Legal
Privacy Policy
Last updated: 1 July 2026
This Privacy Policy explains what personal data we collect when you use Tikal, how we use and protect it, and the choices and rights you have. By using the Service you agree to this Policy.
1. Information we collect
We collect only what we need to run the game:
- Account data — the email address, username and password (stored only in hashed form) you provide when you register.
- Gameplay data — your characters, progress, items, in-game chat and actions needed to run the world.
- Technical data — device, browser, approximate region and connection details, and logs used for security and debugging.
- Payment data — if you buy a Patron subscription, our payment processor handles your card or payment details; we receive only a confirmation and limited billing information, never your full card number.
- Support data — messages you send us and any information you include in them.
2. How we use your data
We use your data to:
- Create and manage your account and characters, and run the game world.
- Process Patron subscriptions and other purchases.
- Keep the Service safe — detecting cheating, fraud, abuse and technical problems.
- Provide support and respond to your requests.
- Improve and balance the game, and understand how it is used.
- Comply with legal obligations and enforce our Terms of Service.
3. Legal bases
Where the GDPR or similar laws apply, we process your data to perform our contract with you (providing the game), on the basis of our legitimate interests (security, abuse prevention and improving the Service), to comply with legal obligations, and — where required — with your consent, which you can withdraw at any time.
6. Data retention
We keep your data for as long as your account is active and for as long as needed for the purposes above — for example to comply with legal, accounting or security obligations. When you delete your account, we remove or anonymise your personal data within a reasonable period, except where we must keep some of it by law.
7. Security
We use reasonable technical and organisational measures to protect your data — including hashed passwords and encrypted connections. No system is perfectly secure, however, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and request a copy.
- Correct data that is inaccurate or incomplete.
- Delete your account and personal data.
- Object to or restrict certain processing, and withdraw consent.
- Request portability of the data you provided to us.
To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data-protection authority.
9. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with data without appropriate consent, contact us and we will delete it.
10. International transfers
Tikal is played worldwide, so your data may be processed in countries other than your own, including where our servers and service providers are located. Where required, we use appropriate safeguards to protect your data when it is transferred internationally.
11. Changes to this Policy
We may update this Policy from time to time. We will update the "last updated" date and, for material changes, notify you in-game or on the website. Please review it periodically.
12. Contact us
For any privacy question or request, contact us at privacy@tikal.online.