server. Legal basis: the contract with you.

Connecting an account with the browser extension. If you connect a game account with the CARBON browser extension, you sign in to Gameforge yourself, in your own browser, and the extension - only when you click *Connect* for that account - reads the one Gameforge lobby session cookie (`gf-token-production`) for the account being connected and sends it to CARBON over HTTPS. It reads nothing else: no other cookies, no other sites, nothing else on your computer, and it does nothing until you click. CARBON stores that session material encrypted, as described above, to act for the account you connected, and keeps the session alive with routine game requests so you do not have to sign in again. You may only connect accounts you are authorized to use. Legal basis: the contract with you.

Orders. When you buy a plan we store the order (slots, term, amount, any coupon, credit or reduced price applied, and whether you switched auto-renew on), the PayPal transaction id and the date, and - if you ask for a refund - the request, the decision and its reason. We never receive your card or bank details; PayPal handles the payment on its own pages under its own privacy policy, whether you pay with a PayPal account or as a guest with a card. If we make you an offer to stay at a reduced price, we store that it was made, when, and whether you accepted. Legal basis: the contract, and the tax law that requires us to keep invoices.

Proxies. Every plan includes a proxy for each of your accounts, assigned automatically when the plan starts and when you add an account; we store which IP is assigned to which of your accounts. Requests your accounts make to the game go through that IP.

Support, bug reports and feature requests. A plain message to our Telegram bot (anything that is not a command) opens a support ticket: we store the chat id, your Telegram name, the message, our replies and the times, so that a person can answer you in the same chat. A bug report or feature request sent from the dashboard stores what you typed (title, description, category, priority, the feature it concerns), your customer id and name and the page and browser version you sent it from, and is delivered to our support mailbox by e-mail. E-mail you send to [email protected] is kept as correspondence. Legal basis: the contract with you (support) and our legitimate interest in fixing faults and improving CARBON (reports).

Server logs. Our server keeps technical logs (IP address, time, request path, errors) for security and debugging. They are deleted after 30 days.

Newsletter. If you switch on the newsletter on your account page, we store that choice, the e-mail address you give us for it, the date and the language you chose. You can switch it off there at any time and we keep the record of when you did. Legal basis: your consent.

Community (Discord). If you link your Discord account with `/verify`, we store your Discord user id and tag and the time of linking, so our bot can give you the role your plan carries; unlink on your account page and the link is deleted. In our own Discord server the bot reads messages only to enforce the server rules (invitations to other servers, mass mentions) and stores the fact that a message was removed - the member, the rule, the time - not the message. Joining the server and pressing the button of a giveaway stores your Discord user id with that giveaway; a win stores it together with the CARBON account the prize was granted to. Discord itself is a separate service with its own privacy policy. Legal basis: the contract with you (linking, prizes) and our legitimate interest in a safe community (moderation).

Affiliate programme. Every customer has an invite code. When a new customer signs in after opening someone's invite link, we store who invited whom and when, and every credit, reversal, spend, restore and adjustment on both balances, with the order it belongs to. The person who invited you can see your first name or username, the date you joined and the credit your purchases produced for them - not what you bought or paid for it. Legal basis: the contract with you (the programme is part of the terms).

Learning data. CARBON's in-app learning agent ("CARBONATOR") learns game rules from what it observes. Facts about one account stay with that account. Only account-neutral game facts (for example how long a building takes at a given level) are kept as shared knowledge, with a count of how often they were observed, never with a customer or account name.

2. What we do not do

We do not sell or rent personal data. We do not show ads and do not use advertising or analytics trackers. We do not read your Telegram messages beyond what you send to our bot yourself - its commands, and the plain messages that open a support ticket.

3. Who else processes data for us

We use a small number of service providers, each bound by contract to act only on our instructions: a hosting provider in the European Union for the servers, a network provider that sits in front of the servers for protection, delivery and inbound e-mail routing, a provider of IP addresses for the proxies included in every plan, a storage provider in the European Union for encrypted backups, an e-mail delivery provider through which the mail we send you and the reports you send us pass, and a mailbox provider that holds our support mailbox. Where a provider processes data outside the EU/EEA, the transfer rests on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. Four providers you interact with directly act under their own policies: PayPal (payments — we never see your card or bank details), NOWPayments (crypto payments — we never see your wallet), Telegram (sign-in and alerts) and Discord (the optional community server). We will name any provider on request, and we will tell you before a new category of provider receives personal data.

4. Cookies

CARBON uses two cookies, both HttpOnly, sent only over HTTPS and free of personal data: the session cookie that keeps you signed in, and `carbon_ref`, set only when you open someone's invite link (`/r/CODE`). It holds that code alone, lives 30 days, is read once - at your first sign-in, to record who invited you - and is ignored if you already have an account. No advertising, analytics or third-party cookie is set. The browser extension sets no cookie of its own; it reads the one Gameforge lobby cookie described in section 1, only when you click *Connect*. Your browser also keeps your dashboard preferences (language, layout, your last checkout choices, which guide steps you have seen) in its local storage; nothing is sent to us from there.

5. How long we keep data

Game account data: until you delete the account from CARBON, and at most 90 days after your last paid term ends. Sign-in data, Discord link, affiliate code and ledger: until you ask us to delete your CARBON account (the ledger lines that belong to other customers' balances are kept with their customer id only). Newsletter consent: until you withdraw it, plus the record that you did. Giveaway entries: 90 days after the giveaway closes; a granted prize stays with the order. Support tickets: 90 days after they are closed. Bug reports and feature requests: until handled, then at most 12 months. Support e-mail: 12 months after the last message. Orders and invoices: as long as tax law requires. Logs: 30 days. Backups: encrypted, rotated within 90 days.

6. Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, and take it with you, by writing to [email protected]. We answer within 30 days. If you live in the EU/EEA or the UK you can also complain to your data protection authority.

7. Children

CARBON is for adults. We do not knowingly store data about anyone under 18; if you believe we do, write to [email protected] and we will delete it.

8. Changes

We announce changes to this policy on the dashboard and by Telegram at least 14 days before they take effect.