Privacy Policy

Last updated: April 26, 2026

This privacy policy describes the processing of personal data carried out in connection with the website, launcher, game and related services of PyramidValley: Reborn. It explains in clear language which data is used, why it is used and what rights you have under the GDPR and French CNIL guidance.

1. Data controller

The data controller is:
AuthenTiiq (sole proprietorship of LEGRAS Emilien)
Contact: [email protected]

2. Personal data we process

Depending on the features you use, we may process the following data:

• Account information : Username, preferred language and the information needed to sign in. For older email/password accounts that are still used, this also includes a protected password.
• Email address : Email address for accounts created with an email address and, for Discord sign-in, the email address returned by Discord when available and not already used by another account. Steam and Epic sign-in do not add an email address supplied by those services.
• Third-party sign-in information : Information needed to link your account with Discord, Steam or Epic, together with the public name and avatar associated with the service you choose.
• Security and connection data : IP address, connection dates and times, security history, essential cookies and tokens used to maintain the session or persistent sign-in.
• Store and transaction data : Player username, basket references, order events and information needed to deliver purchases through the store or Steam.
• Content and moderation : Messages, posts, titles, descriptions, images and other content you publish. Automated moderation is active: some text is analyzed by a Google-provided service to detect toxic or offensive content.

3. Sources and collection methods

Data comes from the following sources:

• Data you directly provide in the game, on the website, to support, in forms or in community content.
• Data sent by Discord, Steam and Epic when you choose those sign-in methods. In the case of Discord, this may include the account email address when the service shares it.
• Technical data automatically collected while using the service: IP address, dates and times, sessions, essential cookies and operating logs.
• Store and payment data when you initiate a purchase through Tebex or Steam.
• Automated moderation is active for certain text content. The text concerned may be sent to a Google-provided moderation service to detect toxic or offensive content.

4. Purposes and legal bases

We process this data for the following purposes:

• Performance of the contract : Account creation and management, access to the game, progression storage, purchase delivery, support and general service administration.
• Legitimate interests : Security, fraud prevention, anti-cheat, defense of our rights, IP history retention, service improvement, language preference storage, content moderation and session continuity.
• Legal obligation : Accounting, tax compliance, retention of certain records and responses to valid requests from public authorities.
• Action initiated by you : Sign-in through Discord, Steam or Epic, store opening, payment or use of persistent sign-in when you choose those functions.

5. Recipients and transfers outside the EEA

Your data may be disclosed to the following categories of recipients:

• Technical providers involved in hosting, infrastructure, database operations, security and service maintenance.
• Discord, Steam and Epic when you voluntarily use those sign-in methods.
• Tebex and Steam for store, payment and purchase-delivery operations.
• Google for the remote display of certain fonts on a few pages and for the automated moderation of certain text content.
• Advisers, insurers, public authorities or courts where required by law or necessary to defend our rights.

Some providers may process data outside the European Economic Area, including in the United States, depending on the services you use. This may concern Google, Discord, Steam, Epic or Tebex. The data shared depends on the requested service: for example your IP address and certain technical browsing data for remote resources, or the information needed for authentication and store operations.

6. Data retention

We apply the following indicative retention periods:

• Account and progression data: for the lifetime of the account and as long as needed to operate the service; deletion, anonymization or deactivation after a valid request, subject to backups and legal obligations.
• IP history and security logs: up to 12 months for fraud prevention, anti-cheat and service security.
• Persistent sign-in cookie or token: up to 30 days or until logout or revocation.
• Language-preference cookie: up to 12 months.
• Session cookie: browser-session duration or end of application session.
• Transaction and accounting records: retained for the legal periods that apply, which may be up to 10 years.

Inactivity alone does not necessarily trigger immediate deletion of all account data. If you want erasure, contact us or use the in-game deletion option when available.

7. Cookies and similar technologies

The cookies and tokens below are used to operate the service or remember a choice you activate:

• Browser session : Session cookie required for authentication and secure navigation.
• Persistent sign-in cookie : Protected cookie used to keep you signed in when you choose or use a persistent account-login flow.
• Language cookie : Language-preference cookie used on the public site to remember your language.
• Third-party trackers : No advertising cookie or marketing pixel was confirmed on the audited public pages; however, third-party services opened from the site or contacted during authentication/payment may apply their own cookies and trackers under their own responsibility.

8. Security

We apply reasonable security measures adapted to the service: password protection, verification of sign-in flows, login-attempt throttling, protected sign-in cookies, access controls and technical logging.

9. Your rights

Under the GDPR, you may where applicable:

• Obtain access to your personal data and request rectification or erasure.
• Request restriction of processing or object to certain processing based on our legitimate interests.
• Exercise your right to data portability where applicable.
• Withdraw your consent whenever processing is based on consent.
• Define instructions regarding the fate of your data after your death, where French law allows it.

10. Contact and complaint

To exercise your rights, delete your account or ask a question about your data, contact us at [email protected] or use the deletion option available in the game when offered.

If, after contacting us, you believe your rights are not respected, you may lodge a complaint with the CNIL: www.cnil.fr.