lu4.org — LU4 Platform
Last updated: 27 July 2026
Data Controller: GAMEVIBE LTD, a legal entity incorporated under the law of England and Wales, company registration number (Companies House number) 17353570, registered office address: Suite 7007, 128 Aldersgate Street, Barbican, London, England, EC1A 4AE, United Kingdom ("we", the "Operator"). The Operator is also the Merchant of Record for Paid Digital Services, as set out in the Platform Terms of Use.
This Privacy Policy explains what information we collect when you use the LU4 Platform, why we do so, with whom we may share that information, and what rights you have in respect of it.
The terms "Platform", "Operator", "Account", "Virtual Currency" and other capitalised terms not separately defined below have the meaning given to them in the Platform Terms of Use. This Policy additionally uses the following terms:
This Policy describes what Personal Data we collect in connection with your use of the Platform, for what purposes, on what legal bases, to whom we disclose it, and for how long we retain it.
As the Operator is established in England and Wales (United Kingdom), the processing of Personal Data is primarily governed by the UK GDPR (Regulation (EU) 2016/679 as it applies in the United Kingdom) and the Data Protection Act 2018. At the same time, given the Platform's international audience, we aim to comply with GDPR (Regulation (EU) 2016/679) standards for users in the European Union, as well as the relevant local law for users in other countries.
The Platform serves users from Europe, Asia, the United States, and Latin America.
When you register, we collect your email address and password. Your password is stored exclusively in hashed form.
While you use the Platform, we automatically receive: your IP address, the type and version of your operating system and game client, session identifiers, and language settings.
We store Character progress and attributes, Virtual Currency balance, in-game transaction history, and the content of support enquiries.
Data directly necessary to process a payment is entered by you on the page of the Merchant of Record or the payment processor and does not reach our servers in full.
As of the date this Policy was last updated, the Platform does not use separate anti-cheat software beyond built-in server-side checks of game logic. If such software is introduced in the future, this Policy will be updated to describe exactly what data it collects.
We process Account data and gameplay data on the basis that it is necessary for the performance of our contract with you (the Terms of Use).
We process technical data on the basis of the legitimate interest of the Operator and other Users in protecting the integrity of the Platform.
If you have separately subscribed to receive newsletters, we send messages on the basis of your freely given consent, which you may withdraw at any time.
We process transaction data for accounting and tax record-keeping purposes on the basis of a legal obligation.
We disclose Personal Data to the following categories of recipients: hosting and infrastructure provider; web analytics provider; video content services embedded on Platform pages; CAPTCHA provider; payment processor(s) acting on the Operator's instructions (the Operator also acting as Merchant of Record); user support service; and, where necessary, anti-fraud service providers and competent public authorities.
Where Personal Data is transferred outside the country in which it was collected (including, for users in the European Union, outside the European Economic Area), we ensure that an appropriate transfer mechanism is used — in particular, the International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, or another mechanism that complies with the applicable data protection law of the recipient.
We retain Personal Data only for as long as necessary for the purposes described in Section 4, or for as long as required by applicable law.
Financial transaction data is retained for the period required by United Kingdom tax and accounting law.
Depending on applicable law, you may have the right to access your Personal Data, to have it corrected or erased, to restrict its processing, to object to its processing, to data portability, and to withdraw consent.
The authority responsible for supervising compliance with data protection law in the United Kingdom is the Information Commissioner's Office (ICO).
If you are a resident of the European Union, you also have the right to lodge a complaint with the data protection authority of your country of residence.
If you are a resident of a US state whose law grants additional rights regarding personal data, we will enable you to exercise those rights on request. We do not sell Users' Personal Data to third parties for monetary consideration, and we do not "share" it, within the meaning of applicable US state law (including the CPRA), for the purposes of cross-context behavioural advertising. If this changes, we will provide a separate opt-out mechanism ("Do Not Sell/Share My Personal Information") on the Platform.
To exercise any of the rights listed above, please send a request to the contact email address given in Section 11.
In the event of a breach of Personal Data that may pose a high risk to the rights and freedoms of Users, we will notify the affected Users and, where required, the competent authority, within the time limits set by applicable law.
The general minimum age for creating an Account is 16, with a lower age permitted where confirmed parental consent has been given, in places where this is expressly allowed by applicable law. Regardless of the foregoing, persons under 13 residing in the United States of America may not register an Account and may not provide us with their Personal Data under any circumstances, in accordance with the requirements of the Children's Online Privacy Protection Act (COPPA).
Contact email address for enquiries regarding personal data: Direct@lu4.org.