Privacy Policy

How Isara handles account, payment and gameplay information.

Last updated: October 25, 2026

1. Controller and contact

RFNX777 LLC operates Isara and determines how personal data is used for the service. Address: 30 N Gould St, Ste N, Sheridan, WY 82801, United States. For privacy requests, contact [email protected] with the subject “Privacy request”.

2. Information we process

• Accounts: account identifier, email address, password verification data, selected country, account settings and registration records.
• Gameplay and public profiles: character names, outfits, progress, guilds, deaths, rankings and information you choose to publish. Depending on the relevant page and privacy setting, character details and country flags can be visible to other visitors.
• Connections and security: IP addresses, session identifiers, request times, browser/client information, errors and security events.
• Payments: order and payment references, package, amount, currency, payment status, point-credit records and information needed for tax, refunds and disputes. Payment details are entered with the payment provider. Isara does not receive your full card number or card security code.
• Support: messages and information you send when contacting us.
• Fair-play evidence: gameplay events, their timing, in-game movement and mouse/input activity reported by the client, and recordings of gameplay. We use this information to protect fair play and investigate suspected abuse. Gameplay recordings do not capture your webcam or desktop.

3. Why we use data

We use account, gameplay and order data to provide the service and fulfil purchases (performance of a contract). We process security and fair-play evidence to protect players, investigate abuse and defend legal claims (legitimate interests, balanced against your rights). Tax and accounting records are processed to meet applicable legal obligations. Where optional processing requires consent, we request it separately and you can withdraw it without affecting earlier lawful processing.

Required account and payment information is necessary to provide the relevant service. Choosing not to provide it may prevent account creation or checkout, but you can still access public information.

4. Monitoring and moderation

Automated checks assist the administration in identifying activity that may breach the rules. You may contest a moderation decision and request human review by contacting us. Monitoring described here concerns the Isara service and in-game activity, not unrelated use of your computer.

5. Who receives information

Access is limited to authorised administration and service providers where needed. These include hosting and network providers, Cloudflare for website delivery and protection, Stripe or Tebex for the checkout you choose, and our email provider Tuta for correspondence. Tebex receives the basket and payment information needed to process its checkout and acts as merchant of record for those purchases. Authorities, advisers or dispute-resolution parties may receive information when legally required or necessary for a specific claim. Public profile information is visible to website visitors.

Stripe and Tebex process checkout information under their own privacy notices, available through their respective checkout services. Isara retrieves approximate, aggregate member and online counts from Discord on the server and temporarily caches only those numbers. The optional embedded widget is subject to Discord's privacy policy. Enabling the embedded widget connects your browser to Discord; the aggregate counters alone do not. We do not sell personal data.

6. International processing

Our operator is established in the United States, and hosting, network, payment and support providers may process data in the EU, the US or other countries. Applicable data-protection requirements continue to apply to these transfers. Contact us for information about the recipients and transfer safeguards relevant to your data. Further information about our providers' processing is available in their privacy notices.

7. How long data is kept

Account and progress data is retained while needed to operate your account and handle recovery or closure. Security and support records are retained for as long as needed to investigate incidents, resolve requests and protect legal claims. Payment and tax records may need to be kept after account closure for statutory recordkeeping and disputes. The relevant period depends on the record and applicable obligation.

Routine gameplay recordings are scheduled for deletion after seven days and may be deleted sooner. Records needed for a specific dispute or legal obligation may be retained separately for that purpose. Deleted account information may remain in restricted recovery backups until those backups expire. Discord aggregate counters are refreshed approximately every five minutes and kept in a temporary cache; we do not store member names or user IDs for these counters.

8. Your rights

Where applicable, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent. We may need proportionate verification of your identity before acting. We normally respond to GDPR requests within one month; where a lawful extension is necessary, we explain it within that period. You can complain to the data-protection authority where you live, work or believe an infringement occurred. These rights may have legal exceptions, including required tax records and the rights of other people.

9. Cookies and embedded services

The website uses session storage mechanisms to maintain login, protect forms and keep a purchase associated with the correct account. Security services may also use cookies or similar identifiers to distinguish legitimate requests and mitigate abuse. These functions are necessary for the requested service and security.

The aggregate Discord member and online counters load automatically through Isara without a browser connection to Discord. The optional Discord member-list widget remains unloaded until you choose “Load Discord widget”. Your choice applies to that page view. Discord then receives connection information and may use its own storage under its policy. You can remove the widget or reload the page to stop further widget requests; this does not erase information already sent. You can also visit Discord using the separate link.

Payment-provider cookies and security mechanisms may operate when you open checkout. You can manage cookies in your browser, but blocking necessary storage can interrupt sign-in or purchases. If we introduce optional analytics or advertising cookies, we will explain their purpose and request consent where required before using them.

10. Updates

We update this notice when relevant processing changes and display the current date above. We will provide additional notice for material changes where required. Send questions or requests to [email protected].