// legal

At MrPegasus ("we", "us", "our") we take your privacy seriously. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding that information. By using mrpegasus.com (the "Service"), you agree to the practices described here.

1. Information we collect

We collect the following categories of information when you use MrPegasus:

• Account information: username, email address, password (hashed), and optional profile data such as display name and avatar.
• Gameplay data: match history, scores, statistics, status level, points earned, cosmetics owned and equipped.
• Communication data: MrPegasus facilitates real-time peer-to-peer video and audio calls between users using WebRTC technology. Audio and video streams travel directly between participants and are never routed through, recorded by, stored on, or accessible to MrPegasus servers or operators. We have no ability to monitor, transcribe, intercept, or retrieve the contents of any audio or video communication at any time. Connection metadata (timestamps, room codes, participant IDs, IP addresses for connection establishment via STUN/TURN servers) is logged solely for security, abuse-prevention, and infrastructure operation. Our STUN/TURN relay server is hosted in Frankfurt, Germany.
• Technical data: IP address, browser type and version, operating system, device information, and language preference.
• Usage data: pages visited, features used, session duration, click patterns. This helps us improve the product.
• Wallet address (optional): if you choose to save an EVM-compatible wallet address (Ethereum, Polygon, Arbitrum, Base, etc.) on the Wallet settings page, we store it solely for the purpose of future token distribution (see Terms §6/§6a). The wallet address is voluntarily provided, can be updated or cleared at any time, and is not required to use the Service. If you delete your account, your wallet address is purged along with all other account data.
• Reports and moderation data: if you file or are subject to a report, the report contents, attached evidence, and moderator notes are stored.

2. How we use your information

• To provide and maintain the Service (matchmaking, video calls, gameplay, cosmetics).
• To authenticate your account and prevent unauthorized access.
• To enforce community guidelines, investigate reports, and take moderation action.
• To send transactional emails (account verification, password resets, important notices).
• To analyze and improve the Service based on aggregate, anonymized usage patterns.
• To deliver and personalize advertising (see Section 5).
• To comply with legal obligations.

3. How we share your information

We do not sell your personal information. We share data only in these limited cases:

• Service providers: hosting (Hostinger), real-time messaging (Pusher), email delivery, analytics, and similar infrastructure providers operating under data-processing agreements.
• Advertising partners: Google AdSense, Google AdMob, and similar networks may receive de-identified usage data to serve relevant ads. See Section 5.
• Other users: your public profile (username, status, equipped cosmetics, match history) is visible to other users.
• Legal authorities: when required by law or to protect our rights, users, or the public.
• In connection with a business transfer: if MrPegasus is acquired or merges with another entity, your data may be transferred subject to this Policy.

4. Cookies and tracking

MrPegasus uses cookies and similar technologies for authentication, preference storage, analytics, and advertising. See our Cookie Policy for full details and your control options.

5. Advertising

We use third-party advertising services to support MrPegasus, including Google AdSense and Google AdMob. These services use cookies and identifiers to:

• Serve ads relevant to your interests based on your browsing history.
• Measure ad effectiveness and prevent fraud.
• Limit how many times you see the same ad.

Google's use of advertising cookies is governed by their own privacy policy. You can opt out of personalized advertising at Google Ads Settings or aboutads.info/choices.

6. Data retention

We retain your data as long as your account is active. If you delete your account, your personal data is purged within 30 days, except where retention is required by law (e.g. financial records, abuse logs).

7. Security

We use HTTPS encryption in transit, hashed passwords (bcrypt), parameterized database queries, and isolated infrastructure. No system is 100% secure; we do our best and we'll inform you if a breach affecting your data occurs.

8. Minors and age requirement

MrPegasus is strictly an adult-only service. The Service is not directed to anyone under 18 years of age, and we do not knowingly collect, store, or process personal information from anyone under 18. Use of the Service requires confirmation of being at least 18 years old at multiple points (account creation, camera enablement, token program eligibility).

If we become aware that a user under 18 has created an account or that personal data of a minor has been collected, we will immediately terminate the account and delete all associated data. If you are a parent or legal guardian and believe that a minor has registered or submitted personal data, please contact info@mrpegasus.com and we will act without delay.

9. Your rights

Depending on your jurisdiction (EU GDPR, California CCPA, Turkey KVKK, etc.), you have rights including:

• Access to a copy of your personal data.
• Correction of inaccurate data.
• Deletion of your data ("right to be forgotten").
• Restriction or objection to certain types of processing.
• Portability — receiving your data in a machine-readable format.
• Withdrawal of consent at any time.

To exercise these rights, email info@mrpegasus.com.

10. International transfers

Our servers are located in the United States. If you access MrPegasus from outside the US, your data may be transferred, stored, and processed in the US under appropriate safeguards.

11. Changes to this policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via in-platform notice or email.

12. Contact

For privacy-related questions or to exercise your rights, contact:
info@mrpegasus.com