New SRO OasisPrivacy Policy
Last updated: 24 September 2026
This policy explains what personal data New SRO Oasis ("we", "us") collects when you visit our website or pre-register for the game, why we collect it, who we share it with and what your rights are. New SRO Oasis is an independent Silkroad Online private server project and is not affiliated with JOYMAX.
1. Data we collect
When you pre-register
- Username: the in-game name you reserve.
- Email address and phone number.
- Password: we never store it in readable form, only as a hash, in the format used by the game's account system.
- Email preference: whether you want launch news and reminders, and if/when you unsubscribed.
- Technical data: IP address, browser/device information (user agent), and your approximate location (country, region, city and postal code) as determined from your IP address by our network provider, Cloudflare.
- How you found us: campaign parameters in the link you used (for example
utm_source,utm_campaign, or an ad click ID from Facebook or TikTok), the referring website, the page you landed on and, if a friend invited you, their referral code.
When you visit the website
- Usage statistics: page views and clicks (for example opening the pre-register form, playing the trailer or clicking Discord). We count unique visitors per day using a salted one-way hash of your IP address and browser, so the statistics themselves contain no directly identifying data.
- Advertising pixels: if you visit from the Meta (Facebook/Instagram) or TikTok platforms, their pixels may collect data as described in section 5.
2. How we use your data
- To record your pre-registration, reserve your name and create your game account when the server launches.
- To send you a confirmation email and, if you agreed, launch news and reminders (see section 6).
- To prevent abuse: limiting repeated sign-ups from the same network and detecting fake accounts.
- To understand and improve our website and campaigns: which sources bring players and how the page performs.
- To measure and optimise advertising on Meta and TikTok, including telling Meta that a registration happened (see section 4).
3. Legal bases (EEA / UK visitors)
- Contract / pre-contract steps: processing your pre-registration and creating your account.
- Consent: marketing emails and advertising pixels. You can withdraw consent at any time.
- Legitimate interests: security, abuse prevention and aggregated website statistics.
4. Who we share data with
We do not sell your personal data. We share it only with the service providers we need to run the project:
| Provider | Purpose | Data |
|---|---|---|
| Meta Platforms (Facebook / Instagram) | Ad measurement via the Meta Pixel and Conversions API | Page events, IP address, browser data, Meta cookies; for registrations also SHA-256 hashed email, phone, username and approximate location (country, region, city, postal code), plus a demographic audience parameter used for ad targeting |
| TikTok | Ad measurement via the TikTok Pixel | Page events, IP address, browser data, TikTok cookies |
| Brevo (Sendinblue) | Sending our emails | Email address, username, email preference, email delivery and engagement data |
| Our hosting provider | Running the website and database | All data described above, stored on our server |
| Google Fonts, jsDelivr | Delivering fonts and the phone-number country picker | IP address and browser data when the files load |
| Cloudflare | Network security, performance and approximate visitor location | IP address, browser data and request data for every visit |
| Google reCAPTCHA | Protecting the pre-registration form from bots | IP address, browser and device data, and interaction data from the captcha widget (Google Privacy Policy) |
| YouTube (Google) | Playing the trailer | Loaded only after you click play, using YouTube's privacy-enhanced mode |
We may also disclose data if required by law or to protect our rights and the safety of our players.
5. Cookies & similar technologies
| Name | Set by | Purpose |
|---|---|---|
_fbp, _fbc | Meta | Advertising measurement (up to 90 days) |
_ttp and related | TikTok | Advertising measurement |
oasisAttribution (local storage) | Us | Remembers which campaign or link brought you, so we can credit it when you pre-register |
oasisModalSeen (session storage) | Us | Shows the welcome pop-up only once per visit |
You can block or delete cookies in your browser settings. Blocking advertising cookies does not affect your pre-registration.
6. Emails
After you pre-register we send a confirmation email. If you tick "Email me launch news and reminders", we also send a short series of launch emails (about 1, 7 and 14 days after you sign up) and important launch announcements. Every email contains an Unsubscribe button; unsubscribing stops these emails and does not cancel your pre-registration.
7. How long we keep your data
- Pre-registration data: until your game account has been created and for as long as the account exists, or until you ask us to delete it.
- Email preference and unsubscribe records: as long as needed to respect your choice.
- Aggregated statistics: kept indefinitely; they do not identify you.
- Backups: deleted automatically after 14 days.
8. Security
The website is served over HTTPS, the database is stored on a private server and access to the administration area is password protected. No system is completely secure, so we recommend using a password for New SRO Oasis that you do not use on any other website.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data;
- ask us to delete your data (this cancels your pre-registration and reserved name);
- object to or restrict certain processing, and withdraw consent at any time;
- lodge a complaint with your local data protection authority.
To use any of these rights, reply to one of our emails or contact the team on our Discord server. We will answer within 30 days.
10. Children
New SRO Oasis is not intended for children under 13 (or under 16 in the EEA). If you believe a child has pre-registered without permission, contact us and we will delete the data.
11. International transfers
Some of our providers (such as Meta, TikTok and Google) process data outside your country, including in the United States. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
12. Changes & contact
We may update this policy, for example when the game launches. The "Last updated" date above always shows the current version, and important changes will be announced on our Discord. Questions? Contact us on Discord or on our Facebook page.
See also our Terms of Service.