// legal

At MrPegasus ("we", "us", "our") we take your privacy seriously. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information. By using mrpegasus.com (the "Service"), you agree to the practices described here.

1. Information we collect

We collect the following categories of information when you use MrPegasus:

• Account information: username, email address, password (hashed), and optional profile data such as display name and avatar.
• Gameplay data: match history, scores, statistics, status level, points earned, cosmetics owned and equipped.
• Communication data: we facilitate real-time peer-to-peer video and audio calls between users. We do not record, store, or have access to the contents of your calls. Connection metadata (timestamps, room codes, participants) is logged for security and abuse-prevention purposes.
• Technical data: IP address, browser type and version, operating system, device information, and language preference.
• Usage data: pages visited, features used, session duration, click patterns. This helps us improve the product.
• Reports and moderation data: if you file or are subject to a report, the report contents, attached evidence, and moderator notes are stored.

2. How we use your information

• To provide and maintain the Service (matchmaking, video calls, gameplay, cosmetics).
• To authenticate your account and prevent unauthorized access.
• To enforce community guidelines, investigate reports, and take moderation action.
• To send transactional emails (account verification, password resets, important notices).
• To analyze and improve the Service based on aggregate, anonymized usage patterns.
• To deliver and personalize advertising (see Section 5).
• To comply with legal obligations.

3. How we share your information

We do not sell your personal information. We share data only in these limited cases:

• Service providers: hosting (Hostinger), real-time messaging (Pusher), email delivery, analytics, and similar infrastructure providers operating under data-processing agreements.
• Advertising partners: Google AdSense, Google AdMob, and similar networks may receive de-identified usage data to serve relevant ads. See Section 5.
• Other users: your public profile (username, status, equipped cosmetics, match history) is visible to other users.
• Legal authorities: when required by law or to protect our rights, users, or the public.
• In connection with a business transfer: if MrPegasus is acquired or merges with another entity, your data may be transferred subject to this Policy.

4. Cookies and tracking

MrPegasus uses cookies and similar technologies for authentication, preference storage, analytics, and advertising. See our Cookie Policy for full details and your control options.

5. Advertising

We use third-party advertising services to support MrPegasus, including Google AdSense and Google AdMob. These services use cookies and identifiers to:

• Serve ads relevant to your interests based on your browsing history.
• Measure ad effectiveness and prevent fraud.
• Limit how many times you see the same ad.

Google's use of advertising cookies is governed by their own privacy policy. You can opt out of personalized advertising at Google Ads Settings or aboutads.info/choices.

6. Data retention

We retain your data as long as your account is active. If you delete your account, your personal data is purged within 30 days, except where retention is required by law (e.g. financial records, abuse logs).

7. Security

We use HTTPS encryption in transit, hashed passwords (bcrypt), parameterized database queries, and isolated infrastructure. No system is 100% secure; we do our best and we'll inform you if a breach affecting your data occurs.

8. Children's privacy

MrPegasus is not directed to children under 13. We do not knowingly collect data from children. If you believe a child has registered, please contact us and we will remove the account.

9. Your rights

Depending on your jurisdiction (EU GDPR, California CCPA, Turkey KVKK, etc.), you have rights including:

• Access to a copy of your personal data.
• Correction of inaccurate data.
• Deletion of your data ("right to be forgotten").
• Restriction or objection to certain types of processing.
• Portability — receiving your data in a machine-readable format.
• Withdrawal of consent at any time.

To exercise these rights, email info@mrpegasus.com.

10. International transfers

Our servers are located in the United States. If you access MrPegasus from outside the US, your data may be transferred, stored, and processed in the US under appropriate safeguards.

11. Changes to this policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via in-platform notice or email.

12. Contact

For privacy-related questions or to exercise your rights, contact:
info@mrpegasus.com