What is stored, and why
Basic information: In order for us to offer you service, you need to choose an account name (which can be any pseudonym or screen name that has not yet been reserved by anyone else), and a password. These are your credentials that you use to identify yourself towards us. With them, you can access the game itself, and also the forums. Your account name is not visible by default, and we make an effort to hide it in our forum software. Thus, while you can assume that the account name you choose is not readily visible to anyone, except our staff, you should still be considerate what you use as your account name.
We automatically store certain non-personally identifiable 'computer' information: the version of your Flash player, what operating system your computer uses (Windows, MacOS, Linux, ...), its screen resolution, and your computer's internet protocol address. This is done to improve service: for example, if we see that a lot of our players have a certain screen resolution, or use a certain operating system, we may adapt our game client to better suit them, and do extra testing in order to make sure everything works in that particular popular configuration. This information is collected because we (and players) have a legitimate interest for us doing so; namely (a) if we notice that a lot of players are in a particular location, we can use this information to move the server to a location closer to them, and improve the response time, and (b) collecting this information allows us - since we do not collect other actual personally identifiable information - to provide players with a safe environment to play in. We automatically anonymize that information after six weeks.
In-Game Content: In order to play Paw'D (using the game client), we need to store information required for the internal operation of the game, to play the game as is. This includes the name you picked for your character, what other characters you added to your friends and ignore lists, the name you give your guild (if you create one), what you named your pets, the letters you sent using the in-game mail boxes, and so on. This is required so that when you log in the next time, we can show you your friends list, and tell you when your friends are online, so that your pet displays the proper name, and that the players you sent letters to can retrieve them. This is done to assist our staff in case you ever need our help in, for example, recovering an item that you have accidentally sold. When playing the game, you have the option to type "/tag title" to instruct the server to save a video of your playing session (from when you logged in, to logging out), which you can replay again at a later time. In this case, everything the server sent to or received from you is stored until you delete the video. Beyond that, we store a log of chat and mailbox messages for up to six weeks before they are deleted. This is done to protect our players: in case someone says something that makes you feel uncomfortable, you can report it to us, and we are able to check what they did. To help you do this, we added a report tool with which you can bring those situations to our attention. To report a player, either on their name in the chatbox, or right-click their character in game, and select "Report Player". You can also type "/report name" (replace "name" with their name) for the same effect. We may store any information involved in serious reports indefinitely to protect our players and to judge the severity of repeated offenders.
Who can access the information
Generally, any information stored on our server can only be seen by select staff who works on Paw'D. The names that you give your character and your pets can be seen by anyone, if they go to https://www.pawdgame.com/adventurers/your-character-name (replace "your-character-name" with the name of your character) once you have made a bit of progress in-game (specifically, once you reached level 5). When you run into another player in Paw'D, they can see the names you gave your character and your pet, if they hover them with their mouse. If you use the public in-game chat, keep in mind that any player that is in the general location of your own character can see what you typed (certain classes, such as mages or hunters have invisibility and stealth spells, so they can be hidden from sight). If you want to talk to someone and make sure no other players see it, you can either whisper them (enter their name in the box on the right side, next to the chat box), or you can invite them to a group (right click their character, and select "invite to group"), and then start typing "/p " in your chatbox to talk only to players in your group. If you send in-game mail to another player, that other player can access it. Remember that nothing you say on the Internet is truly private: anyone can take photos of their screens, and what they do with that is outside our control.
We take reasonable steps to keep your data secure. However, as with any service, there is always a possibility that someone illegitimately gains access. We take several precautions to limit the damage of such a case. Most importantly, we delete information that is no longer needed: general log files are removed after one month. Empty accounts, chat and log files are removed after one month as well. One-way cryptographic hashes are used so that passwords are not stored in plain-text. We keep backups to protect ourselves against hard- and software failures, and they are encrypted according to industry standards before they leave the server, and are retained for six months. We set the retention setting of Google Analytics user data to 14 months, which is the minimum available at this time.
Where information is processed
The website and the servers are located in geographically diverse locations (to help against outages), namely in the United States and Canada. Thus, no matter where you are located, the data will be processed and stored in the United States and Canada.
Legal bases for processing your data
Rights and choices about your data
Generally, we avoid storing personally identifiable information wherever possible. If you accidentally submitted personally identifiable information, we will help you removing it, or having it changed.
To correct, update, amend or delete personal information: in case you accidentally used personally identifiable information somewhere (for example, you used your real name as an account name), the preferred way to contact us is by opening a support ticket (type /support while in-game, or use the contact address below), specify what you want to have changed, and what you want it to be changed to. You can also delete your information without our help by deleting all your characters, so that after the 24-hour grace period, your account is empty. Once your account is empty, it will be included in the next clean-up sweep that occurs every month. Should you not be able to access your account for some reason, contacting our support is the preferred way to go.
We do not knowingly store information of any child younger than 13 years without parental consent. If you obtained knowledge that one of the players is younger than 13 years, please contact our staff using either the contact form, or the report tool, including verifiable information how you know that they are younger than 13 years (this may include, for example, the player themselves stating their age within the game, or on another site, and the player admitting that other site belongs to them, or because you are one of their parents or legal guardians). That information needs to be verifiable by us. If you cannot prove their age, please alert that child's parents, and have them contact us.
Parents of children younger than 13 years may give explicit consent, allowing their child to fully interact with the community. Please contact us for further information. When requesting parental consent, we ask for additional information, namely (i) the parent's name, (ii) the parent's e-mail address, and (iii) the child's birthdate. This is done (i) for verification purposes (to verify any person contacting us about the child in future is indeed their parent), and (ii) for possible situations in which the consent form is challenged (to show we could reasonably assume that we were indeed dealing with the child's parent). We realize the additional information is sensitive, and therefore take additional precautions to keep it secure. Each form is stored digitally (using the air-gap principle) on a device not connected to the Internet, protected by industry standard encryption algorithms against physical theft, and is promptly destroyed when it is no longer needed. After giving consent, the parent may contact us at any time to request a copy of any information stored about their child, or to withdraw their consent again. In both cases, that parent should use the e-mail address they gave on the consent form, and include their child's name and birthdate for verification purposes. If consent is withdrawn, all information collected under consent is deleted.
Please direct any questions or concerns to .