Privacy policy
Last updated: 2026-10-09
This page explains what Paladiny keeps about you and why. The controller of your data is Potomitan SASU (31 rue Montagne de la Fage, 75015 Paris, France); questions go to [to be completed: contact_email].
What we keep
- Your account: the name you chose, your email address, and a scrambled (hashed) form of your password. We cannot read your password.
- Your game: the characters you create, and everything that happens to them (fights, purchases, journeys, journal entries), as well as the options you set.
- Purchases: when you buy a paid option we keep what you bought, when, for how much, a transaction reference, and your acceptance of the terms of sale (including the loss of the right of withdrawal, where it applies). We do not see or keep your card number: payment is taken by Stripe, on its own secure page.
- Password resets: when you ask for a reset link we keep the request, its expiry, and the network (IP) address it came from, to prevent abuse.
- Technical records: like every web server, ours keeps access logs (address, page, time, browser) for security and to keep the service running.
We do not ask for your real name or your date of birth, and we do not use your data for profiling. If you buy something, the payment provider will ask for the payment details it needs (card, and the email for your receipt).
Why, and on what basis
- To run your account and the game you asked to play (performance of the contract).
- To send you the password reset email you asked for (performance of the contract).
- To deliver what you bought, issue your receipt, handle refunds and keep the accounting records the law requires (performance of the contract, and legal obligation).
- To prevent fraud and payment abuse (legitimate interest).
- To keep the service safe and working (legitimate interest).
Cookies and storage
The game sets one session cookie, needed to keep you signed in and to protect forms against forgery. It is strictly necessary, so it does not need your consent, and it ends when you sign out or close your browser. Your browser may also keep a few display preferences on your device (for example whether a panel is open); they never leave it.
The advertising spaces show pictures chosen by the publisher for its own and partner sites. They do not load third-party advertising networks or trackers. If this changes, this page will say so and a consent request will be added before any such cookie is set.
The payment provider
Payments are processed by Stripe. It receives what it needs to take the payment (the amount, your payment details and email) and handles them under its own privacy policy, as an independent controller for its fraud-prevention and legal duties. It may set its own cookies on its payment page, which belongs to it, not to this game. It may process data outside the European Union with the safeguards the law requires. We receive from it only the confirmation of the payment and a reference.
Who sees your data
Other players see your characters (their names, levels, callings and deeds) but never your email address or your account name's link to your email. Our hosting company stores the data on our behalf (Likuid.com), and the payment provider takes the payments (see above). We do not sell your data and we do not pass it to anyone else, except where the law requires it.
How long
Your account data is kept as long as your account exists. If you ask us to delete your account, your personal data is deleted within 30 days, except what the law requires us to keep (see below). Password reset requests are kept only as long as needed to detect abuse. Records of purchases (invoices and receipts) are kept for ten years, as the accounting law requires, even after an account is deleted. Server logs are kept for a limited time, as set by the host. If an account stays unused for a long time we may delete it.
Where the data is
Our host is Likuid.com. Your data is stored on its servers in the Netherlands (European Union). We make no transfer of your data outside the European Union ourselves. The payment provider is the one exception (see above): it may handle payment data under its own safeguards.
Security
Passwords are stored with one-way hashing, connections use HTTPS, and access to the production systems is restricted. If a breach affects your data, we will tell you and the authority as the law requires.
Your rights
You may ask to see the data we hold about you, to correct it, to have it deleted, to limit or object to its use, and to receive it in a usable form. Write to [to be completed: contact_email] from the address of your account, and we will answer within 30 days. If you think we have not respected your rights you may complain to the French data protection authority, the CNIL (cnil.fr).
Children
The game is not meant for children under 16. If you are under 16, please do not create an account without the agreement of a parent. Purchases are reserved for adults, or for minors with the agreement of the holder of parental authority (see the terms of sale).
Changes
If this policy changes, the date at the top changes with it.