Privacy Policy

1. Introduction to Privacy Policy

At Mythlane, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, Discord community, and game server (collectively, the "Services"). This policy complies with the EU General Data Protection Regulation (GDPR) and French data protection laws.

2. Data Controller

3. Personal Data We Collect

We collect different types of information depending on how you interact with our Services:

Account Information

• Email address (for account creation and communication)
• Username (public identifier)
• Password (stored encrypted)
• Optional profile information (display name, bio, avatar)

Technical Information

• IP address
• Browser type and version
• Device type and operating system
• Cookies and similar tracking technologies

Usage Data

• Pages visited and features used
• Actions performed on our Services
• Time spent on pages
• Referral source

Communication Data

• Support tickets and correspondence
• User-generated content (posts, builds, quest submissions)

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to provide our Services and fulfill our contract with you
• Legitimate Interests: Processing necessary for our legitimate interests (service improvement, fraud prevention, security)
• Consent: Processing based on your explicit consent (analytics cookies, marketing communications)
• Legal Obligation: Processing necessary to comply with legal obligations

5. How We Use Your Information

We use your personal data for the following purposes:

• Provide, operate, and maintain our Services
• Create and manage your account
• Communicate with you (service updates, support, announcements)
• Improve and develop new features for our Services
• Ensure security, prevent fraud, and protect against abuse
• Comply with legal obligations and enforce our Terms of Service
• Analyze usage patterns and generate statistics (anonymized when possible)
• Personalize your experience on our Services

6. Data Recipients and Subprocessors

We may share your personal data with the following categories of recipients:

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account Data: Account duration + 3 years (legal archiving)
• Transaction Data: 10 years (French accounting law)
• Security Logs: 1 year (security purposes)
• Analytics Data: 26 months (CNIL recommendation)
• Marketing Consent: 3 years of inactivity

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data (subject to legal obligations)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Restriction of Processing: Request temporary restriction of processing
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

To exercise any of these rights, please contact us at contact@mythlane.com. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure servers, and regular security assessments. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze usage. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting a notice on our website or sending you an email. The "Last Updated" date at the top of this policy indicates when it was last revised.

14. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés).

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@mythlane.com.