Privacy policy

This English version is a courtesy translation; the French version prevails.

This page explains what data the server “Balamb” records, why, for how long, and how to exercise your rights (General Data Protection Regulation, GDPR, and the French Data Protection Act).

Data controller

the publisher of the site (see the legal notice). Contact: the site's Contact page.

What is recorded

• Your account: account name, nicknames, password (stored in a hashed, irreversible form), e-mail address (required, verified by a link sent at registration), chosen language (visible to other players: English speakers have their own section in the game's player list), registration date and IP address.
• Your game: cards, gils, powers, skills, statistics, fame, guild, profile notes.
• Moderation: sanctions (warnings, kicks, bans of an account, a nickname or an IP address) and a log of the team's actions.
• Messages sent through the Contact page: name, e-mail address if you give it, subject, message, IP address.
• Server operation: a technical log (connections, errors, public chat messages, which every player present can see). The content of private messages is not recorded.

Why

• to run your account and the game (the service you ask for when you register);
• to keep the server safe and fair: fighting cheating, spam and abuse, enforcing the terms of use (legitimate interest);
• to verify your e-mail address and to answer your messages.

No advertising, no audience measurement, no sale or transfer of data. The e-mail address is only used for the account (confirmation link and lost-password link): no newsletter.

Who can access it

The server's administration team, according to their level (e-mail addresses are only visible to administrators), and the hosting provider, which provides the machine without using the data. E-mails go through the publisher's sending service. The data is hosted with OVH SAS, in Germany (European Union): it does not leave the European Union.

How long

• the account and game data: as long as the account exists; it is deleted on request;
• Contact page messages and the moderation log: one year, then they are deleted automatically;
• sanctions: for the duration of the sanction;
• recorded donations: as long as the server is online (history of the gauge); a donor can ask for their nickname to be removed at any time;
• the technical log: a few weeks at most.

Cookies

The site only uses two cookies: one needed for the Members area (it keeps you logged in) and one that remembers your language. There are no advertising or audience cookies, so no consent is requested.

Your rights

You can ask to access your data, correct it, erase it (delete the account), restrict or object to its processing, and obtain it in a portable format, by writing to the site's Contact page; you will get an answer within one month. If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Minors

A player under 15 needs a parent's permission to create an account.

Security

The website is protected by HTTPS, and passwords are stored in a hashed form that even the administrator cannot read. The game itself dates from 2010: when connecting, it sends the password merely scrambled, without real encryption. Only someone able to listen to your connection (for example on a shared public Wi-Fi) could read it. As a precaution, choose a password for this game that you do not use anywhere else, and prefer playing from your own connection rather than a public Wi-Fi. If you think your password may have been read, change it in the Members area.

Donations

Donations go through an external service (PayPal): the server never sees your card or bank details, and that service's privacy policy applies. For the gauge on the “Make a donation” page, the administrator records the date and net amount of each donation, and your nickname only if you agree to have it shown in the thanks (otherwise the donation stays anonymous); individual amounts are never published.

Last updated: 24 September 2026.