Privacy policy

Who we are

Proedent (proedent.com) is the data controller for the personal information described here. You can reach us through the contact form or email [email protected].

This policy explains what we collect, why, where it's kept and what you can do about it under UK data protection law (the UK GDPR and the Data Protection Act 2018).

What we collect

When	What we collect
You create an account with email	Username, email address, date of birth, and your password as a one-way hash (we never store the password itself).
You sign up or in with Google	Your name, verified email address and Google account ID, sent by Google and checked by our server with Google. We then ask you for a username and date of birth.
You use your account	Coin balance, XP, level, the games you've opened recently, how many games you've opened, when you joined, your last sign-in, when you last collected the daily bonus, and a count of failed sign-in attempts.
You contact us or Player Care	Your name, email address, the topic you chose and your message.
You visit any page	Our web host records standard server logs (such as IP address, browser type and pages requested) to keep the site secure and working.

We do not collect card or bank details, because there is nothing to buy. We don't use advertising or tracking cookies.

Why we use it

To run your account, keep your coins, level and history, and sign you in (to provide the service you asked for).
To check you're 18 or over (our legitimate interest in keeping Proedent for adults only, and to meet our responsibilities to protect young and vulnerable people).
To reply to messages and act on requests for breaks, restrictions or deletion.
To keep Proedent secure, prevent misuse and fix problems (our legitimate interest).

We don't sell your information, and we don't use it for marketing.

Where it's kept and how it's protected

Accounts are kept on our own server, as individual protected files. They are not kept in a public database or spreadsheet, and they cannot be opened from the web. Every sign-up, sign-in and account change is processed by our server, never by code running in your browser.

Passwords are stored as one-way hashes using PHP's built-in password hashing.
Sign-in uses a session cookie that is HttpOnly (page scripts can't read it), SameSite and secure over HTTPS.
Five wrong passwords in a row pause sign-in for that account for 15 minutes.
Messages from our forms are sent by our server to our support inbox over an encrypted (TLS) connection.
A private log of form submissions and account events (date, action, email address, username and whether it worked, never passwords) is kept in a protected folder on our server so we can follow up and check things arrived.

We only share information with service providers who help us run Proedent, under contracts that require them to protect it:

Our web hosting provider, which stores the website, accounts and logs.
Brevo (Sendinblue SAS), the email delivery service that carries messages from our forms to our inbox. Brevo is based in the EU, which the UK recognises as providing adequate protection.
Google, only if you choose to sign in with Google. Google's own privacy policy applies to that.

We may also share information if the law requires it.

How long we keep it

Accounts: until you delete your account or ask us to. Deleting your account from My account removes its file from our server straight away.
Messages and the form log: until your request has been dealt with, then for up to 12 months in case you get back in touch, after which we delete them.
Server logs: kept by our host for a short period, normally no more than 90 days.

Your rights

Under UK data protection law you can ask us to:

give you a copy of your information;
correct anything that's wrong;
delete your information;
restrict or object to how we use it;
give you your information in a portable format.

You can delete your account yourself at any time from My account. For anything else, send a request through the contact form or email [email protected]. We'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Proedent is not for anyone under 18. We don't knowingly collect information about children. If we learn that an account belongs to someone under 18, we will delete it.

Cookies

We use one strictly necessary session cookie and a little browser storage. Our Cookie policy lists them.

Changes to this policy

We'll update this page if anything changes. The date at the top shows the latest version.