1. Information We Collect

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Create and manage your account, enable community features, and deliver the platform functionality
• Authenticate Users: Verify your identity and secure your account
• Process Donations: Match donations to user accounts and provide supporter benefits
• Improve Platform: Analyze usage patterns, fix bugs, and develop new features
• Communicate: Send important updates about the service, security alerts, or changes to our policies
• Ensure Safety: Detect and prevent fraud, abuse, and security incidents
• Comply with Legal Obligations: Meet legal requirements and respond to lawful requests

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract (Article 6(1)(b)): Processing necessary to provide the services you've requested (account creation, character profiles, marketplace features)
• Consent (Article 6(1)(a)): Voluntary donations, optional features, and cookie preferences
• Legitimate Interests (Article 6(1)(f)): Platform improvement, security, and fraud prevention
• Legal Obligation (Article 6(1)(c)): Compliance with applicable laws

4. Data Sharing and Third Parties

5. Data Retention

We retain your data as follows:

• Active Accounts: Retained as long as your account is active
• Inactive Accounts: After 3 years of inactivity, we may delete your account
• Market Ledger: 30 days for non-supporters, unlimited for supporters
• Donation Records: Retained for 7 years for tax and legal compliance
• Server Logs: Retained for 90 days for security and debugging
• Deleted Accounts: Personal data deleted immediately upon account deletion, some data anonymized for historical records

6. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to certain types of processing
• Right to Restrict Processing: Limit how we use your data
• Right to Withdraw Consent: Withdraw consent for optional features

To exercise these rights, visit your account settings or contact us through Discord. We will respond to your request within 30 days.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS encryption for all data transmission
• Secure authentication via OAuth 2.0
• Row-level security policies on database tables
• Regular security updates and patches
• Access controls and audit logging for admin actions

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Your data may be transferred to and stored on servers located outside your country of residence, including the United States. We ensure that adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs) with our service providers
• Compliance with applicable data protection frameworks
• Security measures meeting international standards

9. Children's Privacy

Pax Dei Atlas is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the platform after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us through our Discord community: https://discord.gg/S37FyrgwA2