Privacy Policy
Effective date: 1 October 2026
This Privacy Policy explains how Resurge Games FZ-LLC collects, uses, stores and shares personal data when you play Tenno, visit our websites, buy on our portal, subscribe to our newsletter or use our other games, portals, APIs, software and services that link to this policy. We have tried to keep it short and plain. If something is unclear, write to us at support@resurgegames.com.
1. Who we are
The controller responsible for your personal data is:
Resurge Games FZ-LLC
FOB50127 Compass Building, Al Shohada Road
Al Hamra Industrial Zone-FZ, Ras Al Khaimah
United Arab Emirates
Phone: +971 52 892 5651
E-mail for privacy questions and data requests: support@resurgegames.com
We are established in the United Arab Emirates. We have not appointed a representative in the European Union or the United Kingdom. You can contact us directly at the address and e-mail above about any privacy matter, in English.
2. Services covered
This policy covers:
- the game Tenno on Android, iOS and Steam, including its game servers, chat and multiplayer features;
- our websites resurgegames.com, playtenno.io, resurge.dev and wiki.playtenno.io;
- the Tenno portal at portal.playtenno.io, where you can buy Tenno Coins and the Anbu Club subscription;
- our community bots and automations, including the Tenno Discord bot;
- our social media scheduling services and Resurge Development, our TikTok developer app;
- websites, booking systems, shops, portals and other software we build, host or license to business customers (see section 15 for how our role differs there).
3. Age
Tenno and our consumer services are for people aged 13 or older. We do not knowingly create accounts for children under 13. See section 13 for more.
4. Personal data we collect
We only collect what we need to run, secure, bill and support our services. Depending on what you use, this includes:
Account data
- E-mail address, account ID, password (stored only as a hash), the sign-in method you use (e-mail, Apple, Google or Facebook) and the ID that provider gives us, e-mail verification status, password reset and e-mail change tokens, two-factor settings, account status, time zone and login timestamps.
- Your device's push notification token (Firebase Cloud Messaging or Apple Push Notification service), if you allow notifications.
Game data
- Your Tenno username, player profile, level, progress, inventory, items, rewards, achievements, rankings and gameplay statistics.
- Balances and history of Tenno Coins, gold and other in-game items, chests you open and what they contained.
- Your friends list, friend requests and clan membership.
- Chat messages you send in global chat, clan chat and private messages, with time and sender.
- Moderation records, such as mutes, bans, the reason for them and any appeal.
Anti-cheat and request data
- Anti-cheat telemetry: when our checks detect unusual gameplay, we store a report with your account ID, the check that triggered and the values involved.
- Request logs: a record of each action your game client sends to our servers, with your account ID, the action called, a request identifier and the time. We use this to stop the same action from being processed twice, to detect cheating and to investigate support cases.
Purchase and subscription data
- What you bought, when, the price, currency and country, order and transaction IDs from the store or payment provider, subscription status and renewal dates, refunds and chargebacks.
- For portal purchases, the name and billing details you give the payment provider and the invoice data we need for accounting. We never see or store your full card number.
- Your consent to immediate delivery and your acknowledgement that the withdrawal right ends once delivery starts, with the time you gave it.
Website and technical data
- IP address, browser and device type, operating system, app version, pages or API endpoints requested, error reports and security logs.
- Necessary cookies (see section 10) and the result of the Cloudflare Turnstile check on our forms.
Communications data
- Messages you send to support, through contact forms or through the legal contact page, and our replies.
- Your newsletter e-mail address, when you signed up and confirmed it, the IP address and browser used to sign up, and when you unsubscribed.
Business customer and integration data
- Business contact details, portal accounts, project and configuration data, uploaded files and content our business customers enter into systems we host for them.
- For social media integrations: connected account IDs, display names, profile images, access and refresh tokens, permissions, uploaded media, captions, schedules and post status.
- For community bots: platform user IDs, usernames, avatars, message content, commands and server or channel details that the bot needs to work.
5. Where the data comes from
Most data comes from you or from your use of our services. We also receive data from:
- Apple, Google or Facebook when you sign in with them (your account ID with that provider and your e-mail address, and your name if the provider shares it);
- Apple App Store, Google Play, Steam, Stripe and Plisio when you buy something (purchase and subscription status, transaction IDs, refunds and chargebacks);
- our business customers when they set up a system we host for them;
- social platforms you choose to connect to our social media tools.
6. Why we use your data and our legal basis
If you are in the EU, EEA, UK or Switzerland, the law requires a legal basis for each use. The references below are to the EU General Data Protection Regulation (GDPR); the UK GDPR and Swiss law work in the same way.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, signing you in, saving your progress and providing the game | Contract (Art. 6(1)(b)) |
| Chat, friends, clans and multiplayer features | Contract (Art. 6(1)(b)) |
| Showing global chat messages in our Discord server under your username | Legitimate interest in running one shared community across the game and Discord (Art. 6(1)(f)) |
| Processing purchases, delivering Tenno Coins and items, running your subscription, handling refunds and withdrawals | Contract (Art. 6(1)(b)) |
| Keeping transaction and invoice records | Legal obligation under tax and accounting law (Art. 6(1)(c)) |
| Service e-mails and push notifications about your account, purchases and game events | Contract (Art. 6(1)(b)); push notifications only after you allow them on your device |
| Automated username moderation | Legitimate interest in keeping the game safe and free of offensive names (Art. 6(1)(f)) |
| Anti-cheat checks and request logs | Legitimate interest in fair play, preventing fraud and keeping our systems secure (Art. 6(1)(f)) |
| Moderating chat and handling reports of illegal content, bans and appeals | Legal obligation under the EU Digital Services Act (Art. 6(1)(c)) and legitimate interest in a safe community (Art. 6(1)(f)) |
| Security, error monitoring and bot protection on forms (Cloudflare Turnstile) | Legitimate interest in keeping our services working and protected from abuse (Art. 6(1)(f)) |
| Newsletter | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Answering support and contact requests | Contract where the request concerns your account or purchase (Art. 6(1)(b)), otherwise legitimate interest in answering you (Art. 6(1)(f)) |
| Social media integrations and community bots you choose to use | Contract (Art. 6(1)(b)) |
| Responding to authorities and defending legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, you can object at any time (see section 12).
7. Automated checks and human review
We use the following automated checks in Tenno:
- Username moderation. We regularly send usernames together with the account ID to an AI model (Google Gemini, reached through the OpenRouter service) that flags names that look offensive, hateful or otherwise against our Community Guidelines. No other account data is sent. A flagged name may be reset, and you will be asked to choose a new one.
- Anti-cheat checks. Our servers check gameplay for signs of cheating. A detection creates a report and can lead to temporary measures, such as blocking a reward or restricting the account while we look into it.
- Refund and chargeback checks. If a store reports a refund or chargeback for a purchase, our systems may automatically restrict the account to prevent abuse; you can ask support@resurgegames.com for a human review of any such restriction.
A person on our team reviews the case before any permanent ban. If you think an automated check got it wrong, reply to the notice or write to support@resurgegames.com and a person will look at it again.
8. Who we share data with
We do not sell personal data. We do not share it for targeted or cross-context behavioural advertising. We use the following providers:
| Provider | What they do |
|---|---|
| netcup GmbH | Hosting of our servers, databases and backups |
| IONOS SE | Sending e-mails (SMTP) |
| Stripe | Card and wallet payments on the portal |
| Plisio | Cryptocurrency payments on the portal |
| Apple App Store, Google Play, Steam (Valve) | Distribution of the game, in-app purchases and subscriptions; they act under their own terms and privacy policies |
| Apple, Google, Facebook (Meta) | Sign-in, if you choose it |
| Cloudflare | Turnstile bot protection on our website forms |
| Discord | Our Discord server, where global chat messages are also shown under the sender's username |
| OpenRouter, routing to Google Gemini | Automated username moderation (username and account ID only) |
| OpenRouter, routing to an AI model provider | Our support assistant, which answers the messages you send Tenno on Discord, Instagram or Facebook (your message and your username on that platform) |
| Google Firebase Cloud Messaging and Apple Push Notification service | Delivering push notifications to your device |
| Meta (Facebook, Instagram, Threads) and TikTok | Only if you connect an account to our social media tools |
Some of these providers are based in or process data in the USA or other countries outside the EU. Section 9 explains how those transfers are protected.
Our error monitoring, logging and backups run on servers we rent from netcup. No other company receives that data.
We may also disclose data to authorities or courts when the law requires it, to our professional advisers under confidentiality, and to a buyer or successor if our business is sold or restructured, under the same protections as in this policy.
9. International transfers
We are a company in the United Arab Emirates. Our servers are hosted in the European Union. This means:
- Data you give us is stored in the European Union. Our team in the UAE accesses it from there.
- Where EU or UK law requires it, we rely on appropriate safeguards such as the EU standard contractual clauses or an adequacy decision, and we apply the same protections to data handled by our UAE staff.
- For providers in the USA, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and on Standard Contractual Clauses where it is not.
- For other countries, we use Standard Contractual Clauses or another safeguard the law allows.
You can ask us for a copy of the relevant safeguards at support@resurgegames.com.
10. Cookies and similar technologies
Our public websites only use cookies that are strictly necessary for them to work:
- a session cookie that keeps you signed in and remembers your choices while you browse;
- a security (CSRF) cookie that protects forms against forged requests;
- local storage for your theme setting (light or dark).
These do not need consent. On pages with a form (contact, newsletter, account deletion), Cloudflare Turnstile checks that you are a human. It may process your IP address and browser details for that check only.
We do not use analytics tools, advertising pixels, cross-site tracking cookies or social media plugins on our websites.
11. How long we keep data
| Data | How long |
|---|---|
| Account data | While your account is active. Deleted or anonymised 7 days after you confirm deletion. |
| Game data (progression, inventory, currencies, rankings, account restrictions) | While your account is active. After deletion it is kept linked only to a random player ID and shown as Deleted Player, see resurgegames.com/delete-account. Purchase, consent and withdrawal records that we must keep for tax and legal reasons may still refer to that player ID. |
| Chat messages | 12 months, then deleted automatically |
| Anti-cheat telemetry | 12 months, then deleted automatically |
| Request logs | 12 months, then deleted automatically |
| Moderation records (mutes, bans, appeals) | While your account is active. After deletion they are kept with the pseudonymous game data. |
| Purchase, subscription and invoice records | As long as tax and accounting law requires, up to 10 years |
| Newsletter address and consent record | Until you unsubscribe. After you unsubscribe we stop sending immediately and keep your address and the consent record for up to three years as proof of your consent, then delete them. Sign-ups that are never confirmed are deleted after 14 days. |
| Support and contact messages | Until the request is handled and no legal retention duty applies |
| Server logs and error reports | For a limited time, then deleted |
| Password reset, verification, e-mail change and account deletion tokens | Until used, expired or cleared within one hour |
| Social media tokens | Until you disconnect the account or delete your account with us |
| Backups | For a limited time, then overwritten |
We may keep specific data longer if we need it to deal with a legal claim, a fraud case or a request from an authority, and only for as long as that lasts.
12. Your rights
You have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- delete your data, for example by deleting your account (see resurgegames.com/delete-account or the option in the game);
- restrict how we use your data while a question is being resolved;
- portability: receive the data you gave us in a common machine-readable format, or have it sent to another service;
- object at any time to uses based on our legitimate interest, for reasons related to your situation;
- withdraw your consent at any time where we rely on it (for example the newsletter), without affecting what happened before;
- ask for a human review of any decision made by an automated check.
To use any of these rights, write to support@resurgegames.com from the e-mail address linked to your account, or tell us your username. We may ask you to confirm your identity. We answer within one month. We may keep some data where the law requires it, as described in section 11.
Right to complain
You can lodge a complaint with a data protection supervisory authority:
- in the EU or EEA: the authority in the country where you live or work, or where you think the problem happened;
- in the UK: the Information Commissioner's Office (ICO), ico.org.uk;
- in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC);
- in the UAE: the UAE Data Office.
We would appreciate the chance to fix the problem first, so please feel free to contact us before you complain.
13. Children
You must be at least 13 to use Tenno and our consumer services. We do not create accounts for children under 13. If we learn that a child under 13 has an account, we delete it.
If you are under 18, please talk to a parent or guardian before buying anything. If you live in the EU or UK and are below the age at which you can give consent yourself in your country (between 13 and 16, depending on the country), you may only subscribe to our newsletter with a parent's permission. Tenno does not use advertising or tracking tools that would need a child's consent.
Parents or guardians who think their child under 13 has an account, or who have other concerns, can write to support@resurgegames.com. We will help and, where needed, delete the account.
14. Newsletter
If you sign up for our newsletter, we send you an e-mail with a confirmation link. You are only added to the list after you click it (double opt-in). As proof of your consent, we record when you signed up and confirmed, and the IP address and browser (user agent) you used to sign up. Every newsletter contains an unsubscribe link, and you can also unsubscribe by writing to us. After you unsubscribe we stop sending immediately. We keep your address and the consent record for up to three years as proof of your consent, then delete them.
15. Business customers, SaaS and our role as processor
For websites, booking systems, shops, portals and similar systems we build, host or license to business customers, our customer decides what data is collected and why. The customer is the controller of its customers' and staff data, and we act as its processor under a data processing agreement. If you are a customer of one of those businesses, please contact that business about your data; its privacy policy applies. We only access that data to host, maintain, secure and support the system, or when our customer asks us to. We do not use it for our own purposes or sell it. If a signed agreement with a customer conflicts with this section, the signed agreement applies to that customer's service.
16. Social media tools and community bots
If you connect a social media account to our scheduling tools or to Resurge Development (our TikTok developer app), we store the account details and tokens needed to show the account, upload media, create drafts and publish posts. We only publish when you or an authorised user schedules, approves or triggers it. When you disconnect an account or delete your account with us, we delete the active tokens. Uploaded media stays in your media library until you delete it or ask us to.
Our community bots process the platform data they need to forward messages, answer commands and show game information. Messages you send to Tenno on Discord, Instagram or Facebook are answered by our AI support assistant, which sends your message to an AI model through OpenRouter; when a question needs a person, the assistant can pass it to our team. We do not use that data for anything else.
17. Security
We use encrypted connections, hashed passwords, access controls with the fewest people possible, private credentials, monitoring and regular backups. No system is perfectly secure. Please keep your login details safe and tell us straight away at support@resurgegames.com if you think your account has been compromised.
18. Notes for specific regions
United Kingdom
The UK GDPR and the Data Protection Act 2018 give you the same rights as described above. You can complain to the ICO.
Switzerland
The Swiss Federal Act on Data Protection gives you the same rights as described above. You can complain to the FDPIC.
Brazil
Under the LGPD you have the rights listed in its Article 18, including confirmation, access, correction, anonymisation, portability, deletion and information about sharing. Write to support@resurgegames.com. You can also complain to the ANPD.
California and other US states
We do not sell personal information and we do not share it for cross-context behavioural advertising. We honour requests to know, access, correct and delete personal information from California residents and residents of other US states with similar laws. Send them to support@resurgegames.com. We will not treat you differently for using these rights.
19. Illegal content and legal contact
To report illegal content, or if you are an authority that needs to reach us, use our legal contact page.
20. Changes to this policy
We update this policy when our services, providers or legal duties change. The effective date at the top shows when it last changed. If a change significantly affects how we use your data, we will tell you in the game, on the website or by e-mail before it applies.