Privacy Notice

This notice explains how Franek Skrzynski ("we", "us"), operating the game Toon Royale, handles personal data. We are the data controller for the personal data described here and decide why and how it is processed.

Data we collect

• Account data — username, password (stored hashed), and, if you sign in with Google, the account identifier and email address Google returns.
• Game data — progression, level and XP, rank and match placements, coins and gems balances, owned and equipped cosmetics, battle pass tier, party membership.
• Support messages — the content of emails or reports you send us.
• Technical and usage data — IP address, device and browser type, session timestamps, crash and error logs, basic gameplay telemetry.
• Purchase records — which entitlements a purchase granted your account, and the order reference. Card and billing details are collected and held by Paddle, not by us.

Why we use it, and our legal basis

• Creating and running your account, matchmaking, saving progression and delivering purchased items — performance of our contract with you.
• Security, anti-cheat and fraud prevention — our legitimate interest in a fair and safe game.
• Fixing bugs and improving the game — our legitimate interest in maintaining and improving the Service.
• Customer support — performance of our contract and our legitimate interest in answering you.
• Optional marketing emails, if we ever send them — your consent, withdrawable at any time.
• Tax, accounting and legal records — compliance with legal obligations.

Who we share data with

• Service providers / subprocessors — hosting, database, authentication and error-logging providers who process data on our instructions.
• Paddle.com, our Merchant of Record, for the sale of virtual items, payments, subscription management, invoicing, tax compliance and refunds.
• Google, if you choose Google sign-in, for authenticating you.
• Professional advisers such as accountants or lawyers, where needed.
• Authorities, where we are legally required to disclose.

We do not sell your personal data.

International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on an adequacy decision or on Standard Contractual Clauses together with appropriate additional safeguards.

Retention

We keep account and game data for as long as your account is active, and for up to 12 months after you delete it or it becomes inactive, so we can handle disputes and abuse. Technical logs are kept for up to 90 days. Records tied to purchases are kept as long as tax and accounting law requires. After that, data is deleted or anonymised.

Your rights

Subject to local law, you can request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interests. Where processing relies on consent you can withdraw it at any time. Email support@toonroyale.org and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your supervisory authority (in Poland, the President of the Personal Data Protection Office, UODO).

Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level access controls on our database and restricted administrative access. No system is perfectly secure, but we work to protect your data and will notify you and the regulator of a qualifying breach as required.

Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember settings such as volume and equipped cosmetics. Paddle sets cookies needed to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but signing in and purchases may then stop working.

Children

The Game is not directed at children under 13 (or the minimum age in your country). If we learn we hold such data without appropriate consent, we delete it.

Contact

Franek Skrzynski, data controller — support@toonroyale.org.