Legal
Privacy
GTH Online is operated by PY Gaming, which is responsible for the personal information described here. For privacy questions or requests, write to [email protected].
Account and game information
We process your username, e-mail address and password — the password as a hash, never as text — together with authentication records, your characters, game activity and purchase history. We use them to give you access to the website and the game, deliver purchases, protect accounts and investigate abuse.
Google and Discord sign-in
If you choose Google or Discord, we receive the identifier of your account with that provider and the information supplied through the sign-in you authorize, including your e-mail address where provided. The provider handles your authentication under its own privacy policy. Never send your Google or Discord password to anyone claiming to be GTH staff.
PayPal payments
PayPal processes payments under its own privacy statement. We use order references, transaction identifiers, amounts, currencies and payment status to match a payment to your account, credit the purchase and handle payment issues. Payment notifications may contain additional payer or transaction information supplied by PayPal.
PayPal checkout collects your payment credentials. We never ask for your card number, card security code or PayPal password. See PayPal’s privacy statement.
USDT payments on Solana
Crypto checkout is processed by NOWPayments, with USDT on the Solana network. NOWPayments processes payment information under its own privacy policy. We use payment identifiers, order references, amounts, deposit addresses and payment status to reconcile your payment and deliver the purchased credit. See the NOWPayments privacy policy.
Use only the asset and network shown at checkout. Solana transfers are recorded on a public blockchain: addresses, transfers and related transaction information may be visible to anyone, and closing your GTH account cannot erase them. Never share your wallet seed phrase or private keys with anyone claiming to be GTH staff.
Cookies and your browser
The website uses the following necessary cookies for sign-in and security:
- gth.auth keeps you signed in. It lasts 7 days and is renewed while you use the site.
- An anti-forgery cookie protects sign-in and other forms against forged requests.
- gth.externo lasts 15 minutes and holds the result of a Google or Discord sign-in until your game account is created or linked. That sign-in also uses short-lived cookies that protect the exchange with the provider.
Your language choice (one of the site’s eight languages) is saved in this browser: in local storage as gth_idioma and in the gth_idioma_manual cookie, which lasts one year, holds only the language code and lets the site open its pages in that language. Choosing Automatic in the language menu removes both.
The site is delivered through Cloudflare, which provides network security, content delivery and performance measurement. According to Cloudflare, its performance measurement collects page-load metrics and does not use cookies or local storage. Cloudflare may set its own security cookies while protecting the site.
Optional Google Analytics and Google Ads measurement
Only after you choose Allow measurement, we load a Google tag for Google Analytics and Google Ads to measure public page visits, interactions and ad performance. Google may receive your IP address, browser and device information, public page visits and ad-click identifiers, and set measurement cookies such as _gcl_au (normally 90 days) and _ga cookies (configured for up to 180 days, renewed with consented visits). We disable personalized advertising signals and do not send account names, e-mail addresses or payment details through this tag.
Declining keeps this tag unloaded. Login, registration and payment pages are excluded from this measurement. The tag alone does not confirm a completed download, registration or game installation. A download event records a link click, not completion. Your choice is stored locally as gth_measurement_consent_v1 for up to 180 days. Use Cookie preferences at the bottom of any page to change it; withdrawing consent stops future measurement and removes the site's Google measurement cookies, but does not erase data Google already received. See Google's privacy policy for Google's processing.
Who else receives it
We do not sell your information. Operating the service involves our hosting provider, Cloudflare, the sign-in provider you choose and the payment provider you use. Each one processes the information needed to deliver, secure or reconcile its part of the service. We may also need to preserve or disclose records to resolve disputes or comply with applicable obligations.
How long we keep it
Records, such as payment, transaction and security records, are kept for up to five years. Accounts are not deleted automatically for inactivity: the information needed to keep an account working — username, e-mail, password hash and characters — is kept for as long as the account exists.
Your requests
Write to PY Gaming at [email protected] to ask for access to, correction of or deletion of your personal information. We may need to confirm that the account is yours. Deleting an account does not remove records we keep for up to five years, such as payment and security records, and nothing recorded on a public blockchain can be erased.