Privacy Policy

01

Who is responsible

FIJOY Games AS, organization number 924 990 112, is the data controller for the personal data that FIJOY Games determines how and why to process.

FIJOY Games AS is based in Nittedal, Norway.

Privacy questions and data requests may be sent to:

Email: hei@fijoygames.no

You may also use the FIJOY Games support and contact page.

02

Scope

This policy applies to:

• fijoygames.com, fijoygames.no, and FIJOY Games pages that link to this policy;
• Floorball League 2 and its online services;
• game accounts, online profiles, cross-platform account links, matchmaking, multiplayer sessions, statistics, achievements, leaderboards, progression, cloud saves, support, and security operations; and
• other FIJOY Games services that expressly link to this policy.

Third-party storefronts, platform holders, and account providers also process information under their own privacy policies. Their services are not controlled by this policy.

03

Our main privacy principles

• FIJOY Games does not sell personal data.
• FIJOY Games does not use game account data for targeted advertising.
• We request only the account permissions needed for the features being used.
• We do not ask for or receive your Epic, Nintendo, Steam, PlayStation, Xbox, Apple, or Google password.
• Authentication tokens are handled only as needed to complete secure sign-in. We do not intentionally write platform authentication tokens to game logs.
• Payment card details are handled by the applicable storefront or payment provider, not by the game.
• In-game coins are earned through gameplay and are not sold by FIJOY Games for real money.

04

Information we process

The exact information depends on the platform and features you use.

4.1 Website and contact information

We may process:

• IP address, browser type, requested pages, timestamps, referral information, and failed login attempts recorded by hosting or security systems;
• cookies needed for authorized WordPress accounts and website preferences;
• messages, email addresses, and other information you choose to send when you contact us;
• account information for authorized website administrators; and
• invoicing, contractual, or accounting records where legally required.

4.2 Account and identity information

When you use account-based or online game features, we may process:

• an Epic Account ID;
• an EOS Product User ID (PUID);
• platform account identifiers supplied by a platform or storefront;
• display name and the platform or identity provider used to sign in;
• account-linking state, consent state, authentication status, and the date of account activity; and
• limited linked-account information made available through permissions you approve.

We use identifiers rather than passwords to associate online activity with the correct player profile.

On Nintendo platforms, the game may receive a short-lived Nintendo network service account token for authentication. The token is submitted to EOS for verification and is erased from the game’s working memory after the operation completes. FIJOY Games does not use it to read your Nintendo password.

4.3 Epic profile, friends, and presence

Epic Account Services may provide Basic Profile information, including an Epic Account identifier and display name, after you sign in and consent.

If FIJOY Games enables and you choose to use Epic friends or presence features, we may also process:

• the portion of your Epic friends list that Epic is permitted to provide for the game;
• friend relationship and invitation status; and
• online presence and current game activity.

These social permissions are used only for authentication, friends, invitations, presence, cross-platform social features, and account linking connected to our games. We do not use Epic Account data for advertising or sell it to third parties.

4.4 Multiplayer and matchmaking information

When you use online play, we may process:

• lobby, party, session, and match identifiers;
• selected game mode, matchmaking criteria, access type, join codes, team or side assignment, ready state, and lobby membership;
• player identifiers, opponent identifiers, display names, and platform;
• match result, score, team, duration, completion time, outcome, disconnect or forfeit reason, and a limited recent-match history;
• matchmaking rating, skill information, rank, region preference, and connection quality where those features are enabled;
• synchronization messages needed to keep gameplay, pauses, cinematics, replays, and match transitions consistent between players; and
• network address, relay, latency, NAT, packet, and connection metadata processed as technically necessary by EOS, platform services, network providers, or connected peers.

Online gameplay traffic may use peer-to-peer networking and EOS relay services. The services process network information to establish, protect, maintain, and troubleshoot the connection.

4.5 Progression, statistics, achievements, and cloud profile

We may process and synchronize a player profile containing:

• experience points, level, earned in-game coins, coins spent, and transaction or reward receipt identifiers used to prevent duplicate awards;
• wins, draws, losses, forfeits, goals, scores, play time, play days, login days, and current or best streaks;
• daily rewards, objectives, journey progress, training completion, personal training records, and high scores;
• achievements, leaderboard records, rank, and statistics;
• unlocked, owned, purchased with earned coins, and equipped cosmetic items;
• player customization and selected cosmetic settings;
• recent match summaries and completed game modes; and
• profile revision and synchronization information used to prevent accidental overwrite or duplication.

This information is used to provide unified progression, rewards, unlockables, achievements, leaderboards, integrity checks, and cross-device or cross-platform profile synchronization.

4.6 Local settings and diagnostics

The game may store settings and local profile information on your device, including graphics, audio, controls, accessibility, gameplay preferences, account sign-in state, and offline progression.

The game may create local logs, crash traces, or diagnostic files containing build information, operating-system information, command-line or startup state, error details, and technical events. These local files are not automatically personal data received by FIJOY Games unless you send them to us or an explicitly enabled diagnostic service transmits them. Please review diagnostic files before sharing them because they may contain device paths or other technical details.

We may create aggregated or de-identified service statistics, such as the number of online players, players waiting for matchmaking, active game modes, service health, and connection success rates. We use this information to operate and improve the service.

4.7 Voice and communications

The current policy does not mean that FIJOY Games records voice by default.

If real-time voice chat is offered and you choose to use it, voice packets and related account, channel, device, connection, and moderation metadata may be processed by EOS or another disclosed provider to deliver and protect the service. FIJOY Games will not intentionally record or retain voice content unless that behavior is clearly disclosed before it occurs. Platform parental controls, mute, block, and reporting features may apply.

If materially different voice recording or automated moderation is introduced, we will update this policy or provide an appropriate notice before it is enabled.

4.8 Reports, support, competitions, and prizes

If you contact support or submit a player report, we may process your contact details, account identifiers, report category, description, relevant match or session identifiers, and evidence you choose to provide. We may use this information to investigate abuse, cheating, technical faults, or violations and to apply warnings, restrictions, or sanctions where appropriate.

For a separately announced tournament, promotion, or real-world prize, we may need contact, eligibility, tax, or shipping information. The event rules or a specific notice will explain any additional processing before that information is collected.

4.9 Purchases and entitlements

The game may receive confirmation from a storefront or platform that an account owns the game or is entitled to particular content. The storefront or payment provider processes the purchase and payment details under its own privacy policy. FIJOY Games does not receive your full payment-card details through the game.

05

Why we process information and our legal bases

Where the European Economic Area, United Kingdom, or similar privacy law applies, we rely on one or more of the following legal bases:

Performance of a contract

We process information necessary to provide the game and features you request, including authentication, online multiplayer, account profiles, progression, cloud synchronization, achievements, leaderboards, support, and entitlements.

Legitimate interests

We process limited information where necessary to operate, secure, troubleshoot, and improve our games and websites; prevent fraud, cheating, duplicate rewards, and abuse; protect players; and establish or defend legal claims. We consider the effect on players before relying on this basis.

Consent

We rely on consent where required, including for optional account linking, optional social permissions, certain cookies, or other features presented as optional. You may withdraw consent, but withdrawal does not affect processing that was lawful before withdrawal.

Legal obligations

We may process and retain information where required by accounting, tax, consumer-protection, law-enforcement, regulatory, or other legal obligations.

06

Epic Online Services

Floorball League 2 uses Epic Online Services for account and game services. Depending on the enabled feature, this can include:

• Epic Account authentication and Basic Profile;
• EOS Connect and Product User IDs;
• external platform identity verification and optional account linking;
• lobbies, matchmaking, peer-to-peer connectivity, and relay services;
• player-data storage and cross-save;
• statistics, achievements, and leaderboards; and
• future social, presence, voice, reports, or sanctions features where enabled and disclosed.

Epic authenticates Epic Accounts and processes information needed to provide EOS. Epic also presents its own consent interface for requested Epic Account permissions. Epic processes information under its own terms and privacy policy:

• Epic Games Privacy Policy
• Epic Online Services

FIJOY Games uses Epic Account data only to authenticate players, provide the requested social and cross-platform features, support player-requested account connections, and operate the game. We do not sell, rent, or disclose Epic Account data for monetary consideration.

07

Platform accounts and other providers

Depending on where you play, Nintendo, Valve/Steam, Sony/PlayStation, Microsoft/Xbox, Apple, Google, Epic Games Store, or another platform or storefront may independently process account, device, network, purchase, entitlement, parental-control, and usage information under its own terms.

The game receives only the information and credentials required for the enabled integration. Platform authentication credentials are used to verify the account with the platform or EOS and are not used by FIJOY Games to learn your platform password.

08

Account linking and cross-save

Cross-save is intended to let a player use one synchronized profile across supported platforms. When you explicitly enable it, platform identities may be linked to the same EOS Product User ID and cloud profile.

The linking flow may open the Epic Account Portal so you can choose and authorize the Epic account that will own the synchronized profile. This choice can affect which progression, level, statistics, coins, and unlockables are available on other supported platforms. The game uses profile revisions and conflict checks to reduce accidental overwrites.

Signing out of a device, clearing saved login access, unlinking a platform account, and deleting an online profile are different actions:

• Sign out or clear saved login: removes or invalidates saved sign-in access on that device where supported. It does not automatically delete the online profile.
• Unlink: removes an account relationship where supported. It may not delete data already associated with an EOS Product User ID.
• Delete online data: requests erasure of FIJOY Games-controlled online profile data, subject to legal and integrity exceptions described below.

Contact FIJOY Games before unlinking an account if you are uncertain which profile contains your progression. Never send us a password or authentication token.

09

When we share information

We may disclose information only as reasonably necessary:

• to Epic Games and other providers that supply authentication, hosting, networking, cloud storage, security, support, website, backup, or communication services;
• to the relevant platform holder or storefront for account, entitlement, multiplayer, safety, or compliance functions;
• to other players as part of multiplayer, leaderboards, display names, presence, invitations, team assignment, or results;
• to professional advisers, auditors, insurers, or corporate transaction parties subject to appropriate confidentiality and legal safeguards;
• to regulators, courts, law enforcement, or other authorities where legally required; or
• to protect players, our services, legal rights, or the safety of others.

Providers receive only the access reasonably needed for their role and must handle information under applicable law and their agreements with us.

10

International processing

FIJOY Games is based in Norway. Epic Games, platform holders, storefronts, and other service providers may process information in countries outside Norway or the European Economic Area.

Where required, international transfers must rely on an applicable lawful mechanism, such as an adequacy decision, approved contractual safeguards, or another mechanism permitted by data-protection law. You may contact us for more information about safeguards relevant to FIJOY Games-controlled processing.

11

Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy or as required by law.

• Account-linking, online-profile, progression, entitlement, achievement, and leaderboard information may remain while the account or online service is active and for a reasonable period needed for recovery, integrity, security, dispute resolution, or deletion processing.
• Match and reward identifiers may be retained to preserve rankings, statistics, tournament records, and prevent duplicate or fraudulent awards.
• Operational, network, and security logs follow the applicable system or provider rotation period and may be retained longer when needed to investigate an incident.
• Support correspondence is retained only while reasonably needed to answer the request, manage the relationship, or establish or defend a legal claim.
• Local settings and diagnostics remain on your device until replaced, removed, or deleted through the platform or operating system.
• Backups expire through their configured rotation cycle. Data scheduled for deletion may remain inaccessible in a backup until that backup expires.
• Accounting and legal records are kept for the period required by applicable law.

We delete or de-identify information when it is no longer needed, unless a legal obligation or overriding lawful reason requires retention.

12

Your choices and controls

Depending on platform and build, the game’s account settings may let you:

• sign in or sign out;
• remove saved Epic login access from the device;
• switch Epic accounts;
• inspect the current provider and online-profile status; and
• explicitly enable or verify cross-save linking.

You may manage Epic Account permissions and connections through Epic’s account services. Platform account and parental-control settings are managed through the relevant platform.

Withdrawing a social permission may prevent friends, presence, invitation, or cross-platform social features from operating. Offline or non-social features may remain available depending on the game and platform.

13

Your privacy rights

Depending on your location and the circumstances, you may have the right to:

• request access to personal data we hold about you;
• request correction of inaccurate data;
• request deletion of data;
• request restriction of processing;
• receive certain data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent where consent is the legal basis; and
• complain to a competent data-protection authority.

These rights are not absolute. We may need to verify the request and may retain limited information where law, security, fraud prevention, dispute resolution, or another lawful exception requires it.

Norway’s supervisory authority is Datatilsynet: www.datatilsynet.no

14

Online-profile and Epic Account data deletion

To request deletion of FIJOY Games-controlled game account or online-profile data, email hei@fijoygames.no with the subject:

Floorball League online data deletion request

Please include:

• the game title;
• the platform or storefront you use;
• your display name; and
• enough non-secret information for us to locate and verify the profile.

Do not send a password, access token, Nintendo service token, client secret, or payment-card information. We may ask for additional non-secret verification to protect the account from unauthorized deletion.

Deletion of an online profile may permanently remove synchronized progression, levels, earned coins, statistics, achievements, unlockables, customization, cross-save links, and match history controlled by FIJOY Games. It may not delete records independently controlled by Epic Games, a platform holder, or a storefront, and it does not automatically refund or revoke a game purchase.

We will also act on valid deletion notifications received through Epic Account Services and delete Epic Account data in our possession or control as required by the Epic Account Services terms and applicable law.

Where the GDPR applies, we normally respond to a valid rights request within one month. That period may be extended where legally permitted for a complex or numerous request, in which case we will provide notice.

15

Children and parental controls

Floorball League 2 is a general-audience sports game and is not primarily directed to children under 13.

We do not knowingly ask children to send direct contact information through the website or game without an appropriate legal basis or required authorization. Platform age assurance, child-account, parental-consent, communication, purchase, and parental-control systems may apply.

A parent or guardian who believes a child provided personal information to FIJOY Games may contact hei@fijoygames.no to request assistance or deletion.

16

Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, alteration, or disclosure. These include data minimization, permission controls, secret-safe logging, protected authentication flows, integrity and replay checks, and service-provider safeguards where appropriate.

No transmission or storage method is guaranteed to be completely secure. Please protect your platform and Epic accounts, use available multi-factor authentication, and do not share passwords or authentication tokens.

17

Matchmaking and automated processing

The game may use automated rules such as skill rating, rank, region, latency, party size, mode, or connection compatibility to find opponents and organize matches. Progression rules may automatically calculate XP, coins, objectives, achievements, unlockables, or sanctions from gameplay events.

These game systems are used to operate gameplay and do not make decisions that produce legal or similarly significant effects about you. You may contact us if you believe an automated game result or account restriction is incorrect.

18

Website cookies

Most visitors do not need a FIJOY Games website account.

When an authorized user visits the WordPress login page, WordPress may set a temporary cookie to check whether the browser accepts cookies. Authorized login and preference cookies may then be used to maintain the session and settings. Logging out removes login cookies. Hosting and security providers may use strictly necessary technologies to protect the site.

If optional analytics, advertising, or other non-essential cookies are added, we will provide the notices and choices required by applicable law before using them.

19

Changes to this policy

We may update this policy when our games, providers, features, or legal obligations change. The effective date at the top identifies the latest material revision. Where required, we will provide additional notice or request renewed consent before a material change takes effect.