Privacy Policy

Marc-Élie Charleston, sole trader (French micro-entreprise), SIRET 92276846000011, publisher of Kanarion Online. Contact for any question about your data: [email protected].

Account: your email address and your password, stored only in hashed form (bcrypt). If you sign in with Google, we keep your email address and the account identifier Google sends us; your Google name and photo are not stored. If you play as a guest, we keep a random identifier generated on your device.

Connection: the platform you use (Android, web, PC), the game version, your IP address, and your login and logout times. This data is used to secure the service and fight cheating.

Gameplay: your characters and their names, their progress, their inventory, your in-game actions, your relationships (friends, guild) and in-game mail. Character names and leaderboards are visible to other players.

Chat: chat messages are not saved to a database. The server keeps the last 100 messages of each channel in memory for display and erases them on every restart.

Reports: when you send a bug report or a suggestion, we store your text, the zone, your position in the world and the game version. The text, character name and version are forwarded to our Discord moderation server, without your email or IP address.

Usage statistics: the server records what happens in the game (logins, activities such as combat, quests, professions and events, progress, economic exchanges) and the technical performance of the game on your device (frames per second, device model, graphics settings, errors, reconnections). These statistics are linked to a pseudonymous identifier computed by our servers, never to your email or IP address, and contain no chat messages: for chat, only the number of messages per channel is counted. They are used only to fix the game and to decide what content to build, stay on our servers and are shared with no one.

What the game does not collect: no advertising, no third-party analytics, no location tracking, no access to your contacts, photos or microphone. No purchases can be made in the Android app.

When you pre-register, we collect your email address and, optionally, your username, preferred class, platform and how you heard about the game. This data is used to tell you when tests open and to improve the game. Purchases made on the website (diamonds) are processed by Stripe: we never see your payment details and we only keep the order reference and the diamonds credited.

Providing the game, your account and your purchases: performance of the contract formed when you create an account. Security, anti-cheat, moderation and bug fixing: our legitimate interest in running a safe service. Usage statistics and performance measurements: our legitimate interest in improving the game; you can object by writing to us. Pre-registration and news emails: your consent, which you can withdraw at any time.

Your data is never sold and is not used for advertising. It is processed only by our technical providers: our game server host (Hostinger), Vercel (website hosting), Google (Google sign-in), Stripe (website payments), Resend (pre-registration emails), Discord (bug report delivery) and Hotjar (website analytics). Some of these providers are located outside the European Union; such transfers are covered by the European Commission's standard contractual clauses or an equivalent safeguard.

Account and game data: as long as your account exists, then deleted within 30 days of your request. Connection IP address: 30 days. Connection times: 12 months. Usage statistics: 90 days, after which only anonymous totals, without any identifier, are kept. Bug reports: until they are handled, then at most 2 years. Pre-registration: until the game launches or until you unsubscribe. Purchase records: 10 years, as required by accounting law.

You have the right to access, rectify, erase, restrict, object to and port your data. To exercise these rights, write to [email protected] from the address linked to your account. We reply within one month. If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

Kanarion Online is not intended for children under 13. Between 13 and 15, creating an account requires the consent of a parent or legal guardian. If you believe a child under 13 has sent us personal data, contact us and we will delete it.

Traffic between the game and our servers is encrypted (TLS). Passwords are stored in hashed form and can never be read, including by us. Server access is restricted to the team.

The website only uses technical cookies required for it to work (language and theme preferences). No advertising tracking cookies are used.

We use Hotjar to understand how visitors use the website. This data is anonymized and used only to improve the website. The game uses no third-party analytics tool: its usage statistics are produced and stored by our own servers (see Data Collected by the Game).