Privacy Policy

What we collect

We collect only what the game and this site need to work:

• Account: your email address, display name and a password (stored only as a secure hash by our authentication provider). You can also play as a guest without an account.
• Game progress: your roster, decks, items, currencies, battle and descent results, stored on our servers so they follow your account.
• Purchases: when you buy in-game currency through Google Play, we receive the order ID, product and purchase token to verify and deliver it. We never see your payment details.
• Pre-registration: the email address, platform and language you enter on this site.
• Account deletion requests: the email address and optional note you send through the deletion form.
• Technical data: anonymous, aggregated page statistics on this site (no cookies, no cross-site tracking) and server logs kept briefly for security.

How we use it

To run your account and save your progress, to verify purchases and prevent cheating or fraud, to answer support requests, and to send the launch announcement you pre-registered for. We do not sell your data and we do not use it for advertising.

Who processes it

We rely on a small number of service providers, each bound to protect your data:

• Supabase: authentication and database.
• Vercel: hosting for this website and the game’s server functions.
• Google Play: distribution and in-app purchases on Android.
• Valve (Steam): distribution on PC, once released there.

How long we keep it

Account and game data are kept while your account exists and are deleted when you delete it. Pre-registration emails are deleted after the launch announcement or on request. Purchase records may be kept for as long as the law requires.

Your choices and rights

You can view and change your account details in the game’s Warden screen, delete your account there or through our deletion page, and ask us for a copy of your data or to correct or erase it. Depending on where you live (for example under the GDPR or KVKK) you may also object to processing or complain to your data protection authority.

Security

Data travels over encrypted connections. Every player can read and change only their own records, and rewards are verified on the server.

Children

The Pale Realm is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Changes

If this policy changes we will update the date above and, for significant changes, tell you in the game.