Legal
BREACH: Zero Hour
Privacy Policy & Terms of Service
Overview
BREACH: Zero Hour is a free online multiplayer game made by Eflox Studios. To run matches, keep your progress and let you play with friends, the game needs some data about you. This page explains what that data is, what we do with it, and the rules for playing.
In short
- No email, no password. The game creates an anonymous player ID the first time you play. On Steam it links to your Steam account instead.
- We keep what the game needs: your display name and avatar, your progress and match statistics, the cosmetics you own, your friends list, and records of any purchases.
- Other players see you in the game: your name, avatar, skins, what you do in a match, what you write in chat, and your voice if you use voice chat.
- We do not sell your data and we do not use it for advertising. There are no ads and no third-party analytics in the game.
- Payments go through Steam, Stripe or Xsolla. We never see your card details.
- You are in control. You can rename yourself in the game, and you can ask us to delete your account and everything it owns.
- Play fair and be decent to people. Cheating, harassment and abuse of chat or voice can get an account restricted or closed.
The full details follow. The Privacy Policy covers your data; the Terms of Service cover the rules. Both apply wherever you play BREACH: Zero Hour: on Steam, on itch.io, on CrazyGames, or anywhere else we publish it.
Privacy Policy
This policy explains how Eflox Studios ("we", "us") handles personal data when you play BREACH: Zero Hour (the "game") and when you visit efloxstudios.com. Eflox Studios is the data controller for the data described here, except where a platform such as Steam or CrazyGames processes your data under its own policy.
1. What we collect, and why
The table lists each kind of data, where it comes from, and what it is for. We only collect what the game needs to work; there is no profiling, no advertising identifiers and no analytics SDK.
- Account
-
A random player ID that Unity's authentication service creates on your device the first time you play. It has no email address or password. A session token stays on your device, or in your browser's storage for the web version, so you stay signed in. If that token is lost, the account cannot be recovered unless it is linked to Steam.
On Steam, your Steam ID, Steam account name and Steam avatar are used to sign you in and to show your name to others. We look your name up through the Steam Web API when it changes. On CrazyGames, if account linking is enabled, your CrazyGames user ID and username are used the same way.
- Profile
- Your display name and the four-digit tag we assign to it, the avatar you picked from the game's presets, when the account was created, and your level. Other players see this on friends lists, in lobbies, on scoreboards and end-of-match screens, and on the leaderboards.
- Progress & stats
- Experience points and level; match statistics such as wins, losses, kills, deaths, assists and per-weapon kills, recorded by the game server at the end of matches played on our servers. Lifetime kills and kill/death ratio feed the in-game leaderboards, which every player can browse.
- Cosmetics & wallet
- The skins you own and have equipped, your coin balance, your order history, and a log of purchase attempts. The log exists so that "I paid and got nothing" can be checked and fixed, and to detect fraud.
- Friends & presence
- Your friends list and pending friend requests, when you were last online, the code of the party you are in, and your accumulated playtime. Friends see whether you are online and can join your party. Friend requests and notifications are delivered through a per-account mailbox.
- Chat & voice
-
In-match text chat and quick chats are sent through the game server to the other players in your match. Party text chat and voice chat are relayed through Vivox, a Unity service. Voice chat is available on the desktop version only and is off until you enable it; your microphone audio is streamed live to the people in your channel and is not recorded or stored by us.
We do not keep a history of chat messages on our servers. Your own recently sent messages are kept on your device so you can recall them in the chat box.
- Match & connection
-
Your IP address and the network data needed to connect you to a match: to our dedicated game servers (hosted with Edgegap, in a region near you), or to Unity Relay for parties and private matches. Matchmaking tickets, latency measurements and the platform you play on (desktop or web) are used to put you in a suitable match.
During a match, your inputs and in-game actions are sent to the server and to the other players so they can see you move and play. Everyone in the match receives your name, avatar and skins.
- Replays & screenshots
- On desktop, match replays are saved on your device and contain the names and actions of everyone in that match. The server may send the replay of a match to the players who were in it, and the "play of the match" clip is shown to those players at the end. You decide whether to share a replay further. Screenshots you take are saved on your device only.
- Device & settings
- Game settings, key bindings, audio levels, tutorial state and the local chat history are stored on your device, or in your browser's storage for the web version. Basic technical information (operating system, platform, errors) may appear in logs we use for troubleshooting.
- Payments
- Coin packs are sold through Steam (desktop with Steam), Stripe (card payment in your browser) or Xsolla (CrazyGames, where enabled). The payment provider handles your payment details; we only receive an order ID, the product, the amount and currency, and whether the payment succeeded. Stripe may ask for an email address and billing address on its checkout page under its own privacy policy.
- Website
- efloxstudios.com has no accounts, no cookies of our own and no analytics. It is hosted on Cloudflare, which handles every request to the site, including your IP address, to deliver the pages and protect them from attacks, and may keep standard logs. Fonts load from Google Fonts. The trailer is an embedded YouTube player in privacy-enhanced mode: YouTube receives your IP address when the page loads the player, and sets no cookies until you play the video.
2. Legal bases
Where data protection law requires a legal basis, ours are: performance of a contract (running the game you asked to play, including matches, progress, friends and purchases); legitimate interests (keeping matches fair, preventing cheating and fraud, securing our services, handling support requests and fixing bugs); legal obligations (keeping purchase records for accounting and tax); and consent for optional features such as voice chat, which you turn on yourself and can turn off at any time.
3. Who we share data with
We do not sell personal data and we do not share it with advertisers. The game is built on services run by other companies, which process data on our behalf or under their own terms:
- Unity Technologies — Unity Gaming Services: authentication, cloud save, cloud code, lobbies, relay, matchmaking, leaderboards and Vivox voice and text chat. Unity privacy policy.
- Edgegap — hosts the dedicated game servers that matches run on. Your IP address reaches these servers when you connect. edgegap.com.
- Valve (Steam) — sign-in, friends, invites, the overlay and in-game purchases on the Steam version. Steam privacy policy.
- Stripe — card payments for coin packs outside Steam. Stripe privacy policy.
- Xsolla — payments on CrazyGames, where in-game purchases are enabled there. Xsolla privacy policy.
- CrazyGames and itch.io — host the web version. When you play there, the platform may collect data about your visit and play session under its own policy. CrazyGames privacy policy · itch.io privacy policy.
- DigitalOcean — hosts the internal administration tool our team uses to support players, moderate the game and handle account requests. The tool reads account data, including the connection data described above, from Unity Gaming Services, and only our team can access it. DigitalOcean privacy policy.
- Cloudflare — hosts this website, and protects it and our administration tool from attacks. Cloudflare privacy policy.
- Google — fonts and the embedded trailer on this website. Google privacy policy.
- Other players — see the name, avatar, skins, actions, chat and voice described above, as part of playing together.
We may also disclose data when the law requires it, or to protect the game, our players or ourselves from fraud, cheating or abuse.
4. Where data is stored
Account data lives in Unity Gaming Services. Game servers run in data-centre regions close to the players in a match. Our administration tool runs on a DigitalOcean server and holds a working copy of account data in memory only while it runs. These providers operate worldwide, so your data may be processed outside the country you live in, including in the United States. Where that requires safeguards under your local law, our providers rely on recognised mechanisms such as standard contractual clauses.
5. How long we keep it
- Account, profile, progress, cosmetics and friends — for as long as the account exists. We may remove accounts that have been inactive for a long time.
- Purchase and order records — for as long as accounting, tax and fraud-prevention rules require, even after an account is deleted.
- Connection and server logs — briefly, for troubleshooting.
- Chat and voice — not stored by us beyond delivery.
- Data on your device or in your browser — under your control: uninstall the game or clear the site's browser data to remove it.
6. Your rights and choices
Depending on where you live, you may have the right to access the data we hold about you, to correct it, to have it deleted, to receive a copy of it, to object to or restrict certain processing, and to complain to your data protection authority. We honour these rights for every player, wherever they live.
- Rename or change your avatar in the game's profile screen.
- Voice chat is opt-in and can be disabled in the sound settings. You can mute other players at any time.
- Delete your account. Email bzh@efloxstudios.com (or contact us on Discord) with your player name and tag, or your Steam ID. We delete everything the account owns: profile, progress, statistics, cosmetics, coin balance, friends and messages. Purchase records are kept only where the law requires it. Deletion is permanent.
- Steam and CrazyGames accounts are managed on those platforms; unlinking or deleting them is done there.
Residents of California and some other US states: we do not sell or share personal information for cross-context advertising, and we do not use it for targeted advertising. Residents of the EU, EEA, UK and Switzerland: Eflox Studios is the controller; the rights above apply under the GDPR and UK GDPR, and you may lodge a complaint with your local supervisory authority.
7. Children
The game is intended for players aged 13 and over and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it. Where your country sets a higher age for consenting to online services, that age applies.
8. Security
Account data is stored in protected storage that only our server-side code can write to, so that other players cannot alter your name, level or statistics. Traffic between the game, our servers and our providers is encrypted. No system is perfectly secure, so we cannot guarantee that data will never be lost or accessed without authorisation, but we work to keep that risk small.
9. Changes to this policy
We will update this page when the game changes in a way that affects your data, and change the effective date at the top. For significant changes we will also say so in the game or on our Discord server.
Terms of Service
These terms are an agreement between you and Eflox Studios for playing BREACH: Zero Hour. By playing, you accept them. If you do not agree, please do not play. Where you play through a platform such as Steam, itch.io or CrazyGames, that platform's own terms apply alongside these.
1. Who can play
You must be at least 13 years old, or older if your country sets a higher age for online services without parental consent. If you are under the age of majority where you live, a parent or guardian must agree to these terms on your behalf.
2. Your account
The game creates an account for you automatically. A Steam-linked account follows your Steam account; a guest account is tied to the session kept on your device or in your browser, and cannot be recovered if that session is lost. Keep your device and your Steam account secure: you are responsible for what happens on your account. Do not share, sell, trade or give away accounts.
3. Licence to play
We grant you a personal, non-exclusive, non-transferable licence to install and play the game for your own entertainment. You may not copy, modify, reverse engineer, decompile or redistribute the game or its servers except where the law expressly allows it, and you may not use the game for any commercial purpose other than the streaming and video coverage permitted in section 8.
4. Coins and cosmetics
In-game coins and cosmetic items are licensed, not sold. They have no monetary value outside the game, cannot be exchanged for money, and cannot be transferred to another account or person. We may change, rebalance, replace or retire items and coin packs as the game develops. The game is in active development, and we may occasionally need to reset or adjust items or progress; we will try to avoid it and to warn you when we cannot.
5. Purchases and refunds
Coin packs are bought through Steam, Stripe or Xsolla, and that provider's terms govern the payment. Coins are delivered to your account immediately after payment. Where you have a legal right to withdraw from a purchase, you agree that we deliver the coins straight away and that the right of withdrawal ends once they are delivered, to the extent the law allows. Refunds are otherwise handled under the refund policy of the platform you bought through, and under the consumer protection law that applies to you. Nothing in these terms limits rights that the law does not allow us to limit.
6. Rules of conduct
BREACH is a competitive game played with other people. While playing you agree not to:
- cheat, exploit bugs, use modified clients, bots, macros, automation or anything else that gives an unfair advantage or interferes with the game or its servers;
- harass, threaten, insult or discriminate against other players, in chat, voice, names or any other way;
- impersonate other players, Eflox Studios or anyone else, or post misleading content;
- share other people's personal information, or spam, advertise or send unsolicited links;
- attempt to access accounts, servers or data that are not yours, or disrupt matches on purpose, including repeatedly leaving ranked matches.
Players can vote to remove someone from a match and can mute other players. We may warn, mute, restrict, suspend or close accounts that break these rules, remove content, and forfeit coins or items obtained through cheating or fraud, without refund where the law allows.
7. Chat, voice and your content
You are responsible for what you say and share in the game: your display name, text chat, voice chat and anything else other players can see or hear. Content must follow the rules above. By using the game you allow us to display your name, avatar, statistics and in-match actions to other players, on leaderboards, in match replays and in "play of the match" clips, as part of how the game works.
8. Streaming, videos and fan content
You are welcome to record, stream and share footage, screenshots and replays of the game, including on monetised channels. You may use the game's name, artwork and footage for that purpose as long as you do not suggest that Eflox Studios endorses you and do not use them to promote cheats, scams or anything that breaks these terms.
9. Availability and changes to the game
The game is online and under active development. We may add, change or remove features, maps, modes, servers and regions, and we may interrupt or end the service for maintenance, for technical reasons, or permanently. We will try to give notice of planned downtime or an end of service, but we cannot guarantee that the game will always be available or free of errors.
10. Third-party platforms and services
Steam, itch.io, CrazyGames, Stripe, Xsolla, Unity, Edgegap and Discord are run by other companies under their own terms and privacy policies. We are not responsible for those services, and features that depend on them (such as Steam friends, voice chat or payments) may be unavailable when they are.
11. Intellectual property
The game, including its code, art, music, sounds, names, logos and characters, belongs to Eflox Studios or its licensors and is protected by copyright and other laws. These terms give you no ownership of any part of it.
12. Disclaimer and limitation of liability
The game is provided "as is" and "as available", without warranties of any kind, to the extent the law allows. To the extent the law allows, Eflox Studios is not liable for indirect, incidental or consequential losses, for loss of data, progress or virtual items, or for damage caused by things outside our reasonable control, and our total liability to you for anything connected with the game is limited to the amount you paid us in the twelve months before the claim. Nothing in these terms excludes or limits liability that cannot be excluded or limited by law, including your statutory rights as a consumer.
13. Ending the agreement
You can stop playing at any time and ask us to delete your account. We may suspend or close your account if you break these terms, if the law requires it, or if we end the service. When an account is closed, the licence in section 3 ends and virtual items and coins are forfeited, except where the law says otherwise.
14. Changes to these terms
We may update these terms as the game evolves. The current version is always on this page with its effective date. For significant changes we will say so in the game or on Discord, and continuing to play after the change means you accept the new terms.
15. General
If any part of these terms is found invalid, the rest still applies. Our not enforcing a term is not a waiver of it. These terms, together with the Privacy Policy above, are the whole agreement between you and Eflox Studios about the game. Mandatory consumer protection law in your country of residence applies regardless of these terms.
Contact
Questions, data requests, account deletion
Email bzh@efloxstudios.com, or reach us on our Discord server. For an account request, include your in-game name and tag, or your Steam ID, so we can find the right account.
Message us on Discord