LAST UPDATED: 23.09.2026
OneState™ (the «Game») is provided to you under the End User License Agreement (hereinafter «Contract») available through https://chillbase.net/onestate-eula/ by CHILLBASE LTD, a private limited company incorporated under the laws of Republic of Cyprus, registered on April 21, 2020. Registered address: Elenis Loizidou 14, Office 201c, Strovolos 2042, Nicosia, Cyprus. E-mail: [email protected]
In this Policy, «CHILLBASE», «CHILLBASE LTD», «OUR» «US» «WE» means CHILLBASE LTD
This Privacy Policy describes how we collect, use and process your Personal data with regards to the Game, which may include your name, e-mail address, game preferences, etc. as further described below.
1. Types of Personal data we collect and how we use it:
We may obtain your personal data from the following sources:
- from you directly (e.g. login, email address, and password when you decided to create an account in our Game); and/or
- from third party service providers that are assisting us in providing you with a service (e.g. personal data that you have agreed to share with Us via the interface of relevant social media network); and/or
- personal data collected and/or generated automatically as part of the Game (e.g. Client ID, Privacy ID, IP address, technical logs, device information, information about your game activity).
We may collect and process your Personal data:
A) To create an account for the Game and subsequently allow you to log in.
When you start using the Game, an account is created automatically and may be used without registration. In this case, we will generate a temporary Guest ID linked to your account until you register for the Game.
If you choose to register an account directly, you will be asked to provide us with the following Personal data: username, email address, and password (password is stored in a hashed form, not in plain text).
You can also create a Game account by logging in through a social network or using third-party credentials.
In this case, we only collect such personal data that you have agreed to share with Us via the interface and in accordance with settings of relevant social media, website, or third-party platforms. To understand how your data is processed and shared by social media, website, or third-party platforms please, review the privacy policies provided by respective platforms. After your account is created, we will also use this information to provide you with a convenient way to log in to the Game via social networks or third-party credentials.
During the account creation, we also generate a unique identifier in connection with your account and your use of our Game can be identified via Client ID.
Lawful basis for processing this Personal data: Contract.
B) To process and facilitate your payment, maintain a record of your transaction history
We collect and process the following Personal data: payments on Google Play or iOS App Store, Client ID, Transaction ID, details of transaction (product purchased, price, currency, purchase date and time, purchase status, payment system and method), transaction history.
Lawful basis for processing this Personal data: Contract.
C) Manage refunds, where applicable, in accordance with Contract.
We collect and process the following Personal data: Client ID, Transaction ID, details of transaction (product purchased, price, currency, purchase date and time, purchase status, payment system and method), information about refunds or chargebacks.
Lawful basis for processing this Personal data: Contract.
D) To provide you our Game, enable you to use it on your device and ensure its proper operation and security
We collect and process:
- Your game data such as: information about game activity, including achieved game levels, rewards, rankings, completed game missions, statistics including the game time or the use of the various features as well as the data associated with any bugs and malfunctions, crush reports.
- Your login and gameplay data to enable the operation and security of our Game, such as account identifiers (e.g. Client ID, username), IP address, country/region location, technical identifiers (e.g. Server ID), device information (Device ID, device platform, device type and model, device OS version), details regarding the suspension of the account or account reactivation, date and time of game launches, including date and time of the first and last launch, number of launches, technical logs generated during your use of the Game, information about actions related to the account (e.g. information about username changes, email address changes and password changes, requests for password or account recovery, information about account deletion).
Lawful basis for processing this Personal data: Contract.
E) To detect, investigate, and take action in relation to violations of our Contract.
We may process your Personal data for the purpose of detecting violations of Game EULA and Game rules, investigating processes, taking necessary actions and preserving evidence of any such violations. This Personal data includes: Client ID, technical identifiers (e.g. Server ID), IP address, user name, country/region, device information (Device ID, device platform, device type and model, device OS version), records of refunds or chargebacks, in-game chat records related to Contract violations as per Section 4 of this Privacy Policy and any evidence containing your personal data if and when provided to us either by you or third parties, technical logs generated during your use of the Game, which may include: your game data such as information about game activity, achieved game levels, rewards, rankings, completed game missions, statistics including the game time or the use of the various features, information about actions related to the account (e.g. information about username changes, email address changes and password changes, requests for password or account recovery, information about account deletion), details regarding the suspension of the account or account reactivation, date and time of game launches, including date and time of the first and last launch, number of launches.
Lawful basis for processing this Personal data: Contract.
F) To provide in-game chat functionality and facilitate player communications.
When you enable or use in-game chat features we may process certain Personal data:
Public-facing chats. When you use in-game public-facing chat functionality, other players may see the following information about you: in-game user name, in-game phone number (virtual number generated within the game, not linked to any real-world phone number) and the content of the messages you post or send. This information is public within the chat and may be visible to ChillBase, game moderators, and any player with access to the relevant chat.
By using any chat functionality provided in the Game, you acknowledge that ChillBase is not responsible for problems or damages resulting from your disclosure of personal information in chat. You are responsible for the information you choose to share.
IMPORTANT SAFETY NOTICE: PLEASE DO NOT SHARE ANY SENSITIVE INFORMATION ABOUT YOU WITH OTHER PLAYERS, such as real phone numbers, email addresses, home addresses, social media profiles, real full names, government IDs, payment card details, account identifiers or other personal identifiers. Once disclosed in a public chat, we cannot guarantee your protection from scams, phishing, or other risks.
We may process certain personal data during gameplay sessions to enable the delivery of messages and communication between players, such as Client ID, in-game user name, IP addresses, technical metadata (e.g. message timestamps), the content of the messages.
Lawful basis for processing this Personal data: Contract.
G) To conduct audience research, surveys, or interviews and collect feedback by us and/or our service providers.
In order to conduct audience research, surveys, or interviews and collect relevant feedback to better understand our player community and improve the Game experience, depending on the type of research activity, we may process the following Personal Data: your Client ID, in-game user name, discord nickname or discord ID, email address, information about your game activity and experience, content of messages or feedback shared in public in-game chats or through official OneState public channels or servers where players communicate, and other information that you voluntarily provide when filling out our survey forms, answering questions during interviews or playtests, or demonstrating your gameplay.
In most cases, the results of these research activities are reported in aggregated, anonymized form and will not identify or single out any individual player.
Lawful basis for processing this use of Personal data: legitimate interest.
H) To conduct marketing and advertising activities
We may use your Personal data to measure, analyse, and optimize the performance of our marketing campaigns and user acquisition activities across different advertising partners, as well as to provide you with personalised advertisements and promotional content outside of our Game through third-party advertising partners (such as Meta/Facebook Ads, Google Ads, and others).
For this purpose, the following Personal data may be used: online Identifiers, such as advertising identifiers, IP address, device information (such as: Device ID, device platform, device type and model, device OS version, system language, memory, time stamp and zone, device motion parameters and carrier), user agent, push-tokens, engagement information, user interactions within the app, including installs, in-game events and uninstall measurement.
Lawful basis for processing this Personal data: consent.
I) To improve and develop our Game
We analyse your Personal data to identify how to improve our Game and features to make them more suitable and convenient for our players, and enhance the overall user experience. For this purpose we may process Сlient ID, Chill ID, technical and performance data such as network status (e.g., connection type, latency, connection details), device information (Device ID, device platform, device type and model, device OS version) and device performance metrics (e.g., temperature, memory or CPU usage, FPS, battery level), application version, and other diagnostic parameters, crash logs/reports, user communications with support, gameplay and usage data (such as session duration, in-game actions, and feature usage), and aggregated analytical data (such as retention rates, A/B testing results, etc.).
Lawful basis for processing this Personal data: legitimate interest.
J) To provide user support, including addressing and resolving technical issues, investigating bug reports, processing complaints, and responding to your requests submitted through our support ticket systems.
For this purpose, we usually collect your preferred name (optional), in-game user name, email address, content of the ticket, support ticket ID, request status in order to communicate with you and handle your inquiry. Depending on the nature of your request, we may also process additional types of Personal data, for example: Client ID, technical identifiers (e.g. Server ID), IP address, in-game user name, country/region, device information (Device ID, device platform, device type and model, device OS version, OS language), application version, battery level, connection details, free space on device, network type, platform, carrier and any information that you provide in communications with our support team, that were requested by the them to resolve an issue, support experience feedback and ratings (optional).
Please note that if you refuse to provide the data requested by the support or game administration teams where such information is necessary to investigate or resolve your request, we may be unable to assist you in resolving your issue. This does not apply to optional information, such as feedback, which you may choose to provide voluntarily.
We may use automated or AI-powered tools to assist with responding to and handling your support requests submitted through our support ticket systems. Where necessary, your request may be referred to our support team for further review. These tools do not make decisions that produce legal or similarly significant effects on you.
Lawful basis for processing this Personal data: Legitimate interest.
K) To keep you informed about occasional news, in-game events and activities
You may choose to receive notifications about in-game events and activities. If you enable this feature, we may send you such notifications, including when the Game is not open, for example, to let you know when an event or activity starts or to keep you informed about current updates. To deliver these notifications, we provide the notification content and technical delivery information to the notification delivery service provided by operating system provider. You can turn them off at any time in the Game settings. To manage your notification preferences, we may associate your choice with your device and Game account.
Lawful basis for processing this Personal data: Contract (where you have enabled this feature, to provide the requested functionality).
L) To personalize in-game offers and interactions with players
We may use information about your in-game activity and progression to group players with similar gameplay characteristics. We may use these groups to tailor how we engage with you, including by showing relevant in-game items, rewards, and other content, or by reaching out to you with information or opportunities that we believe may be relevant to your interests. From time to time, we may also invite you to share additional information about yourself and your game experience on a voluntary basis so that we can better understand your interests and preferences and personalize our interactions with you.
Lawful basis for processing this Personal data: Legitimate interest.
M) To enable your participation in reward programs and other activities and to prevent duplicate or abusive claims
From time to time, we may offer opportunities to participate in reward programs and other activities. Some of these may require you to connect your Game account with an account you have with a third-party platform, for example, as part of the Twitch Drops reward program.
If you choose to participate, depending on the relevant platform and activity, we may receive and process information associated with your account on that platform, such as your username and/or platform identifier, account linking status, and information about the relevant campaign, your eligibility for rewards and their fulfillment. We may link this information with your Game account information, such as your Client ID, in order to connect your accounts, verify your eligibility, provide the relevant rewards or benefits, and prevent duplicate or abusive claims.
If you disconnect your accounts, we may retain limited information about rewards previously provided where necessary to prevent duplicate claims and protect the integrity of the relevant program.
Lawful basis for processing this Personal Data: Contract where the processing is necessary to enable your participation in the relevant activity and provide the requested functionality; Legitimate Interests in preventing duplicate or abusive claims and protecting the integrity of our reward programs.
N) To process data subject requests
In order to respond to your requests as a data subject, we first need to verify your identity. You must submit your request from the email address that is associated with the account for which you would like to submit a request (if you used an email address for creation an account), and provide at least the following additional identifying information:
- your in-game username;
- your Privacy ID;
- your Client ID.
You can find both your Privacy ID and Client ID in the Game Settings under «Advanced». Please be sure you take reasonable measures to save your Privacy ID and Client ID numbers. Without this information we will not be able to identify you and provide a sufficient answer to your request as a data subject.
If you did not provide an email address when you registered your account, please provide other information specified in this Section. In such cases we may additionally request limited account-specific information (for example, details of a recent in-game purchase or your current in-game balance) that only the account holder would reasonably know. We will only request the minimum information necessary to verify your identity and to process your request.
If we are unable to verify your identity with the information provided, we may refuse or partially comply with the request to the extent permitted by applicable law. We will inform you of the reasons for any refusal and of any available options.
Lawful basis for processing this Personal data: legal obligation.
2. CHILDREN:
We believe that protection of children is a fundamental duty of the Game Industry. The Game is intended strictly for people over 16 years old and its content is neither directed, nor made to appeal to people younger this age. We do not knowingly collect, store or otherwise process personal data of anyone younger this age. If you are a parent or legal guardian and you believe that we unintentionally collected personal data of your child younger than 16 years old, you may request the deletion of the information by contacting us on privacy@chillbase.net.
3. How We Store and Share Your Personal Information
Our Game is available worldwide, so we collect personal data from players from different countries. Our mission is to minimize the transfer of personal data from one region to another and ensure the players’ data is secured in accordance with industry standards.
In order to provide you with the Game services, analyze our performance and grow, we seek assistance from our affiliates and subsidiaries, as well as different service providers with who we can share some information about you.
These service providers can be divided into the following groups:
- technical support providers (IT infrastructure assistance); software providers, SaaS providers — for the cases when these providers host necessary personal data on our behalf;
- professional advisers such as legal counsels, data privacy consultants and specialists, solicitors, accountants, tax advisors, auditors, insurance brokers;
- service providers that assist us in providing support to users, responding to user requests, and moderating gameplay activities.
- service providers that assist us in audience research, user surveys and interviews.
- advertising and analytics partners processing data for: targeted campaigns, cross-platform retargeting, remarketing, attribution, look-a-like audience creation and performance measurement, mobile attribution. To consult a list of Chilbases’s advertising and analytics partner partners, please see the list of the third parties who may receive data.
We disclose information about you only with those who are contractually obligated to keep your personal data confidential and will comply with the data protection laws.
4. DATA RETENTION PERIOD
Unless the law specifies a different retention period, Chillbase will only keep your Personal data for the time strictly necessary to carry out the operations for which said Personal data has been collected.
Here are the examples of different retention periods that apply to certain personal data:
We will retain the Personal Data associated with your account until the termination of the Contract. In some cases, we will not delete or anonymize your Personal data where we still have a legitimate interest to use your personal information. For example, we may still retain your Personal data to resolve disputes, enforce our Contract or other user agreements, or comply with legal requirements.
We may temporarily store your messages when you use in-game public chat features for the duration of the current server session to facilitate their delivery to other players. We may also retain the content of messages shared via in-game chats for up to 28 days to identify and review player feedback and suggestions related to the Game.
In private chats between players, messages may be retained for up to 14 days if the recipient is offline, to ensure message delivery.
We may also retain copies of in-game chat or voice data in the following limited circumstances: (a) when player submits a report of chat data, we retain that data to investigate the report; (b) where retention is necessary to investigate violations, prevent fraud, preserving evidence of any violations of the Сontract or comply with legal obligations; or © as otherwise disclosed in this Privacy Policy.
5. CALIFORNIA PRIVACY RIGHTS
The section 5 applies to residents of California only.
California laws provide residents of California specific rights such as:
- The right to know and access personal information we collect or share for business purposes, including categories of information we have disclosed for business purposes in compliance with Privacy Policy and applicable laws.
- The right of deletion or «the right to be forgotten». This means, we will delete your personal information.
- The right to non-discrimination. That means, you have the right to equal service and price even in case you invoked privacy rights.
- The right to correct inaccurate personal data that we maintain about you.
- The right to opt out of the sale or share of personal information. We may sell or share certain personal information with third-party advertising partners (such as Meta/Facebook Ads, Google Ads, and similar providers) in order to measure and improve our marketing campaigns and to show personalized ads outside of our Game.
For these purposes, we may sell or share the following categories of personal information: identifiers (such as advertising identifiers and IP address); engagement data and user interactions within the Game; device and technical information (such as device ID, platform, device type and model, OS version, system language, memory, time stamp and time zone, device motion parameters, carrier, and user agent). We do not knowingly sell or share personal information of consumers under the age of 16.
You have the right to opt out of the sale or sharing of their personal information at any time. You may exercise this right by using the «Do Not Sell or Share My Personal Information» option available in the Game settings. Once you opt out, we will no longer sell or share your personal information for these advertising purposes.
All other disclosures of personal information described elsewhere in this Privacy Policy are made solely for business purposes, including to service providers and contractors acting on our behalf, and do not constitute a «sale» or «sharing» of personal information as defined under the CCPA. - The right to limit use and disclosure of sensitive personal information. That means You have the right to limit the use and disclosure of sensitive personal information we may have. We do not currently collect, use or process sensitive personal information for purposes that require us to offer this limitation option.
We can provide access to your personal information or delete the same at your specific request twice every 12 months without a charge. It will be completed in 45 days, but in case of necessity we can extend this period by an additional 45 days. We shall notify you immediately in that case. You may send us an email at: privacy@chillbase.net.
Please note, in order to avoid unauthorized disclosures we shall proceed only in case of verifiable consumer request. You may also designate an authorized agent to make a request on your behalf. In order to do this, we may require the agent to provide direct proof and confirmation that they have signed permission to submit a request on your behalf. We also may require you to either a) verify your identity directly with us, or b) directly confirm that you provided the agent with the permission to submit the request. Please, note that We retain the right to refuse a request from an allegedly authorized agent absent the legal proof of authority.
The categories of personal information We collect and have collected about you in the preceding 12 months, the sources we obtain your Personal Data from and the business purpose for collection are listed in sections 1 and 2 of this Privacy Policy.
6. EU/EEA — BASED PLAYERS PRIVACY
If you are an EEA-based user you have certain rights in connection with your personal information and how we handle it. Some of these rights may be subject to some exceptions or limitations.
You can exercise these rights at any time by following the instructions below or sending us relevant requests to mail: [email protected].
Your rights include:
- Right to withdraw your consent in accordance with Art. 7 para. 3 GDPR (e.g. you may withdraw your consent to show personalized ads to you (available to EEA-based users only)
- Right to access your data in accordance with Art. 15 GDPR
- Right to correct your data in accordance with Art. 16 GDPR (e.g. you can contact us if your email address has been changed and we should replace your old email address)
- Right to have your data deleted in accordance with Art. 17 GDPR
- Right to restrict processing of your personal information in accordance with Art. 18 GDPR (e.g. you can contact us if you want to restrict processing)
- Right to take your data with you in accordance with Art. 20 GDPR (e.g. you can contact us to receive your data if you want to upload it to another service)
- Right to object how your data is handled in accordance with Art. 21 GDPR (e.g. you can contact us if you do not agree with any user analytics procedures as described within this privacy policy)
- Right to send complaints to the supervisory authority in accordance with Art. 77 para. 1 of GDPR (e.g. you can contact the data protection supervisory authority directly).
7. DATA TRANSFER
We rely on safeguards referred to in Article 46 GDPR where the data transfer outside of EU/EEA is not covered by an EU Commission adequacy decision. Therefore, we use EU Commission-approved Standard Contractual Clauses which you can find here.
8. SECURITY MEASURES APPLIED
We implement various technical, organisational, and legal measures to ensure that your Personal Data is protected from unauthorised or accidental access, deletion, modification, blocking, copying, and dissemination.
Such measures include without limitation anonymization, pseudonymization, encryption, data access restriction, when and where feasible.
Access to your Game account is possible only through authorization. You are responsible for keeping login credentials and password confidential and not sharing with third parties.
Your data is stored on one of the secure servers that we rent and We use the recommended industry practices to keep your data secure.
Each employee has access to the systems/services only via his/her own employee access. The access rights involved are limited to the responsibilities of the respective employee and/or team.
9. DELETE YOUR PERSONAL DATA
You may request the deletion of your Game account, along with all associated personal information and data using the options available for your account type:
- Guest accounts: as guest accounts do not have registered login credentials or a password, deletion is available only within the Game through the in-game settings while you are logged in to the account you wish to delete. This allows us to securely verify your request.
- Registered accounts:
A) Deletion within the Game using in-game settings, provided that you are logged in to the account you wish to delete.
B) Deletion via our website OneState Webshop available at https://onestate.com/delete-my-data.
C) In some cases you may also request to delete your account via the interface of the social networks or application stores through which you registered for the Game (if such options are provided by those platforms).
Once the request is submitted through one of the methods mentioned above, your Game account and all personal data linked to the account for which you submitted the deletion request will be automatically deleted within 8 days permanently and irreversibly.
In certain cases we may need to retain certain personal information if there are valid grounds under the data protection laws for us to do so (for example, for the defence of legal claims or freedom of expression) or the relevant laws specifically require us to do so (for example, tax-related information archival purposes). In such cases your data will not be deleted until the required retention basis ceases to exist.
How to cancel the deletion
You may cancel your account deletion request via the Game Settings section, under Advanced Settings, or through the OneState Webshop, by logging in to the Game account for which the deletion request was previously submitted. Such cancellation can be made only within 7 сalendar days of submitting the deletion request, including the day the request was submitted.
10. UPDATES IN PRIVACY POLICY
We will occasionally update this Privacy Policy as necessary to protect our users, furnish current information, and respond to legal and technical changes. The most current version of the Privacy Policy will govern our use of your information and information and will be available at https://chillbase.net/onestate-privacy-policy. Any new policy will replace all old versions of the Privacy Policy.