This policy explains which personal data is processed when you use the Laghaim NewEarth website and game service.
Effective date: 5 September 2026
The controller responsible for processing personal data through the Laghaim NewEarth website and game service is:
Suleyman Agirman
Karl-Brückel-Str. 11
35415 Pohlheim
Germany
Email: admin@laghaim.de
This Privacy Policy explains how personal data is processed when you visit laghaim.de, create or manage an account, use the Laghaim NewEarth game service, contact support, appear in public rankings or purchase Laghaim Points.
When the website is accessed, the hosting system may process the IP address, date and time, requested page or file, referrer, browser and operating-system information, transferred data volume and response status. This is required to deliver the website, maintain technical stability and investigate abuse or attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and abuse-resistant operation of the website and game infrastructure.
For registration and account administration, we process the username, email address, authentication credentials, security code, registration date and registration IP address. We also process account status, Laghaim Point balance and records of password or email changes where required to provide the requested function.
The data is used to create and authenticate the account, send validation and account-related emails, provide account recovery and protect accounts against unauthorized access. The legal basis is Article 6(1)(b) GDPR and, for security measures, Article 6(1)(f) GDPR.
When you use the game service, we process account identifiers, character names and character data, progression, inventory and virtual-item data, game currency and point balances, guild and ranking data, gameplay events, login and connection data, chat or command data where recorded by the server, and security or anti-abuse information.
This processing is necessary to operate the game, save progress, provide rankings and events, investigate technical errors, enforce the Terms of Service and Game Rules, and prevent cheating, fraud and unauthorized access. The legal bases are Article 6(1)(b) and Article 6(1)(f) GDPR.
Selected character names, levels, classes, guild information, fame, event results or comparable game statistics may be displayed publicly on the website. Do not use a character name that reveals personal information you do not want to publish. The legal basis is Article 6(1)(b) GDPR and our legitimate interest in providing competitive game features under Article 6(1)(f) GDPR.
When you contact us or open a support ticket, we process the information you provide, which may include your email address, username, character name, ticket access code, subject, message, replies and IP address. We use this information to answer the request, verify account ownership where necessary and prevent misuse of the support system.
The legal basis is Article 6(1)(b) GDPR when the request concerns the service or an account, and otherwise Article 6(1)(f) GDPR. If a legal obligation applies, Article 6(1)(c) GDPR is the legal basis.
If you actively start a PayPal payment, we send transaction information required to create and verify the payment to PayPal. This includes a transaction or invoice reference, an internal account reference, the selected package, price, currency and description. PayPal processes additional payment and account data under its own privacy policy.
We retain the PayPal order and capture references, internal user reference, username, package, amount, currency, awarded points, payment status and timestamps in order to complete the transaction, prevent duplicate crediting, handle payment questions and meet legal record-keeping duties. The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.
PayPal's privacy information is available at paypal.com.
The website uses a technically necessary PHP session cookie for login, account, security and payment functions. The browser also stores the key lh_cookie_preferences_v1 locally to remember whether YouTube content is allowed. This preference contains no account identifier.
Technically necessary storage and access are based on section 25(2) no. 2 TDDDG. The associated processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Optional YouTube storage or access is based on your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may change the YouTube choice at any time by selecting the floating LH button. The necessary session cookie cannot be disabled through this window because the requested account and payment functions depend on it.
YouTube videos are embedded using the privacy-enhanced youtube-nocookie.com domain and are not loaded until you select “Understood & allow YouTube”. Once allowed, your browser connects to Google or YouTube. Your IP address, browser and device information, the page visited and interaction with the video may then be processed by Google, and data may be transferred outside the European Economic Area.
The legal basis is your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. You can withdraw consent for future use through the floating LH button. Google's privacy policy is available at policies.google.com/privacy.
The website currently obtains jQuery UI files from Google's hosted libraries when a page is opened. This technical request may transmit your IP address, browser information, referrer and access time to Google. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the reliable presentation and operation of the legacy website interface.
Personal data is available only to persons who require it to operate, administer or secure the service. It may also be processed by hosting, infrastructure and email service providers acting on our behalf, by PayPal when you initiate a payment, by Google when external files are requested or YouTube is allowed, and by public authorities where disclosure is legally required.
PayPal and Google may process data in countries outside Germany or the European Economic Area. Information about the locations, safeguards and applicable transfer mechanisms is provided in their respective privacy policies. No YouTube connection is initiated by the embedded player before you give consent.
Account and game data is generally retained while the account exists and afterwards only as long as needed to resolve disputes, enforce claims, protect the service or comply with legal duties. Support records are retained for as long as required to process and document the request. Payment and accounting records are retained for the statutory retention period. Temporary registration and technical log data is removed or anonymized when it is no longer required for its purpose, unless continued retention is legally permitted or required.
Subject to the legal requirements, you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability. You may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise these rights, contact admin@laghaim.de. We may need information necessary to verify that the request concerns your account.
You have the right to lodge a complaint with a competent data-protection supervisory authority.
Data marked as required is necessary to create and operate an account, answer a support request or process a payment. Without it, the respective function cannot be provided. There is no general statutory obligation to create an account or provide optional data.
We do not use solely automated decision-making that produces legal effects or similarly significant effects within the meaning of Article 22 GDPR.
We use appropriate technical and organizational measures designed to protect personal data against accidental loss, unauthorized access, alteration and disclosure. No internet service can guarantee absolute security. Please protect your password and security code and contact us promptly if you suspect unauthorized account access.
This Privacy Policy may be updated when the website, game service, service providers or legal requirements change. The current version and effective date are published on this page.