Privacy Policy
Corals is an online browser game. This page explains what data we collect when you play, why we need it, and what control you have over it. We keep the collection to what the game actually requires to run.
1. Data we collect
- Account data — the account name, email address and the password you choose. Passwords are stored hashed, never in clear text.
- Game data — characters, level, inventory, quests, position, guild, chat sent in the game and other progress needed to save and restore your game.
- Technical data — IP address, connection timestamps, browser and device type, and error logs. They are used to operate the servers, prevent abuse and fix bugs.
- Local storage — the game stores settings and a session identifier in your browser so that you stay connected and keep your graphics and audio preferences.
We do not collect payment data: the game currently has no paid feature. We do not knowingly collect data from children under 13.
2. Why we use it
- Create and secure your account, and let you log in.
- Run the multiplayer world: save progress, synchronise players, deliver chat.
- Keep the game fair and safe: anti-cheat, moderation, blocking abuse.
- Diagnose crashes and improve performance and content.
- Reply to you when you contact support or report a bug.
The legal bases are the performance of our agreement with you (running the game), our legitimate interest (security, moderation, improvement) and your consent where it is required.
3. Cookies and similar technologies
Corals uses a strictly necessary session cookie and browser local storage to keep you logged in and remember your settings. No advertising or third-party tracking cookies are used.
4. Sharing
We do not sell your data and we do not share it for advertising. Data is processed only by the providers that host the game — hosting and database infrastructure (Railway), and the platform where the game is distributed when you play through it. They act on our instructions. Data may also be disclosed when the law requires it.
5. Visibility to other players
Your character name, level, titles, appearance, guild and the messages you send in public channels are visible to other players. Your email address is never shown.
6. Retention
Account and game data are kept as long as the account exists. An inactive account may be deleted after 24 months of inactivity. Technical logs are kept up to 12 months. When you delete your account, personal data is erased or irreversibly anonymised, except what we must keep for legal or security reasons.
7. Your rights
You can ask for access to your data, correction, deletion, a portable copy, or object to a processing, by writing to the contact below. We answer within one month. If you are in the EU/EEA, you may also lodge a complaint with your national data protection authority (in France, the CNIL).
8. Security
Traffic is encrypted over HTTPS/WSS, passwords are hashed, and access to the servers is restricted. No system is perfectly secure; if a breach affects your data, we notify you and the competent authority as required by law.
9. Changes
We may update this policy. The date at the top always reflects the current version, and a significant change is announced in the game.
10. Contact
Questions or requests about your data: hello@playcorals.online