Privacy Policy (GDPR)
Last updated: November 3, 2026 • Compliant with EU Regulation 2016/679 (General Data Protection Regulation) and French Data Protection Act.
1. Data Controller
The controller responsible for the processing of personal data collected on the website and client billing area is:
- Legal Entity: RXCORP (Sole Proprietorship / Entreprise Individuelle)
- Legal Representative: Salem ASSADI
- SIRET Number: 102 767 050 00010
- Registered Office: Clermont-Ferrand (63000), France
- DPO / Data Protection Contact: [email protected]
2. Data Collected & Processing Purposes
RXCORP strictly enforces the principle of data minimization: only information strictly necessary to provision and manage your game servers and provide customer support is collected.
- Account & Order Management: Full name, email address, customer ID, order history and billing invoices on Paymenter (Legal basis: Contract performance, Art. 6.1.b GDPR).
- Payment Processing: Transaction details transmitted through encrypted connections to certified PCI-DSS payment gateways (Stripe and PayPal). RXCORP does not store complete payment card numbers (Legal basis: Contract performance).
- Technical Support & Infrastructure: Support ticket communications, container IDs on Pelican console, technical network connection logs (Legal basis: Contract performance and legitimate interest).
- Accounting & Tax Records: Purchase invoices and transaction logs retained as required by law (Legal basis: Legal compliance, Art. 6.1.c GDPR).
3. Sub-Processors & Infrastructure Partners
To operate our hosting platform, we collaborate with vetted partners compliant with EU data protection regulations:
- Billing Portal (Paymenter): Open-source billing engine self-hosted on our secured physical servers located in France.
- Credit Card Processing (Stripe Payments Europe Ltd): PCI-DSS Level 1 certified payment gateway handling encrypted card processing.
- PayPal Gateway (PayPal Europe S.à r.l. et Cie, S.C.A.): Licensed financial institution in Luxembourg processing PayPal payments.
- Physical Infrastructure: Website hosting and bare-metal game server hardware deployed within France (European Union), strictly adhering to GDPR requirements.
4. Data Retention Periods
Your data is stored only for as long as necessary to achieve the stated purposes:
- Active Account Data: For the duration of your active subscriptions.
- Inactive Accounts: Archived and purged after 3 years without active services or logins.
- Accounting & Invoices: 10 years, in accordance with French Commercial Code obligations (article L.123-22).
- Terminated Server Backups: Kept for 7 calendar days before permanent, irreversible deletion.
- Network & Server Logs: 30 days for cybersecurity and intrusion monitoring, automatically overwritten thereafter.
5. Zero Data Brokering & Cookie Policy
Strict Privacy Commitment: RXCORP never sells, trades, or licenses your personal information to data brokers, ad networks, or third-party marketing companies.
Cookies & Tracking: This website exclusively utilizes necessary technical cookies and client-side settings (such as dark/light mode preference and language selection stored via localStorage). No third-party profiling, advertising, or cross-site tracking cookies are set. In compliance with European CNIL guidelines, no intrusive consent popups are needed.
6. Your Rights & How to Exercise Them
Under Articles 15 to 22 of the GDPR, you have the following rights regarding your personal data:
- Right to access and rectify: You can review and edit your profile details at any time inside your Paymenter Client Area.
- Right to erasure ("right to be forgotten"): You may request the deletion of your account, subject to mandatory accounting retention laws.
- Right to restriction of processing & right to object.
- Right to data portability.
To exercise your rights, email us at [email protected] or submit a ticket on the client portal. We will respond within a maximum of 30 days.
If you believe that your rights have not been respected after contacting us, you have the right to lodge a complaint with your national supervisory authority (in France, the CNIL — www.cnil.fr).