paddle-privacy-v2-20261105 · 2026-11-05

Effective date: 2026-11-05

Black Alive Privacy Policy

1. Controller

This Privacy Policy explains how UNIPLUS, storitve in trgovina, d.o.o., Cesta v Lipovce 3B, 1358 Log pri Brezovici, Slovenia (“UNIPLUS”, “Black Alive”, “we”) processes personal data in connection with the Black Alive website, installed web application, digital worlds, purchases and customer support.

UNIPLUS is the controller where it determines the purposes and means of processing. Contact: support@blackalive.com.

2. Data used for accounts, purchases and support

For a purchase through Paddle, payment details are handled by Paddle and the payment participants involved in Checkout. UNIPLUS does not store full payment-card credentials on UNIPLUS servers. Black Alive uses account and order information, product and transaction identifiers, amounts, currencies, payment/refund status and recorded consent information to provide access, reconcile transactions and support the product. Paddle describes its own handling of buyer and payment data in its Privacy Notice: https://www.paddle.com/legal/privacy.

Depending on how you use Black Alive, we may process:

- Website/security data: IP address, date/time, requested URL, browser/user-agent, response status and similar technical server-log data required for operation, security and troubleshooting.

- Local device data: browser local storage and Cache Storage used for functional settings such as language, device profile and downloaded media packs. These are primarily stored on your device.

- Microphone input: some worlds may request microphone permission to detect blowing or similar interaction. The feature is designed to process microphone input locally in the browser. UNIPLUS does not intentionally record, upload or store microphone audio for this feature.

- Purchase/transaction data: name, email, country, product, price, currency, transaction/payment reference, payment/refund/chargeback status and data required to provide or restore access.

- Payment data: earlier purchases may have used Stripe Managed Payments / Link. For those earlier purchases, full card credentials are handled by Stripe and relevant financial institutions and are not stored by UNIPLUS on Black Alive servers. UNIPLUS receives transaction, entitlement, refund and reconciliation data needed to complete the sale, provide access, support the product and keep required records.

- Account and sign-in data: email address, account identifier, verification timestamps, hashed email sign-in codes, code-attempt records and hashed server-session tokens. Secure, essential cookies maintain your session and protect requests against forgery.

- Review data: the public name you choose, review text, selected World, language, submission time, account identifier and moderation status. Reviews are checked by UNIPLUS before publication. If approved, your chosen name and review are public on the website and in the app; your account email is not published. A review does not have to use your real name.

- Support/withdrawal data: information you provide when contacting us, requesting a refund, exercising withdrawal rights or reporting a problem, together with related order or technical data.

We do not intentionally collect special-category personal data through ordinary use of Black Alive.

3. Purposes and legal bases

We process personal data where necessary to provide the service and perform a contract; take requested pre-contract steps; process payments/refunds/access restoration; comply with legal obligations; operate and secure the service based on legitimate interests; respond to support and rights requests; and establish, exercise or defend legal claims.

Where processing relies on consent, consent may be withdrawn at any time without affecting prior lawful processing.

Account and session processing is necessary to provide the account service you request. Review submission and publication are voluntary and based on your consent to publication; moderation and abuse prevention serve our legitimate interests in maintaining a useful, trustworthy feedback channel. You may withdraw publication consent or request removal by emailing support@blackalive.com. This does not affect processing that was lawful before withdrawal.

4. Paddle and earlier payment providers

UNIPLUS controls Black Alive accounts, product access, support and the corresponding records. Paddle is the seller and separately determines payment-related processing for its role under its Privacy Notice. Order/account references and transaction, payment and refund information are exchanged to connect the purchase with access and handle support. Stripe/Link records remain associated with earlier purchases; introducing Paddle does not migrate those historical records.

5. Service providers

We may use providers needed to operate Black Alive, including:

- hosting/infrastructure providers in the EU, currently including Hetzner in Germany;

- Paddle for new Paddle transactions, with its own payment participants under its Privacy Notice;
- Stripe/Link for earlier transactions made through those providers;

- Cloudflare for domain/DNS functions and, when enabled, email routing;

- Google/Gmail as the destination mailbox for Black Alive support correspondence;

- Resend for sending transactional and legally required email confirmations;

- professional advisers, accountants and public authorities where necessary or legally required.

Providers receive only information reasonably needed for their role and are subject to applicable safeguards.

6. International transfers

Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful mechanism.

7. Local storage, cookies and tracking

Black Alive currently uses browser storage primarily for functional purposes such as language selection, local world media, device settings and access-related functionality.

The Global product currently does not use third-party advertising pixels or cross-site behavioural advertising trackers. Payment providers may use technologies necessary for payment security, fraud prevention and checkout operation under their own policies.

Black Alive keeps anonymous daily aggregates of public-page requests, referral domains, countries, media requests and response bytes. It also counts the first successful world start per page, public Golden Fish purchase-button clicks, installation UI clicks, supported Chromium appinstalled events, iOS installation-instruction views and standalone /app/ opens. These are aggregate event counts, not unique people, visits or proof of a completed installation. Short allowlisted UTM source, medium and campaign codes on requested page URLs are counted as landing-campaign totals; other query data and referral paths are discarded. Do not put personal information in campaign codes. No analytics cookies, browser storage, fingerprint, visitor recognition, raw IP or IP hash is used. Anonymous event requests omit account cookies and contain only a fixed event name and a random per-event nonce. Nonces are held only in memory for up to ten minutes to suppress duplicates, never stored in the database or linked across visits. Only daily totals are retained for 30 UTC calendar days; offline or blocked events can be missed. The connection IP is used transiently for local GeoIP country lookup and is not retained or hashed for analytics. The owner-only dashboard also summarizes existing verified Paddle Live checkout, payment and refund records. It separates paid sales, zero-value review purchases and historical Stripe data, and does not infer payment fees or net revenue. Operational order, consent and payment records retain their existing purposes and retention rules.

We use our legitimate interest in understanding overall service demand and media delivery (GDPR Article 6(1)(f)) for the limited transient processing needed to form these totals. We discard identifying data and keep no individual analytics profiles. This implementation adds only the anonymous aggregate requests described above, not advertising or cross-site tracking. Do Not Track (DNT: 1) and Global Privacy Control (Sec-GPC: 1) exclude requests from these statistics. Essential sign-in and request-protection cookies, language preferences and requested world storage retain their existing functional purposes. You may object to legitimate-interest processing at support@blackalive.com. Cookieless operation is not a general exemption for tracking.

Country totals use the locally installed DB-IP IP to Country Lite database. Only the country code is kept in daily statistics; the request IP is not stored or hashed in analytics, and no visitor IP is sent to DB-IP. IP geolocation is approximate and may reflect a VPN or proxy. IP Geolocation by DB-IP · CC BY 4.0. The database is used without changes and is provided without warranties.

8. Retention

We keep personal data only as long as necessary. Transaction/accounting records are retained for statutory periods. Support/dispute records are retained as reasonably needed to resolve matters and protect legal rights. Security logs are retained for a limited period appropriate to security and troubleshooting. Data stored locally on your device remains until replaced, expired under browser rules or cleared by you or your browser.

Account data is retained while the account remains active or as needed to address an account-deletion request and applicable legal claims. Sign-in codes expire after 10 minutes and sessions after seven days. Pending and rejected reviews are retained for up to 90 days unless needed to resolve abuse or a legal claim; approved reviews are retained while published, subject to removal requests. Ask support to remove a review or close an account.

Delivery-audit, consent and payment-related records are retained according to their purpose and applicable obligations. Retention is reviewed, including expiry and lawful erasure or anonymisation requests; records may be retained where continued retention is legally justified. An append-only operational audit does not exclude applicable data-protection rights. No separate fixed retention period for these new records is stated here.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent where applicable. Contact support@blackalive.com.

You may also complain to the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, Slovenia, email: gp.ip@ip-rs.si.

10. United States privacy

Black Alive does not currently sell personal information or use personal information for cross-context behavioural advertising. Residents of U.S. states with applicable additional privacy rights may contact support@blackalive.com.

11. Children

Black Alive is not designed to collect personal data from children. A person who lacks legal capacity to purchase should purchase only through a parent or legal guardian.

12. Security

We use reasonable technical and organisational measures designed to protect personal data. No internet service can guarantee absolute security.

13. Versions and contact

Each document has its own version and effective date. Earlier purchase/consent snapshots remain unchanged. Contact: support@blackalive.com.

paddle-privacy-v2-20261105 · 2026-11-05

Datum začetka veljavnosti: 2026-11-05

Politika zasebnosti Black Alive

1. Upravljavec

Ta politika zasebnosti pojasnjuje, kako družba UNIPLUS, storitve in trgovina, d.o.o., Cesta v Lipovce 3B, 1358 Log pri Brezovici, Slovenija (»UNIPLUS«, »Black Alive«, »mi«) obdeluje osebne podatke v povezavi s spletnim mestom Black Alive, nameščeno spletno aplikacijo, digitalnimi svetovi, nakupi in podporo uporabnikom.

UNIPLUS je upravljavec, kadar določa namene in sredstva obdelave. Kontakt: support@blackalive.com.

2. Podatki za račune, nakupe in podporo

Pri nakupu prek storitve Paddle plačilne podatke obdelujejo Paddle in udeleženci plačilnega postopka Checkout. Trenutna integracija Black Alive na strežnikih UNIPLUS ne zahteva ali shranjuje popolnih podatkov plačilne kartice. Black Alive uporablja podatke o računu in naročilu, identifikatorje izdelka in transakcije, zneske, valute, stanje plačila oziroma vračila ter zabeležena soglasja za omogočanje dostopa, usklajevanje transakcij in podporo izdelku. Paddle svojo obdelavo podatkov kupcev in plačil opisuje v obvestilu o zasebnosti: https://www.paddle.com/legal/privacy.

Glede na način uporabe Black Alive lahko obdelujemo:

- Podatke spletnega mesta in varnosti: naslov IP, datum/čas, zahtevani URL, podatke o brskalniku oziroma uporabniškem agentu, status odgovora in podobne tehnične podatke strežniških dnevnikov, potrebne za delovanje, varnost in odpravljanje napak.

- Lokalne podatke v napravi: lokalno shrambo in Cache Storage za funkcionalne nastavitve, kot so jezik, profil naprave in preneseni paketi medijskih datotek. Ti podatki so praviloma shranjeni v vaši napravi.

- Vhod iz mikrofona: nekateri svetovi lahko zahtevajo dovoljenje za mikrofon za zaznavanje pihanja ali podobne interakcije. Funkcija je zasnovana tako, da se vhod iz mikrofona obdeluje lokalno v brskalniku. UNIPLUS zvoka mikrofona za to funkcijo namenoma ne snema, ne prenaša na strežnik in ne shranjuje.

- Podatke o nakupu/transakciji: ime, e-poštni naslov, država, izdelek, cena, valuta, referenca transakcije/plačila, status plačila/vračila/povratne bremenitve kartične transakcije in podatke, potrebne za omogočanje ali obnovitev dostopa.

- Plačilne podatke: prejšnji nakupi so se lahko plačevali prek storitve Stripe Managed Payments / Link. Pri teh prejšnjih nakupih popolne kartične podatke obdelujejo Stripe in ustrezne finančne institucije; UNIPLUS jih ne shranjuje na strežnikih Black Alive. UNIPLUS prejme podatke o transakciji, dostopu, vračilu in uskladitvi, potrebne za izvedbo prodaje, omogočanje dostopa, podporo izdelku in zakonske evidence.

- Podatke o računu in prijavi: e-poštni naslov, identifikator računa, časovne podatke o preverjanju, zgoščene kode za prijavo, zapise poskusov prijave in zgoščene žetone strežniških sej. Nujni varni piškotki ohranjajo prijavno sejo in ščitijo zahteve pred ponarejanjem.

- Podatke o mnenjih: izbrano javno prikazano ime, besedilo mnenja, izbrani svet, jezik, čas oddaje, identifikator računa in stanje pregleda pred objavo. UNIPLUS mnenja pred objavo pregleda. Če je mnenje odobreno, sta izbrano ime in mnenje javno objavljena na spletnem mestu in v aplikaciji; e-poštni naslov računa ni objavljen. Za mnenje ni treba uporabiti pravega imena.

- Podatke podpore/odstopa: podatke, ki jih posredujete ob podpori, zahtevi za vračilo, uveljavljanju odstopa ali prijavi težave, ter povezane podatke o naročilu ali tehnične podatke.

Pri običajni uporabi Black Alive ne nameravamo zbirati posebnih vrst osebnih podatkov.

3. Nameni in pravne podlage

Osebne podatke obdelujemo, kadar je to potrebno za zagotavljanje storitve in izvajanje pogodbe; izvedbo ukrepov pred sklenitvijo pogodbe; plačila, vračila in obnovitev dostopa; izpolnjevanje zakonskih obveznosti; zakoniti interes varnega in zanesljivega delovanja storitve; obravnavo zahtev uporabnikov; ter uveljavljanje ali obrambo pravnih zahtevkov.

Kadar obdelava temelji na privolitvi, jo lahko kadar koli prekličete, ne da bi to vplivalo na predhodno zakonito obdelavo.

Obdelava podatkov računa in seje je potrebna za zagotavljanje storitve računa, ki jo zahtevate. Oddaja in objava mnenja sta prostovoljni ter temeljita na vaši privolitvi v objavo; pregled mnenj in preprečevanje zlorab temeljita na našem zakonitem interesu za uporabno in zaupanja vredno zbiranje povratnih informacij. Privolitev v objavo lahko prekličete ali zahtevate odstranitev mnenja po e-pošti na support@blackalive.com. To ne vpliva na obdelavo, ki je bila pred preklicem zakonita.

4. Paddle in prejšnji ponudniki plačil

UNIPLUS nadzoruje račune Black Alive, dostop do izdelka, podporo in ustrezne evidence. Paddle je prodajalec in samostojno določa obdelavo plačilnih podatkov za svojo vlogo po svoji Politiki zasebnosti. Reference naročil in računov ter podatki o transakcijah, plačilih in vračilih se izmenjujejo za povezavo nakupa z dostopom in obravnavo podpore. Evidence Stripe/Link ostanejo povezane s prejšnjimi nakupi; uvedba storitve Paddle teh zgodovinskih evidenc ne preseli.

5. Ponudniki storitev

Za delovanje Black Alive lahko uporabljamo:

- ponudnike gostovanja/infrastrukture v EU, trenutno vključno s Hetznerjem v Nemčiji;

- Paddle za nove transakcije Paddle z njegovimi udeleženci plačilnega postopka po njegovem obvestilu o zasebnosti;
- Stripe/Link za prejšnje transakcije prek teh ponudnikov;

- Cloudflare za domenske/DNS funkcije in, kadar je omogočeno, usmerjanje elektronske pošte;

- Google/Gmail kot ciljni poštni predal za korespondenco podpore;

- Resend za pošiljanje transakcijskih in zakonsko zahtevanih elektronskih potrdil;

- strokovne svetovalce, računovodske izvajalce in pristojne organe, kadar je to potrebno ali zakonsko zahtevano.

Ponudniki prejmejo le podatke, ki so razumno potrebni za njihovo nalogo, in so zavezani ustreznim varovalom.

6. Prenosi v tretje države

Nekateri ponudniki lahko podatke obdelujejo zunaj EGP. Kadar je potrebno, prenosi temeljijo na sklepu o ustreznosti, standardnih pogodbenih klavzulah ali drugem zakonitem mehanizmu.

7. Lokalna shramba, piškotki in sledenje

Black Alive trenutno uporablja shrambo brskalnika predvsem za funkcionalne namene, kot so izbira jezika, lokalni mediji sveta, nastavitve naprave in funkcije dostopa.

Globalni izdelek trenutno ne uporablja oglaševalskih pikslov tretjih oseb ali sledilnikov za vedenjsko oglaševanje med različnimi spletnimi mesti. Ponudniki plačil lahko uporabljajo tehnologije, potrebne za varnost plačil, preprečevanje goljufij in delovanje plačila.

Black Alive hrani anonimne dnevne agregate zahtev za javne strani, domen napotitev, držav, zahtev za medije in bajtov odgovorov. Šteje tudi prvi uspešen zagon sveta na strani, klike gumba za javni nakup Golden Fish, klike namestitvenega vmesnika, podprte dogodke appinstalled v Chromiumu, oglede navodil za namestitev v iOS in odpiranja /app/ v samostojnem načinu. To so zbirni dogodki, ne enkratni obiskovalci, obiski ali dokaz dokončane namestitve. Kratke dovoljene oznake UTM source, medium in campaign v zahtevah za strani se štejejo kot zbirne vstopne kampanje; drugi podatki poizvedb in poti napotitev se zavržejo. V oznake kampanj ne vnašajte osebnih podatkov. Ne uporabljamo analitičnih piškotkov, shrambe brskalnika, prstnih odtisov, prepoznavanja obiskovalcev, surovih naslovov IP ali njihovih zgostitev. Anonimne zahteve za dogodke ne pošiljajo piškotkov računa ter vsebujejo le določeno ime dogodka in naključno enkratno oznako dogodka. Te oznake so največ deset minut le v pomnilniku zaradi odstranjevanja dvojnikov; ne shranijo se v zbirko in se ne povezujejo med obiski. Dnevne vsote se hranijo 30 koledarskih dni UTC; dogodki brez povezave ali blokirani dogodki lahko manjkajo. IP povezave se začasno uporabi za lokalno določitev države GeoIP in se v analitiki ne hrani ali zgosti. Nadzorna plošča za lastnika povzema tudi obstoječe potrjene evidence plačil in vračil Paddle Live. Ločuje plačano prodajo, pregledne nakupe brez plačila in zgodovinske podatke Stripe ter ne ocenjuje provizij ali neto prihodka. Operativne evidence naročil, soglasij in plačil ohranijo obstoječe namene in pravila hrambe.

Za omejeno začasno obdelavo, potrebno za te vsote, uporabljamo zakoniti interes za razumevanje skupnega povpraševanja po storitvi in dostave medijev (člen 6(1)(f) GDPR). Identifikacijske podatke zavržemo in ne hranimo osebnih analitičnih profilov. Izvedba doda le zgoraj opisane anonimne zbirne zahteve, ne oglaševalskega sledenja ali sledenja med spletnimi mesti. Do Not Track (DNT: 1) in Global Privacy Control (Sec-GPC: 1) izključita zahteve iz statistike. Nujni piškotki prijave in zaščite zahtev, jezikovne nastavitve in zahtevana shramba svetov ohranijo obstoječe funkcionalne namene. Obdelavi na podlagi zakonitega interesa lahko ugovarjate na support@blackalive.com. Delovanje brez piškotkov ni splošna izjema za sledenje.

Za zbirno statistiko držav uporabljamo lokalno zbirko DB-IP IP to Country Lite. V dnevni statistiki hranimo le kodo države; IP zahteve se v analitiki ne hrani ali zgosti, IP obiskovalca pa se ne pošilja DB-IP. Geolokacija IP je približna in lahko odraža VPN ali posredniški strežnik. IP Geolocation by DB-IP · CC BY 4.0. Zbirko uporabljamo brez sprememb in brez jamstev.

8. Hramba

Podatke hranimo le toliko časa, kolikor je potrebno. Transakcijske in računovodske evidence hranimo v zakonskih rokih. Zapise podpore in sporov hranimo toliko časa, kolikor je razumno potrebno za rešitev zadeve in varovanje pravnih pravic. Varnostni dnevniki se hranijo omejeno obdobje, primerno za varnost in odpravljanje napak. Lokalni podatki ostanejo v napravi, dokler jih aplikacija ne zamenja, dokler ne potečejo po pravilih brskalnika ali dokler jih ne izbrišete vi oziroma brskalnik.

Podatke računa hranimo, dokler je račun aktiven, oziroma kolikor je potrebno za obravnavo zahteve za izbris računa in morebitnih pravnih zahtevkov. Kode za prijavo potečejo po 10 minutah, seje pa po sedmih dneh. Mnenja, ki čakajo na pregled ali so zavrnjena, hranimo največ 90 dni, razen kadar so potrebna za obravnavo zlorabe ali pravnega zahtevka; odobrena mnenja hranimo, dokler so objavljena, ob upoštevanju zahtev za odstranitev. Za odstranitev mnenja ali zaprtje računa se obrnite na podporo.

Evidence dobave, soglasij in plačil se hranijo glede na njihov namen in veljavne obveznosti. Hramba se pregleduje, vključno z iztekom hrambe in zakonitimi zahtevami za izbris ali anonimizacijo; nadaljnja hramba je mogoča, kadar je pravno utemeljena. Operativna evidenca, ki omogoča le dodajanje, ne izključuje veljavnih pravic varstva podatkov. Poseben fiksen rok hrambe za te nove evidence tukaj ni določen.

9. Vaše pravice

V skladu z veljavnim pravom lahko zahtevate dostop, popravek, izbris, omejitev, prenosljivost, ugovor obdelavi na podlagi zakonitega interesa ter preklic privolitve, kadar je to primerno. Kontakt: support@blackalive.com.

Pritožbo lahko vložite pri Informacijskem pooblaščencu Republike Slovenije, Dunajska cesta 22, 1000 Ljubljana, Slovenija, e-pošta: gp.ip@ip-rs.si.

10. Zasebnost uporabnikov v ZDA

Black Alive trenutno ne prodaja osebnih podatkov in jih ne uporablja za vedenjsko oglaševanje med različnimi spletnimi mesti. Prebivalci ameriških zveznih držav z veljavnimi dodatnimi pravicami lahko pišejo na support@blackalive.com.

11. Otroci

Black Alive ni zasnovan za zbiranje osebnih podatkov otrok. Oseba brez pravne sposobnosti za samostojen nakup naj nakup opravi prek starša ali zakonitega skrbnika.

12. Varnost

Uporabljamo razumne tehnične in organizacijske ukrepe za zaščito podatkov. Nobena internetna storitev ne more zagotoviti popolne varnosti.

13. Različice in kontakt

Vsak dokument ima svojo različico in datum začetka veljavnosti. Prejšnji posnetki nakupov in soglasij ostanejo nespremenjeni. Kontakt: support@blackalive.com.