This is the Privacy Notice of Kavalri Games AB. If you are located in the U.S., please see the U.S. Privacy Notice.
General Privacy Notice
Last Updated: October 2, 2025
Table of contents
Introduction
Categories of Personal Data We Collect and Why
How Long Will Your Personal Data Be Stored?
Which Third Parties Will Have Access to Your Personal Data?
International Transfers of Personal Data
Children’s Personal Data
Security of Personal Data
Third Parties’ Processing of Personal Data
Data Protection Rights for European Residents
Brazilian Residents’ Rights
Contact Details
Changes to This Privacy Notice
1. Introduction
This Privacy Notice describes how Kavalri Games (the “Company,” or “we,” “our,” or “us”) processes your Personal Data (as defined below) when you visit our website equestrianthegame.com (the “Site”) or when you use our various products and services (collectively, the “Services”).
We take your privacy and Personal Data protection seriously. Our data protection practices comply with the legal regulations of the respective country of residence where you are located. We process your Personal Data only for the purposes described herein and, in each case, only to the extent necessary to achieve the respective purpose. We ensure that the Company, including all employees and external service providers who work or otherwise carry out services for us, respects the law and this Privacy Notice.
If you have further questions or comments regarding privacy or to assert your legal rights, please contact the Company using the contact details in the section “Contact Details” below.
Please read this Privacy Notice before you use or register for our Services, for information on how we collect, use and distribute your Personal Data.
2. Categories of Personal Data We Collect and Why
Depending on the specific Services you use and how you interact with us, we will process various categories of your Personal Data. “Personal Data” refers to any information relating to an identified or identifiable natural person. Personal Data is information that identifies you directly or indirectly (also in conjunction with other data).
We receive Personal Data directly from you when you choose to provide it to us. We can also collect Personal Data from you automatically when you use our Services or receive Personal Data from third parties, such as service providers.
We process different categories of Personal Data to achieve different purposes. To ensure that you understand what Personal Data is included in the categories, we have described the broader categories of Personal Data we process here:
Contact details: Name, email address, address, phone number.
User account details: Username, login information, password, user-ID, language and preference settings, friend lists, and contacts.
Information on how you use our games: Purchases made in games, challenges or gifts sent to other players, game behavior and your behavior in game, decisions made by the player in the game, and telemetry data, such as achievements, rankings, feature usage, game play statistics, scores, session length, and click paths during your game sessions.
Correspondence with you: Any information included in messages, phone calls and emails.
Information regarding purchases: Purchase and return history, current orders, invoices, delivery information, payment information, which game platform you use.
Information regarding device: Login information, browser type and version, time zone setting, browser plug-in type, operating system and version, Google AdID, Apple IDFA and device event information.
You can read more about our purposes for processing your Personal Data and which categories of Personal Data we process to achieve each purpose below.
Purposes: To provide you the Services, by authenticating your login information, verifying your age, remembering your settings, hosting and providing backend infrastructure for our Site and games and process payments and transactions.
Categories of Personal Data
Contact details;
Location;
Age;
Information regarding purchases;
Correspondence with you;
User account details; and
IP-address and information regarding your device.
Legal basis: Performance of the contract between us.
Purposes: To create, maintain, customize, and secure your user account.
Categories of Personal Data
Contact details;
Location;
Age;
User account details; and
IP-address and information regarding your device.
Legal basis: Performance of the contract between us.
Purposes: To improve or develop the Services, including by optimizing traffic, conducting in-game data collection, and analytics, preventing and detecting cheating, managing landing pages, and heat mapping the Site.
Categories of Personal Data
User account details;
Location;
IP-address and information regarding your device;
Information on how you use our games; and
How you interact with the Services.
Legal basis: Our legitimate interest of developing and improving our Services.
Purposes: To market our business and to communicate with you regarding promotions and sales, upcoming events, news on products and the Services and to analyze the effectiveness of such advertisements.
Categories of Personal Data
Contact details;
Information regarding purchases;
User account details;
IP-address and device; and
Your interactions with our communications.
Legal basis: Our legitimate interest in marketing our business. If you have subscribed to our newsletter, our legal basis for the processing is your consent.
Purposes: To send information to you, including confirmations, technical information, updates, security alerts and administrative messages.
Categories of Personal Data
Contact details;
Information regarding purchases;
User account details; and
IP-address and device.
Legal basis: Performance of the contract between us.
Purposes: To communicate with you when you message us, respond to our posts, “like“ our posts, or otherwise interact with us on social media platforms.
Categories of Personal Data
Contact details;
User account details;
Correspondence with you; and
Social media user name.
Legal basis: Our legitimate interest in keeping an active business relationship with you.
Purposes: To arrange events and contests.
Categories of Personal Data
Contact details;
Information regarding purchases; and
User account details.
Legal basis: Our legitimate interest in marketing our business and maintaining a relationship with you as a customer.
Purposes: To provide and develop our customer service and support, answer questions and manage complaints.
Categories of Personal Data
Contact details;
User account details;
Information regarding purchases;
Correspondence with you;
Responses to surveys; and
Social media user name if you contact us on such platforms.
Legal basis: Performance of the contract between us.
Purposes: To enforce our rules and policies and protect the competitive integrity of our games.
Categories of Personal Data
Contact details;
Your user account details;
Information on how you use our games.
Legal basis: Our legitimate interest in providing you with safe and fair products.
Purposes: To comply with legal obligations, and to respond to legal inquiries from authorities.
Categories of Personal Data
Contact details;
Correspondence with you;
Information regarding purchases;
User account details; and
Any personal information provided in, for example, a whistleblowing report.
Legal basis: Legal obligation.
Purposes: To safeguard and defend the rights of our business, for example in case of a legal process, and to investigate and respond to fraudulent, unauthorized, or illegal activity on the Services.
Categories of Personal Data
Contact details;
User account details;
Correspondence with you; and
Information regarding purchases.
Legal basis: The legitimate interest to defend the rights of our business.
Purposes: To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding.
Categories of Personal Data
User account details;
Location;
IP-address and information regarding your device;
Information on how you use our games;
Information regarding purchases; and
How you interact with the Services.
Legal basis: The legitimate interest to evaluate or conduct changes of the business.
Purposes: To be able to receive and process applications for job positions and to perform an effective recruitment process.
Categories of Personal Data
Contact details;
Location;
Education and employment history,
References;
Relevant experience, achievements, skills and qualifications;
Information in your application documents such as gender and photo if you choose to include them,
Details and outcomes of any interview, test or checks that are part of the recruitment process; and
Decision on whether the recruitment process results in employment with us.
Legal basis: Our legitimate interest in performing an effective recruitment process and recruiting new members of staff.
We may use information that does not identify you (including former Personal Data that has been anonymized) without obligation to you, except as required by applicable law.
3. How Long Will Your Personal Data Be Stored?
We will not process and store Personal Data any longer than necessary for the purposes for which it has been collected. Subsequently, the Personal Data will be deleted or anonymized in accordance with statutory provisions.
In general, your Personal Data will be stored for as long as necessary for us to be able to provide you with the Services. If you stop using our Services, we will remove or anonymize your Personal Data one year after your last interaction with us.
In some cases, Personal Data may be stored for longer due to laws or other regulations to which we are subject, or for as long as the retention of Personal Data is required due to other legal reasons. This may include keeping your Personal Data after you have deactivated your user account for the period necessary for us to pursue legitimate business interests, comply with (and demonstrate compliance with) legal obligations, resolve disputes or enforce our agreements. If there are legitimate reasons opposing a deletion, for instance statutory retention or storage periods, processing of these Personal Data will be limited. In such cases, the processing of Personal Data will stop as soon as the reason for further storage ceases to exist, for example if the statutory retention period expires.
If we process your Personal Data as a part of a recruitment process and you are not offered the position, we will store the Personal Data included in your application for a period of two years after the process is finalized.
If the right to process Personal Data is based on your consent, the Personal Data will be deleted or anonymized as soon as the purpose of the storage is canceled or if you withdraw your consent. You can withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of the processing carried out on the basis of the consent before the withdrawal.
4. Which Third Parties Will Have Access to Your Personal Data?
Our service providers
We share your Personal Data with a limited number of third-party service providers who process it on our behalf to provide our Services and who have agreed to privacy restrictions similar to our Privacy Notice. These service providers may help us host our Site or provide (technical) support, among other services. We have entered into data processing agreements with our service providers.
Affiliated companies
We may share your Personal Data globally with companies within our group (to affiliates, subsidiaries and the parent company). When transferring and using Personal Data, we always comply with data protection regulations. The affiliated companies may - insofar as they are entitled to do so - also use Personal Data for their own purposes, such as direct advertising for their own services.
Transfer for legal or law enforcement reasons
We may also disclose Personal Data to law enforcement or the relevant civil authorities to enforce legal rights and to comply with the law, or to comply with a decision by a government or other competent authority. Additionally, if we have reason to believe that disclosure is required to respond to potential or actual violations or interference with the Company’s rights, property, reputation, business operations, users or others who may be harmed, or if we believe disclosures are required to protect our rights or us against fraud, or to comply with any lawsuit, court order or legal process served.
Corporate transactions
In the context of corporate transactions (acquisition, sale, restructuring of companies or company shares), third parties may gain access to your Personal Data.
5. International Transfers of Personal Data
We are a global business. Personal Data may be stored and processed in any country where we have operations or engage service providers. We may transfer Personal Data to our service providers and other recipients in countries other than the country in which the Personal Data was originally collected. Those countries may have data protection rules that differ from those of your country.
However, we will take measures to ensure that any such transfers comply with applicable data protection laws and that your Personal Data remains protected according to the standards described in this Privacy Notice. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may be entitled to access your Personal Data.
If you are located in the European Economic Area (“EEA”) or Switzerland, we comply with applicable laws to provide an adequate level of data protection for the transfer of your Personal Data to the U.S. and other countries outside of the EEA (“Third Countries”). We ensure that international data transfers to Third Countries are governed by an adequate data transfer mechanism based on a risk assessment regarding the transfer. We rely on one or more of the following mechanisms: EU Standard Contractual Clauses with a data recipient outside the EEA, and/or verification that the European Commission has adopted an adequacy decision for the respective Third Country.
For further information about the EU Standards Contractual Clauses, please contact us by email at info@kavalrigames.com.
6. Children’s Personal Data
Protecting children’s privacy is particularly important to us. The Company understands that parents, guardians or other adults often use our family services, including for children. If a child under the age of 16 (or below the minimum age in the country concerned, which can be lower) submits Personal Data to the Company, and we learn that such Personal Data contains information of a child below 16 (or below the applicable minimum age) and without effective consent, we will delete the Personal Data as soon as possible. Our policy is to comply with any applicable law protecting minors.
The consent of children under the age of 16 is only effective if a parent or guardian has given their consent for the processing.
The Company, taking into account the available technology, makes efforts to ensure that parents or guardians have given their consent to our processing of children’s Personal Data. Nevertheless, we would like to inform parents and guardians that age verifications can be technically bypassed. Please do not leave your children unattended on the Internet and explain to them the importance of properly handling their Personal Data.
7. Security of Personal Data
We are committed to data security within the framework of applicable data protection laws and current IT security standards. Your Personal Data is protected against unauthorized access and loss through the use of various electronic, technical, physical, administrative, and contractual measures. We have taken the necessary technical and organizational measures to ensure that we fully comply with our Privacy Notice, both internally and by external service providers.
We adhere to generally accepted industry standards to protect both Personal Data and non-personal data during transmission and storage.
All our employees are required to comply with data security and privacy policies, have appropriate instructions, and receive regular training. Individuals requiring access for technical, business, or editorial maintenance of the server and portal are legally bound by a confidentiality and non-disclosure agreement.
8. Third Parties’ Processing of Personal Data
We remind you that in various technical areas, we work with external partners who offer websites and services accessible from our Services. The fact that we link to a website is not an endorsement, authorization, or representation of our affiliation with that third party. If you click on a link to a third-party site, including an advertisement, you will leave the Site and go to the site you selected. We encourage you to review the privacy notices of any other service providers from whom you request services. If you visit a third-party site, you should consult that site's privacy notice before providing any Personal Data.
Our Site uses cookies and similar technologies. Please read our Cookie Policy to learn more about the use of cookies.
9. Data Protection Rights for European Residents
If you are located within the EEA, you have several rights regarding the processing of your Personal Data. You can contact us at any time if you have questions or wish to exercise any of the rights described below. Please direct your data protection requests to info@kavalrigames.com. We reserve the right to take appropriate security measures to ensure that you are who you claim to be when you contact us. If you cannot satisfactorily demonstrate your identity, we may not be able to fully meet your request.
These are your rights:
Access to Personal Data
You have the right to know what Personal Data we are processing about you. If you wish to receive your Personal Data, you can request a compiled register extract from us that contains all the Personal Data we process about you.
Correction and Deletion
If your Personal Data is incomplete or incorrect, you have the right to have it corrected or supplemented. You also have the right to request that your Personal Data should be deleted. We will then review your request, but we may have the right to deny it if the processing of your Personal Data is necessary for us to comply with applicable law. Please keep in mind that we may not be able to provide you with the Services if you request to have your Personal Data deleted.
Restrictions of our Processing
Under certain conditions, you have the right to request that we restrict our processing of your Personal Data. This means that we mark the Personal Data so that it is only processed for certain specific purposes in the future. Please keep in mind that we may not be able to provide you with the Services if we restrict the processing of your Personal Data.
Right to Data Portability
In some circumstances you have the right to request the transfer of your Personal Data to another data controller in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to the processing of Personal Data carried out to perform a task based on the legal basis of legitimate interest.
Right to Lodge a Complaint
If you believe that we have not processed your Personal Data correctly, you have the right to lodge a complaint with the data protection authority in your country.
Right to Withdraw Consent
If you have given your consent to processing, you have the right to withdraw your consent at any time. We will immediately stop processing upon withdrawal of your consent, unless we are required by law to retain the Personal Data for longer.
10. Brazilian Residents’ Rights
The Lei Geral de Proteção de Dados (“LGPD”) applies to Brazilian residents. If you are a Brazilian resident, you have several important rights:
Know when we use your Personal Data
Access your Personal Data, correct any errors, or delete your Personal Data
Anonymize, block, or delete data that we don’t need or are not processing in compliance with the LGPD
Request the transfer of your Personal Data to another provider
Be informed about who we share your Personal Data with
Be informed about your ability to deny consent and any consequences
To withdraw your consent
These rights apply to any Personal Data collected or processed in Brazil, as well as any Personal Data processed for the purpose of providing goods or services in Brazil.
If you would like to exercise any of those rights, please email us at info@kavalrigames.com. To ensure the security and integrity of your Personal Data, we may ask you for additional information in justified cases to verify that you are the owner of that Personal Data.
11. Contact Details
If you have any questions, wish to file a complaint, or wish to make any request authorized by this Privacy Notice, please contact us at the following address or email:
Kavalri Games AB
Medborgarplatsen 25, 118 72 Stockholm
Email: info@kavalrigames.com
This Privacy Notice has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us at the email address stated above.
12. Changes to This Privacy Notice
From time to time, we update this Privacy Notice to reflect any changes in how we handle your Personal Data. Should we make such significant changes to how we process Personal Data that we are obliged to notify you about the changes or ask for your consent again, we will do so.