This page briefly explains which personal data EverDragon Sanctuary processes, where it comes from, why it is needed and which rights you have.
Julian Pascal Niese
Birkenkamp 25
23843 Bad Oldesloe
Deutschland
Email: admin@everdragon.de
Data and source: IP address, time, requested address, browser and connection data, received directly from your device.
Purpose and legal basis: Delivery, stable operation, troubleshooting and abuse prevention under Art. 6(1)(f) GDPR. Our interests are operating and securing the service.
Data and source: For manual accounts: username, password hash, linked game ID and login time, plus optional bio and favorite Pal. For Steam login: Steam ID and confirmed OpenID response. For admins: email, role, login IP and 2FA data as well.
Purpose and legal basis: Account, login and permission management under Art. 6(1)(b) and (f) GDPR. Our interest is secure, moderated operation.
Data and source: Game ID, name, platform, online status, current position, level, guild, progress, bans and generated records or events, received from the Palworld game server and PalDefender.
Purpose and legal basis: Status, LiveMap, profiles, leaderboards, Hall of Fame, comparisons, achievements, challenges, guilds and moderation under Art. 6(1)(f) GDPR. Our interest is operating the community features.
Data and source: Contact, player and message data you enter. Gallery posts also include the image, caption and IP address. Likes are linked to the logged-in account. Form type, IP address and time are used for spam protection.
Purpose and legal basis: Handling your request, publishing requested posts, keeping likes unique and preventing abuse under Art. 6(1)(b) and (f) GDPR.
Data and source: Game ID, vote status, point credits, purchased virtual items and transaction history.
Purpose and legal basis: Attributing voluntary votes, managing virtual points and delivering shop items under Art. 6(1)(b) GDPR.
Player name, online status, current LiveMap position, level, guild, progress, records, events and bans may be publicly visible in the intended community areas. Optional profile details and approved gallery posts are public as well. Most of this data comes from the game server rather than directly from you.
When you voluntarily use Steam login, you are redirected to Valve and our server verifies the OpenID response with Valve in the United States. Valve identifies the EU-US Data Privacy Framework and Standard Contractual Clauses as safeguards for international transfers: Valve Privacy Policy
When you voluntarily vote, top-games.net receives your game ID through the personalized link and our server uses the same ID to request your vote status. Ordinary external links, such as Twitch, connect to the provider only after you click them: top-games.net Privacy Policy
Recipients are limited to authorized administrators, our hosting provider with servers in Germany, and the external services named above when you use the relevant function. Other disclosures occur only where legally required or necessary to establish, exercise or defend legal claims.
Automated retention rules remove anti-spam data after 7 days, login attempts after 30 days, audit logs and closed support cases, ban appeals and whitelist requests after 180 days, rejected gallery posts including their image after 14 days, and website accounts inactive for 365 days. The submission IP of a reviewed gallery post is removed after 30 days. Open matters remain stored until they are closed. Game and community history as well as vote and shop records are retained while required for community features, moderation, virtual point administration or potential legal claims. Security data may be kept longer while a specific incident is being investigated. The operator has confirmed that game server backups exist and are retained under the backup policy applicable to server operation.
We create a required session cookie when needed for login, forms, security functions and personalized areas; it expires with the browser session. Public read-only pages do not create a session. Your selected language is stored in a cookie for up to one year. Your browser stores the light or dark theme locally only. These accesses are required for the function you request under Section 25(2)(2) TDDDG. We use no tracking, marketing or analytics tools.
Subject to the legal requirements, you have rights to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. Send requests to admin@everdragon.de. You may also lodge a complaint with a data protection supervisory authority.
For an account, request, vote, shop purchase or upload, you must provide the data marked or otherwise apparent as required. Without it, we cannot provide the chosen function. All other details and the use of these functions are voluntary.
We do not use solely automated decisions with legal or similarly significant effects, and we do not perform profiling.
Competent supervisory authority:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein
Holstenstraße 98, 24103 Kiel
Email: mail@datenschutzzentrum.de
Online complaint form
Last updated: September 2026
