Privacy Policy

What we collect

When you sign up

• Email address and password. Your password is stored securely (hashed) by our sign-in provider; we never see it.
• If you sign in with Discord or Google: your account ID, username or name, profile picture and the email address they share with us.
• Display name (your Palia name) and, if you add them, a profile picture and "about me" text.
• Age check result. We ask for your date of birth to confirm you are 13 or older, but we only keep the date you passed the check, never your birth date. We also record when you accepted these terms.

When you use the site

• Parties you host or join, the roles you sign up for, attendance and the ratings you give or receive.
• Communities you create or join, friends and friend requests.
• Messages you send in Global Chat, party chats, community chats and private whispers.
• Your trackers and collections, party templates, reminders, theme and notification settings.
• Reports you make about messages, and moderation actions on your account.

Technical information

• Cookies: only the ones needed to keep you signed in and remember that you've completed the age check. No advertising or tracking cookies.
• Your browser's storage: small preferences such as the recipe view you picked are saved on your own device and never sent to us.
• Server logs: our hosting providers automatically log requests (such as IP address, browser type and time) to keep the service secure and working. These are kept for a limited time by those providers.
• Browser notifications are only shown if you allow them, and are handled by your browser.
• Security records: to stop people guessing passwords, we log login and sign-up attempts against a scrambled (hashed) form of the email address and IP address used. These records are deleted within a day.
• Password safety check: when you choose a password we check it againstHave I Been Pwned's list of leaked passwords. Only the first 5 characters of a scrambled form of your password are sent, never the password itself.

How we use it

• To run the site's features: parties, chats, communities, trackers and notifications.
• To show your display name, picture and activity to other players where a feature needs it.
• To keep the community safe: moderation, handling reports and preventing abuse.
• To fix problems and improve the site.

Who can see your information

• Other players can see your display name, picture, profile, the public parties you host or join, your messages in Global Chat and in parties or communities you're part of, and ratings.
• Whispers are visible only to you and the person you're whispering with, unless one of you reports a message.
• Moderators and admins can see reported messages and the information needed to handle them.
• Service providers that run the site for us: Supabase (database, sign-in, file storage and live updates), Vercel (website hosting) and, if you use them to sign in, Discord or Google. Game pictures come from the Palia Wiki but are stored with us, so your browser doesn't contact the wiki to show them.

We don't sell or rent your information, and we don't share it with advertisers. We only disclose information if the law requires it or to protect people's safety.

Our service providers may store information on servers outside your country (for example in the United States). We use providers with appropriate safeguards for this.

How long we keep it

• Your information is kept while your account exists.
• When you delete your account, you're signed out straight away and it is permanently deleted after 30 days (so you can change your mind by logging back in). See Data Deletion for exactly what's removed.
• Reports you made about others are kept without your name so moderators can still act on them.
• Our providers' backups may keep deleted data for a short time before it is overwritten.

Your choices and rights

• Change your display name, picture, about me and notification settings any time in Settings.
• Delete your account in Settings, or email us.
• Ask for a copy of your information, or ask us to correct or delete it, by emailing us. Depending on where you live (for example the EU, UK or California), you may have further rights, such as to object to or restrict how we use your information or to complain to a data protection authority. We'll respond within 30 days.

Children

Palia Companion is not for children under 13, and we don't knowingly collect their information. If someone enters a birth date under 13, no account is created, or an existing account is signed out and deleted. If you believe a child under 13 has an account, please contact us and we'll delete it.

Security

Access to your information is protected by account permissions on every table, encrypted connections (HTTPS) and hashed passwords. No system is perfectly secure, so please use a strong, unique password.

Changes

If we change this policy in a significant way we'll ask you to review it on your next visit. The date at the top shows the latest version.

Contact

Privacy questions or requests: contact@paliacompanion.app.