Privacy Policy
Effective date: 30 May 2026. This policy explains how Xorlixnz.com (operated by KoruPlay Limited) collects, uses, stores and shares personal information under the New Zealand Privacy Act 2020.
Information we collect
- Account details: username/display name, email, password (hashed), age/eligibility confirmations, support messages.
- Gameplay & leaderboard data: scores, match history, achievements, in-game preferences, rankings, anti-cheat signals.
- Device & analytics data: device type, OS/browser, IP address, approximate location (from IP), identifiers/cookies, log data, crash/performance data, referral/UTM data.
- Payments (if applicable): we receive transaction status and limited billing details from payment providers; we do not store full card numbers.
How we use information
- Provide accounts, gameplay features, leaderboards and community functions.
- Operate, maintain, monitor and improve the site (analytics, debugging, performance).
- Security, fraud prevention, abuse detection and enforcement of terms.
- Customer support and service communications (including important notices).
- Comply with legal obligations in New Zealand.
Sharing and disclosure
We may share information with trusted service providers who help us run Xorlixnz.com (e.g., hosting, analytics, email delivery, customer support, payment processing). They may access information only to perform services for us and must protect it.
We may disclose information if required by law, to respond to lawful requests, or to protect users, our services and rights.
Cookies and analytics
We use cookies and similar technologies for login/session management, preferences, security, and measurement. You can control cookies via your browser settings; some features may not work without essential cookies.
Retention
We keep personal information only as long as needed for the purposes above, including legal, accounting, dispute-resolution and security needs. We then delete or de-identify it where reasonable.
Security
We use reasonable safeguards (access controls, encryption in transit, monitoring and secure development practices) to protect information. No method of transmission or storage is completely secure.
Your rights (New Zealand)
Under the Privacy Act 2020, you can request access to, and correction of, personal information we hold about you. You may also complain if you believe we have mishandled your information.
- To request access/correction: contact us using the details below. We may need to verify your identity.
- If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner (OPC) at privacy.org.nz.
Cross-border processing
Some service providers may process information outside New Zealand (for example, cloud hosting or analytics). When we do, we take reasonable steps to ensure the recipient protects the information in a manner comparable to New Zealand privacy requirements.
Children
Our services are not intended for children who cannot legally consent. If you believe a child has provided personal information, contact us and we will take reasonable steps to remove it.