Privacy Policy

1. Introduction

Welcome to Breach Noir ("Breach Noir", "we", "us", or "our").

This Privacy Policy explains how Breach Noir collects, uses, stores, and protects information when you access or use our website, applications, games, interactive experiences, and related services (collectively, the "Service").

Breach Noir is an online cybersecurity-themed entertainment and educational simulation platform. The investigations, cases, challenges, characters, companies, systems, credentials, and scenarios presented within the Service are fictional simulations created for entertainment and learning purposes.

Breach Noir is not a cybersecurity consulting service, penetration testing service, security audit service, or professional security assessment platform.

By accessing or using Breach Noir, you agree to the practices described in this Privacy Policy.

2. Data Controller and Contact Information

For privacy-related matters, Breach Noir acts as the controller of personal information processed through the Service.

Privacy contact:

Email: privacy@breachnoir.com

If Breach Noir's ownership or legal structure changes in the future, this section may be updated accordingly.

3. Information We Collect

We collect only information reasonably necessary to provide, maintain, secure, and improve the Service.

3.1 Account Information

If you create an account, we may collect:

• Username
• Email address
• Password authentication data
• Account creation date
• Account preferences
• Account status

Passwords are never stored in readable form and are processed using appropriate security practices.

3.2 Gameplay Information

To provide personalized gameplay and maintain progress, we may process:

• Investigation progress
• Completed cases
• Scores
• Achievements
• Statistics
• Rankings where enabled
• Credits balance
• Daily credit allocation
• Premium access status

This information is required to operate the Service.

3.3 Premium Subscription Information

Breach Noir may offer optional paid subscriptions or premium features.

Premium features may include:

• Increased daily credits
• Additional investigations
• Additional gameplay functionality
• Exclusive content

Payments may be processed by external payment providers.

Breach Noir does not store complete payment card information.

We may receive limited information necessary to manage subscriptions, such as:

• Subscription status
• Transaction identifiers
• Payment provider account identifiers
• Subscription dates

3.4 Technical and Security Information

When you use the Service, we may automatically collect:

• IP address
• Browser information
• Device information
• Operating system
• Access logs
• Error reports
• Security events
• Fraud prevention information

This information helps us maintain platform security and prevent abuse.

4. Information You Provide

You are responsible for ensuring that information submitted to Breach Noir is accurate and lawful.

You must not submit:

• Personal information belonging to other individuals without permission
• Confidential information
• Sensitive personal data
• Illegal content
• Information obtained through unauthorized access

Breach Noir is not responsible for personal information voluntarily disclosed by users through inappropriate use of the Service.

5. How We Use Personal Information

We may use collected information to:

• Create and manage user accounts
• Provide gameplay functionality
• Save user progress
• Manage credits and premium features
• Process subscriptions
• Prevent fraud and abuse
• Protect the security of the Service
• Improve functionality and user experience
• Respond to support requests
• Comply with legal obligations

6. Legal Bases for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

Contractual Necessity

Processing required to provide the Service, including:

• Account management
• Gameplay functionality
• Premium features

(GDPR Article 6(1)(b))

Legitimate Interests

Processing necessary for:

• Security monitoring
• Fraud prevention
• Service improvement
• Abuse prevention

(GDPR Article 6(1)(f))

Consent

Where legally required, we request consent for:

• Non-essential cookies
• Optional analytics
• Marketing communications

(GDPR Article 6(1)(a))

Legal Obligations

Where processing is required by law.

(GDPR Article 6(1)(c))

7. Credits and Virtual Features

Breach Noir may use a virtual credit system.

Credits:

• Are digital access units only.
• Have no monetary value.
• Are not currency.
• Cannot be exchanged for cash.
• Cannot be transferred between users.
• Cannot be sold or traded.
• May expire according to Service rules.

Free and premium users may receive different credit allocations.

Breach Noir reserves the right to modify:

• Credit amounts
• Credit regeneration rates
• Premium benefits
• Feature availability

while providing reasonable notice where required by applicable law.

8. Cookies and Tracking Technologies

Breach Noir may use cookies and similar technologies for:

• Authentication
• Security
• User preferences
• Analytics
• Service improvement

Non-essential cookies will only be used where legally required consent has been obtained.

For more information, consult our Cookie Policy.

9. Third-Party Services

Breach Noir may rely on third-party providers, including:

• Hosting providers
• Infrastructure providers
• Payment processors
• Security services
• Analytics providers

These providers may process information necessary to provide their services.

Breach Noir is not responsible for the independent privacy practices of third-party services.

10. Data Retention

We retain personal information only for as long as reasonably necessary.

Retention periods depend on:

• Account activity
• Legal requirements
• Security requirements
• Operational needs

If an account is deleted, we may retain limited information where necessary for:

• Fraud prevention
• Security investigations
• Legal obligations
• Enforcement of agreements

11. Data Security

We implement reasonable security measures designed to protect user information.

However:

• No internet transmission is completely secure.
• No service can guarantee absolute protection.
• Users are responsible for maintaining the confidentiality of their account credentials.

Breach Noir cannot guarantee that unauthorized access, technical failures, or malicious activities will never occur.

12. International Data Transfers

Depending on infrastructure providers and service locations, information may be processed outside your country.

Where required by GDPR, appropriate safeguards will be implemented.

13. Your GDPR Rights

Where applicable, you have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to processing
• Request portability
• Withdraw consent

Requests may be sent to:

privacy@breachnoir.com

We may request verification of identity before processing requests.

14. Account Termination and Deletion

Users may request account deletion.

Upon deletion:

• Access to the account may be permanently removed.
• Gameplay progress may be lost.
• Credits and premium benefits may become unavailable.

Deletion does not automatically entitle users to refunds unless required by applicable law.

15. Children's Privacy

Breach Noir is not intended for children below the applicable minimum age required by law.

We do not knowingly collect personal information from children without appropriate authorization.

16. Changes to This Privacy Policy

We may update this Privacy Policy when necessary due to:

• New features
• Premium services
• Technical changes
• Legal requirements

Continued use of the Service after changes means you acknowledge the updated Privacy Policy.

17. Contact

For privacy questions or requests:

Breach Noir Privacy Team

Email: privacy@breachnoir.com

End of Privacy Policy