Last updated: 19.11.2025
OneState™ (the “Game”) is provided to you under the End User License Agreement (hereinafter “Contract”) available through https://chillbase.net/onestate-eula.html by CHILLBASE LTD, a private limited company incorporated under the laws of Republic of Cyprus, registered on April 21, 2020. Registered address: Elenis Loizidou 14, Office 201c, Strovolos 2042, Nicosia, Cyprus. E-mail: [email protected].
In this Policy, «CHILLBASE», «CHILLBASE LTD», «OUR» «US» «WE» means CHILLBASE LTD.
This Privacy Policy describes how we collect, use and process your Personal data with regards to the Game, which may include your name, e-mail address, game preferences, etc. as further described below.
We may obtain your personal data from the following sources:
We may collect and process your Personal data:
You will be asked to provide us with the following Personal data: login, email address, and password (hashed, not stored in plain text).
Lawful basis for processing this Personal data: Contract.
You can create a Game account by logging in through a social network or using third-party credentials.
In this case, we only collect such personal data that you have agreed to share with Us via the interface and in accordance with settings of relevant social media, website, or third-party platforms. To understand how your data is processed and shared by social media, website, or third-party platforms please, review the privacy policies provided by respective platforms.
After your account is created, we will also use this information to provide you with a convenient way to log in to the Game via social networks or third-party credentials.
Lawful basis for processing this Personal data: Contract.
We collect and process the following Personal data: payments on Google Play or iOS App Store, Client ID, Transaction ID, details of transaction (product purchased, price, currency, purchase date and time, purchase status, payment system and method), transaction history.
Lawful basis for processing this Personal data: Contract.
We collect and process the following Personal data: Client ID, Transaction ID, details of transaction (product purchased, price, currency, purchase date and time, purchase status, payment system and method), information about refunds or chargebacks.
Lawful basis for processing this Personal data: Contract.
We collect and process:
Lawful basis for processing this Personal data: Contract.
We may process your Personal data for the purpose of detecting violations of Game EULA and Game rules, investigating processes, taking necessary actions and preserving evidence of any such violations. This Personal data includes: Client ID, technical identifiers (e.g. Server ID), IP address, user name, country/region, device information (Device ID, device platform, device type and model, device OS version), records of refunds or chargebacks, in-game chat records related to Contract violations as per Section 4 of this Privacy Policy and any evidence containing your personal data if and when provided to us either by you or third parties, technical logs generated during your use of the Game, which may include: your game data such as information about game activity, achieved game levels, rewards, rankings, completed game missions, statistics including the game time or the use of the various features, information about actions related to the account (e.g. information about username changes, email address changes and password changes, requests for password or account recovery, information about account deletion), details regarding the suspension of the account or account reactivation, date and time of game launches, including date and time of the first and last launch, number of launches.
Lawful basis for processing this Personal data: Contract.
When you enable or use in-game chat features we may process certain Personal data:
Public-facing chats. When you use in-game public-facing chat functionality, other players may see the following information about you: in-game user name, in-game phone number (virtual number generated within the game, not linked to any real-world phone number) and the content of the messages you post or send. This information is public within the chat and may be visible to ChillBase, game moderators, and any player with access to the relevant chat.
By using any chat functionality provided in the Game, you acknowledge that ChillBase is not responsible for problems or damages resulting from your disclosure of personal information in chat. You are responsible for the information you choose to share.
IMPORTANT SAFETY NOTICE: PLEASE DO NOT SHARE ANY SENSITIVE INFORMATION ABOUT YOU WITH OTHER PLAYERS, such as real phone numbers, email addresses, home addresses, social media profiles, real full names, government IDs, payment card details, account identifiers or other personal identifiers. Once disclosed in a public chat, we cannot guarantee your protection from scams, phishing, or other risks.
As a general rule, we do not record or store player’s messages or voice chat conversations, except in the cases described in Section 4 of this Privacy Policy. However, we may process certain personal data during gameplay sessions to enable the delivery of messages and communication between players, such as Client ID, in-game user name, IP addresses, technical metadata (e.g. message timestamps), the content of the messages.
Lawful basis for processing this Personal data: Contract.
In order to conduct audience research, surveys, or interviews and collect relevant feedback to better understand our player community and improve the Game experience, depending on the type of research activity, we may process the following Personal Data: your Client ID, in-game user name, discord nickname or discord ID, email address, information about your game activity and experience and other information that you voluntarily provide when filling out our survey forms, answering questions during interviews or playtests, or demonstrating your gameplay.
In most cases, the results of these research activities are reported in aggregated, anonymized form and will not identify or single out any individual player.
Lawful basis for processing this use of Personal data: legitimate interest.
We may use your Personal data to measure, analyse, and optimize the performance of our marketing campaigns and user acquisition activities across different advertising partners, as well as to provide you with personalised advertisements and promotional content outside of our Game through third-party advertising partners (such as Meta/Facebook Ads, Google Ads, and others).
For this purpose, the following Personal data may be used: technical Identifiers, such as advertising identifiers, IP address, device information (such as: Device ID, device platform, device type and model, device OS version, system language, memory, time stamp and zone, device motion parameters and carrier), user agent, engagement information, user interactions within the app.
Lawful basis for processing this Personal data: consent.
We analyse your Personal data to identify how to improve our Game and features to make them more suitable and convenient for our players, and enhance the overall user experience. For this purpose we may process Сlient ID, technical and performance data such as network status (e.g., connection type, latency, connection details), device information (Device ID, device platform, device type and model, device OS version) and device performance metrics (e.g., temperature, memory or CPU usage, FPS, battery level), application version, and other diagnostic parameters, crash logs/reports, user communications with support, gameplay and usage data (such as session duration, in-game actions, and feature usage), and aggregated analytical data (such as retention rates, A/B testing results, etc.).
Lawful basis for processing this Personal data: legitimate interest.
To provide user support, including addressing and resolving technical issues, investigating bug reports, processing complaints, and responding to your requests submitted through our support ticket systems.
When you contact our support team, we usually collect your name (optional), in-game user name, email address, content of the ticket, support ticket ID in order to communicate with you and handle your inquiry. Depending on the nature of your request, we may also process additional types of Personal data, for example: Client ID, technical identifiers (e.g. Server ID), IP address, in-game user name, country/region, device information (Device ID, device platform, device type and model, device OS version), application version, battery level, connection details, free space on device, network type, platform, carrier and any information that you provide in communications with our support team, that were requested by the them to resolve an issue.
Please note that if you refuse to provide the data requested by the support or game administration teams, we may be unable to assist you in resolving your issue.
Lawful basis for processing this Personal data: Contract.
In order to respond to your requests as a data subject, we first need to verify your identity. You must submit your request from the email address that is associated with the account for which you would like to submit a request (if you used an email address for creation an account), and provide at least the following additional identifying information:
You can find both your Privacy ID and Client ID in the Game Settings under “Advanced”. Please be sure you take reasonable measures to save your Privacy ID and Client ID numbers. Without this information we will not be able to identify you and provide a sufficient answer to your request as a data subject.
If you did not provide an email address when you registered your account, please provide other information specified in this Section. In such cases we may additionally request limited account-specific information (for example, details of a recent in-game purchase or your current in-game balance) that only the account holder would reasonably know. We will only request the minimum information necessary to verify your identity and to process your request.
If we are unable to verify your identity with the information provided, we may refuse or partially comply with the request to the extent permitted by applicable law. We will inform you of the reasons for any refusal and of any available options.
Lawful basis for processing this Personal data: legal obligation.
We believe that protection of children is a fundamental duty of the Game Industry. The Game is intended strictly for people over 16 years old and its content is neither directed, nor made to appeal to people younger this age. We do not knowingly collect, store or otherwise process personal data of anyone younger this age. If you are a parent or legal guardian and you believe that we unintentionally collected personal data of your child younger than 16 years old, you may request the deletion of the information by contacting us on [email protected].
Our Game is available worldwide, so we collect personal data from players from different countries. Our mission is to minimize the transfer of personal data from one region to another and ensure the players’ data is secured in accordance with industry standards.
In order to provide you with the Game services, analyze our performance and grow, we seek assistance from our affiliates and subsidiaries, as well as different service providers with who we can share some information about you.
These service providers can be divided into the following groups:
We disclose information about you only with those who are contractually obligated to keep your personal data confidential and will comply with the data protection laws.
Unless the law specifies a different retention period, Chillbase will only keep your Personal data for the time strictly necessary to carry out the operations for which said Personal data has been collected.
Here are the examples of different retention periods that apply to certain personal data:
We will retain the Personal Data associated with your account until the termination of the Contract. In some cases, we will not delete or anonymize your Personal data where we still have a legitimate interest to use your personal information. For example, we may still retain your Personal data to resolve disputes, enforce our Contract or other user agreements, or comply with legal requirements.
We may temporarily store your messages when you use in-game public chat features only for the duration of the current server session to facilitate their delivery to other players. In private chats between players, messages may be retained for up to 14 days if the recipient is offline, to ensure message delivery.
At the same time, we may retain copies of in-game chat or voice data in the following limited circumstances: (a) when player submits a report of chat data, we retain that data to investigate the report; (b) where retention is necessary to investigate violations, prevent fraud, preserving evidence of any violations of the Сontract or comply with legal obligations; or (c) as otherwise disclosed in this Privacy Policy.
The section 5 applies to residents of California only.
California laws provide residents of California specific rights such as:
We can provide access to your personal information or delete the same at your specific request twice every 12 months without a charge. It will be completed in 45 days, but in case of necessity we can extend this period by an additional 45 days. We shall notify you immediately in that case. You may send us an email at: [email protected].
Please note, in order to avoid unauthorized disclosures we shall proceed only in case of verifiable consumer request. You may also designate an authorized agent to make a request on your behalf. In order to do this, we may require the agent to provide direct proof and confirmation that they have signed permission to submit a request on your behalf. We also may require you to either a) verify your identity directly with us, or b) directly confirm that you provided the agent with the permission to submit the request. Please, note that We retain the right to refuse a request from an allegedly authorized agent absent the legal proof of authority.
The categories of personal information We collect and have collected about you in the preceding 12 months, the sources we obtain your Personal Data from and the business purpose for collection are listed in sections 1 and 2 of this Privacy Policy.
If you are an EEA-based user you have certain rights in connection with your personal information and how we handle it. Some of these rights may be subject to some exceptions or limitations.
You can exercise these rights at any time by following the instructions below or sending us relevant requests to mail: [email protected].
Your rights include:
We rely on safeguards referred to in Article 46 GDPR where the data transfer outside of EU/EEA is not covered by an EU Commission adequacy decision. Therefore, we use EU Commission-approved Standard Contractual Clauses which you can find here.
We implement various technical, organisational, and legal measures to ensure that your Personal Data is protected from unauthorised or accidental access, deletion, modification, blocking, copying, and dissemination.
Such measures include without limitation anonymization, pseudonymization, encryption, data access restriction, when and where feasible.
Access to your Game account is possible only through authorization. You are responsible for keeping login credentials and password confidential and not sharing with third parties.
Your data is stored on one of the secure servers that we rent and We use the recommended industry practices to keep your data secure.
Each employee has access to the systems/services only via his/her own employee access. The access rights involved are limited to the responsibilities of the respective employee and/or team.
You may request the deletion of your Game account, along with all associated personal information and data in several ways as outlined below:
Once the request is submitted through one of the methods mentioned above, your Game account and all personal data linked to the account for which you submitted the deletion request will be automatically deleted within 8 days permanently and irreversibly.
In certain cases we may need to retain certain personal information if there are valid grounds under the data protection laws for us to do so (for example, for the defence of legal claims or freedom of expression) or the relevant laws specifically require us to do so (for example, tax-related information archival purposes). In such cases your data will not be deleted until the required retention basis ceases to exist.
You may cancel your account deletion request via the Game Settings section, under Advanced Settings, or through the OneState Webshop, by logging in to the Game account for which the deletion request was previously submitted. Such cancellation can be made only within 7 сalendar days of submitting the deletion request, including the day the request was submitted.
We will occasionally update this Privacy Policy as necessary to protect our users, furnish current information, and respond to legal and technical changes. The most current version of the Privacy Policy will govern our use of your information and information and will be available at https://chillbase.net/onestate-privacy-policy.html. Any new policy will replace all old versions of the Privacy Policy.
The previous version of this document - https://chillbase.net/archive/.