Privacy notice

Learn which data Ctesiphon Protocol uses, why it is needed and how to exercise your rights.

Beta · Updated November 4, 2026.

Controller and contact

Raúl Guerrero Esteve, operator of Ctesiphon Protocol, located in Atizapán de Zaragoza, State of Mexico, is responsible for the processing described in this notice. For privacy questions and requests concerning your data: ctesiphon@earenlabs.com.

Who may use the service

The service is intended exclusively for people aged 18 or older who have legal capacity to use it under applicable law. It is not intended for minors.

Advertising during the beta

We do not use personal data to send advertising, build commercial profiles, upload audiences to Google, Meta or TikTok, or track advertising. We do not sell data or provide contact lists to sponsors. General project promotion on Ko-fi does not use players’ personal data.

Registering does not authorize possible future commercial uses. Before activating them, we will explain the purposes, data and recipients and request applicable permissions through separate, initially unchecked options. Refusing will not prevent access to basic service features.

Data and purposes

We store email addresses, usernames, display names and protected password hashes to manage access. We also store campaigns, expeditions, invitations, results and operation history. Discord, phone and WhatsApp details are optional contact methods. At registration we retain the accepted terms version, acceptance date and your declaration that you are at least 18, to document acceptance and manage access to the service.

Campaign visibility

Participants can view campaign information available to their role and settings, including names, expeditions and standings. Optional contacts are shared with the Warmaster or fellow players according to profile choices. Recovery email addresses are not included in the campaign contact directory. Sharing a contact does not subscribe you to advertising.

Promotional publications

Using names, nicknames linked to results, photographs, voice, videos or testimonials in promotional material requires specific permission identifying the material, purpose and publication channels. You may refuse without losing access to the service.

Ko-fi contributions

Contributions take place on Ko-fi through its payment providers. Ko-fi may share the supporter’s display name and email with the creator. Information and transaction records we receive will be used to manage the contribution, answer questions and meet applicable obligations. Donating does not subscribe you to advertising.

Ko-fi and payment providers process data for their own purposes under their respective notices. Read the Ko-fi privacy policy. This does not limit Ctesiphon’s legal obligations regarding data it receives or processes.

Service emails

We send account and invitation messages from ctesiphon@earenlabs.com: registration confirmation, password recovery and email changes. Resend receives the recipient and message content to deliver them. You can reply to this address for help. These messages do not subscribe you to advertising.

You do not need to connect a Google account or grant access to your inbox, contacts or files. Provider credentials are stored only on the server.

Storage and providers

Railway hosts the application and persistent data. Resend processes email delivery and Cloudflare manages the domain and contact email forwarding. The administrator has operational access to maintain the service and manage incidents and backups. Session cookies and local storage support access and interface preferences; the application does not include advertising trackers.

Retention and control

This version retains account and campaign data, history and backups without general automatic age-based deletion. You may request deletion by email. Recovery and confirmation links expire after 30 minutes and can be used only once.

The planned policy is to delete accounts after twelve months without signing in, with thirty days’ advance notice. This process is not yet enabled; users will be informed before activation. Retaining shared results after deleting an account requires effectively dissociating the former user’s identity. Legal retention obligations and backup cleanup will be addressed when handling each request.

Your rights and how to exercise them

You may request access, rectification, cancellation or opposition (ARCO rights), revoke permissions and limit use or disclosure by emailing ctesiphon@earenlabs.com. Include your name, a reply address, the right you wish to exercise and the relevant data. For rectification, explain the requested change. We will request proportionate information to verify your identity or representation.

We will communicate our determination within twenty business days and, where applicable, implement it within the following fifteen business days. Each period may be extended once for an equal period for justified reasons, which we will communicate. Access may be provided electronically after verifying identity. Revocation is not retroactive; if data must be retained under a legal obligation, we will explain the reason and scope.

You can also edit your profile, remove optional contacts and change their visibility.

Changes to this notice

Changes will be published on this page with an updated date. Where new permissions are needed, they will be requested before using data for those purposes. We do not request sensitive personal data for the described features.