Privacy Policy

  1. General Information

    This privacy policy applies to our game “Blossom and Decay”.
    1. Responsible Body

      Below we explain to you which personal data is collected and processed by us when using our services and offers.

      Konspiracy UG (haftungsbeschränkt)
      Geschäftsführer: Harald Goergens
      Koblenzerstr. 14
      D-60327 Frankfurt am Main,

      Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
    2. Legal Basis

      As far as a legal basis is mentioned in this Privacy Policy, they relate to the General Data Protection Regulation.

      We collect and process personal data based on the following statutory regulations:
      • Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
      • Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
      • Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
      • Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
    3. Rights of affected

      You are entitled to the following rights with regard to the processing of data by us in accordance with the respectively listed articles of the General Data Protection Regulation:
      • Right of access by the data subject to Art. 15 GDPR
      • Right to rectification according to Art. 16 GDPR
      • Right to erasure ("right to be forgotten") in accordance with Art. 17 GDPR
      • Right to restriction of processing according to Art. 18 GDPR
      • Right to data portability according to Art. 20 GDPR
      • Right to object according to Art. 21 GDPR
      Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
    4. Data Erasure and Storage Duration

      The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
  2. Actual data processing

    1. Visiting the Website

      1. Scope of Data Collection

        When visiting our website, the following data is collected and stored by our web server:
        • Information about the browser type and version used
        • The operating system of the user
        • The IP address of the user
        • Date and time of access

        The data is stored in the log files of our hosting provider.

        We also may store a device ID, if you agreed to our enhanced security measures. If you have selected to be automatically logged into your account we may also request your stored user credentials from your web browser.

        This data is not stored or processed together with other personal data of the user. This includes all data processed by us, including any game related data. We are hosting our website and databases with Google; the servers are placed within and outside the European Union, which includes third countries which have no comparable level of date protection to the European Union.

      2. Legal basis

        The legal basis for processing the data that is stored by our webserver is Art. 6 para. 1 (f) GDPR. The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.

        Storing a device ID or collecting your user credentials is based on your consent according to Art. 6 para 1 (a) GDPR.

        The legal basis for the transfer of data to Google Ireland Ltd is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard contractual clauses of the EU Commission are used in contractual relation with the provider. Google Ltd. reserves the right to have Google Inc. (US) as a subcontractor but provides additional guarantees for the processing in the United States.

      3. Purpose of data processing

        The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

        The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

        Requesting your login credentials is done in order to automatically log you into your user account, when you visit the website and the game. Storing a device ID is part of the enhanced security measures which requires a separate approval from you when you use a new device to log into your account.

      4. Duration of storage

        The logfiles will be deleted after sixty days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events. The credentials are only compared to those stored in our database and not stored separately. The device ID is stored as long as you have the enhanced security option activated.

      5. Objection and removal possibility

        The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user. You may at any time stop the processing regarding the login credentials and the device ID by deactivating the automatic login to our site, by clearing the respective cookie or deactivating the enhanced security in the options menu.
    2. Google Analytics

      1. Scope of data processing

        The website and our game use Google Analytics, a web analytics service provided by Google Ireland Ltd. ("Google"). This software collects information about how you use the website but also how you use our game and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website and the frequency of the page request. This data is collected together with your IP address.

        In particular, the following information is collected:
        • Information about the type of browser and the version used
        • The operating system of the user
        • The user's Internet service provider
        • The IP address of the user
        • Date and time of access
        • Websites from which the user's system accesses our website
        • Websites that are accessed by the user's system via our website

        Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there.

        We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.

        Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here its data processing activity.

        The data processing is essentially carried out by Google itself. Despite IP anonymization, the data is not anonymous and can be merged with other data by Google. Google can use the data for any of its own purposes, such as profiling, as well as link it with other data such as any Google accounts and also pass it on to associated US companies, e.g. Google LLC.

      2. Legal basis

        The legal basis for the processing of data when using the website is Article 6 para. 1 (a) GDPR in the form of your express consent.

        The legal basis for the transfer of data to Google is Art. 26 GDPR and Art. 6 para. 1 (a) GDPR. For any subprocessing done by Google outside of the EU Google employs the standard contractual clauses of the EU commission.

      3. Purpose of data processing

        The purpose of the processing is to analyze this website and the usage behavior of its visitors.
      4. Duration of storage

        We ourselves no longer have access to personal data after anonymization by Google. With regard to a use by Google, the duration of the storage is not known.
      5. Objection and removal possibility

        You can prevent the storage of cookies, including the generation and transmission of data to Google, by restricting or prohibiting the use of cookies in your browser software. This may result in the deactivation of non-Google-related cookies as well as the inability to use all functions of this website to the full extent.

        You can prevent the collection of the data generated by the cookie regarding your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install

        In addition, you can also revoke your consent to data collection at any time in our Cookie Bar. For this purpose, a cookie is then stored so that we can recognize that you have not consented to the use of Google Analytics.

    3. E-mail newsletter & Support

      1. Scope of data processing

        If you purchase goods or services on our website and deposit your e-mail address, we may subsequently use this information to send you product information by e-mail regarding the booked product or our similar products. In such a case, only direct advertising for our own similar goods or services will be sent by e-mail. We will also send you emails related to your bookings, such as: Order confirmations, Updates regarding the game, special events etc.

        It is also possible to subscribe to a free newsletter on our website, which contains direct advertising for our products or products of our cooperation partners. When you sign up for the newsletter, the data from the input mask will be transmitted to us or the e-mail address already stored will be used. In this case, the date and time of registration for the newsletter and the IP address used are also stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.

        When sending the product information, your e-mail address will be forwarded to an external service provider, who will be responsible for sending the newsletter on our behalf. No further use is made by the service provider. The service provider is located in the European Union but also acts from outside the European Union.

        If you contact us via email with a support request, we will store your email and all information provided therein. Our email service provider is united- domains AG . and emails are stored on their servers which may also be outside of the European Union.

      2. Legal basis

        The legal basis for the processing of the data when sending out the newsletter due to the prior acquisition of goods or services is Article 6 para. 1 sentence 1 (f) GDPR in conjunction with § 7 para. 3 UWG.

        The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is therefore in direct advertising and the increase in sales to existing customers.

        The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) GDPR.

        The legal basis for contacting in connection with current purchase is Article 6 para. 1 (b) GDPR.

        The legal basis for the transfer of the data to the newsletter service provider is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.

        The legal basis for storing support requests is Art. 6 para. 1 (b) GDPR. The legal basis for storing our emails with our email service provider is Art. 26 GDPR and Art. 6 para. 1 (b), (c), (f) GDPR.

      3. Purpose of data processing

        The purpose of storing the e-mail address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. Furthermore, for information regarding actual purchases, the proper execution of the contract is the purpose of the contact.

        The transfer to the service provider is done for the purpose of sending the newsletter as a mass mailing.

        The purpose of us storing your support request, is to answer your request and assist you.

      4. Duration of storage

        If we have received your e-mail address as part of the purchase of goods or services, it will be used for the delivery of advertising until you object to further use.

        As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the e-mail address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for an additional period of one year in case of late inquiries about the legal basis for sending a newslettery.

        The e-mails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code (“Abgabenordnung”) or the Commercial Code (“Handelsgesetzbuch”). The further e-mails are deleted as soon as no further response by the user has to be expected.

        We store support requests as long as it is reasonable that you may have any additional questions or the ticket is closed. Closed tickets may be stored another 3 months for quality insurance and possible addition requests from your side. If a ticket contains any legal requests, e.g. refunds, we may store the ticket data as long as legally required under the Tax Code and the Commercial Code.

      5. Objection and removal possibility

        You may object or revoke your consent to the use of the e-mail address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt-out of advertising for future use by email at You can not contradict the use of the e-mail address for addressing in the context of the performance of the contract or storing of business letters.

        You can not object to storing the support request.

    4. Registering for our Game & Purchases

      1. Scope of data processing

        In order to play our Game you are first required to set up a personalized game account. This requires you providing an email address, a password of your choice and a nickname which will be visible to other players. We will send a double-opt-in-confirmation email to your email address and store the time and date and from which IP address the confirmation was issued.

        As we currently do not offer any purchases for real money any purchases relate to purchases with free ingame-currency. We will use this free ingame currency in order to test our systems for the release of the actual ingame cash store.

      2. Legal basis

        The legal basis for collecting your email, password, confirmation data and nickname is Art. 6 para. 1 (b) GDPR, enabling us to provide our contractual services. Processing the purchases and storing them to your account is done based on Art. 6 para 1 (b) and (c), as we are required to keep track of your purchases and we are obliged under tax law and trade law to store all transaction data relating to purchases.
      3. Purpose of data processing

        Storing the account and confirmation data allows you to log into your account and play the game, while the confirmation data is proof for us, that you are entitled to use the email address. The transaction history is stored in order to process any requests for support from your side as well as for legal accounting purposes.

        The purpose regarding the payment data is the testing the mechanism for settlement of payments for content or in game currency, fraud prevention as well as the identifiability of the payment method by the user.

      4. Duration of storage

        The account login data will be deleted as soon as your account is deactivated or deleted. Confirmation data is stored for at least one more year, in order to reply to late authorization inquiries. The purchase history is stored in accordance with the legal requirements under tax and trade law.
      5. Objection and removal possibility

        You can not object to us storing the account login data except by terminating you game account. Regarding the payment history an objection is not possible.
    5. Playing the Game

      1. Scope of data processing

        While playing our game we will record your individual actions in the game, including any movement, combat actions, crafting production, chats and messages sent to other players etc. and may send the data to other players, if their gaming avatar is playing near your avatar and sees your action or when you address a message at the other players. This also includes inventory data of items owned by your in game avatar.

        Also when login-in into our game, the following log-data is collected and stored by our game server:

        • Information about the type of browser and the version used
        • The operating system of the user
        • Date and time of access
      2. Legal basis

        The legal basis for processing your in-game actions is Art. 6 para. 1 (b) GDPR, as it is required for providing a consistent online world, for support services and system integrity purposes as well as to maintain our service and other players and to provide support to players and Art. 6 para 1 (f) GDPR, as we use such data to optimize the game according to user statistics or to store any data about misbehavior of customers including any termination of past game accounts.

        The legal basis for processing the log-data is Art. 6 para. 1 (f) GDPR. The legal interest is the ability to use such to stabilize the service provided to the customers.

      3. Purpose of data processing

        We use the data to process a consistent world for all players as well as to enable chats between players and to allow them to exchange messages or post messages on message boards. Also, it allows you to control actions of your in-game avatar without being logged into the game. Storing the inventory allows your avatar to keep his found loot and items. Furthermore, we use such data for analyzing the usability of our game and to optimize our game. It is not used for advertising purposes. Data is used to verify support requests, to prevent breaches of our terms and conditions and code of conduct, to analyze and find software errors and to warrant the system integrity of our game. Data about breaches of our terms and conditions and code of conduct as well as any warnings to users and terminations due to breaches are stored to prevent future violations and to enable us to exercise our legal rights.

        Purpose of processing the log-data is to use such data for maintenance and security purposes enabling our engineers to find errors or attacks on our system. The data is not stored in connection with a specific user account.

      4. Duration of storage

        The data is stored for one month and afterwards anonymized, unless it is still required for the purposes detailed above. The data is deleted once it is no longer required for such purpose.
      5. Objection and removal possibility

        You can not object to our use of such data.
    6. Cookies & Locale Storage

      Cookies & locale storage are "storage areas" for data on your computer. Content providers often access files stored there via the web browser or store information there for later access. This can be, for example, the language settings for a website, the contents of a shopping cart or settings data for video playback.

      In detail, the following data packages in the form of cookies or local storage files can be accessed on our website. You have the option to refuse or accept this when loading the website. Once you have given your consent, you can revoke it at any time. In practice, you can do this by blocking cookies in your browser.

      Cookie NameTool / ProviderType (Cookie, Local Storage etc.)Storage DurationPurpose
      acceptedCookiesKonspiracyLocal StorageUp to 2 yearsStores Cookie Consent
      _gaGoogle AnalyticsCookieUp to 2 yearsA cookie that enables Google Analytics to differentiate between certain users.

Accept cookies ?

For our website to work, it uses cookies and similar technologies, including functional cookies containing settings for the website or cookies identifying your login status.

We also use Google Analytics to learn about our players. For more information please check our Privacy Policy.