Privacy Policy
Last updated: 1 September 2026
This policy explains what personal data we collect when you use Enthroned, why we collect it, who we share it with, how long we keep it, and what rights you have. It covers playenthroned.com, account.playenthroned.com, support.playenthroned.com and your Enthroned game account.
1. Who we are
The controller of your personal data is hämarik, a trading name of Banished OÜ, a company registered in Estonia, registry code 12959133, registered address Paldiski mnt. 227-123, Tallinn, 13520 Harju maakond, Estonia. You can reach us at any time about privacy at info@playenthroned.com.
All of our servers, databases and backups are located in the European Union.
2. What we collect and why
| Data | Why we process it | Legal basis |
|---|---|---|
| Username, email address, password (stored only as a hash) | Creating and running your account, signing you in to the website and the game, sending account emails such as confirmation and password reset. | Performance of a contract (Art. 6(1)(b)) |
| Optional profile details you choose to add later: first name, surname, phone number | Showing them in your account and, if you enable two-factor authentication by SMS, securing your sign-in. | Performance of a contract (Art. 6(1)(b)) |
| Two-factor authentication settings and recovery codes | Protecting your account against unauthorised access. | Performance of a contract (Art. 6(1)(b)) |
| Steam ID and Steam display name, if you sign in with Steam or connect Steam to your account | Linking your Steam identity to your Enthroned account so you can sign in with it, and showing you which Steam account is connected. We store them when you first sign in with Steam, or when you connect Steam from your account settings, and we remove them when you disconnect. | Performance of a contract (Art. 6(1)(b)) |
| Sign-in and security history: IP address, browser, action and time | Detecting and investigating unauthorised access, and letting you review your own sign-in history. | Legitimate interest (Art. 6(1)(f)), keeping accounts secure and detecting account takeover |
| Active sessions and connected devices | Letting you see where you are signed in and sign out remotely. | Performance of a contract (Art. 6(1)(b)) |
| Purchases: Marble balance, transaction history, payment and refund references, items you own | Taking payment, delivering the Marbles and items you bought, handling refunds and support queries about a purchase. | Performance of a contract (Art. 6(1)(b)); legal obligation for the accounting record (Art. 6(1)(c)) |
| Fraud and chargeback records | Preventing payment fraud and repeated abuse of the store. | Legitimate interest (Art. 6(1)(f)), preventing fraud and financial loss |
| Moderation records: suspensions, their reason, duration and history | Enforcing the game rules and terms of service, and handling appeals. | Legitimate interest (Art. 6(1)(f)), enforcing our rules and protecting other players |
| Newsletter subscription: email address, topics you chose, and the confirmation of your opt-in | Sending you the newsletters you asked for. | Consent (Art. 6(1)(a)) |
| Content you post: blog comments, ratings, reactions and poll answers | Publishing what you chose to post, and moderating it. | Performance of a contract (Art. 6(1)(b)); legitimate interest in moderation (Art. 6(1)(f)) |
| Support tickets and the messages in them | Answering your support request and keeping a record of it. | Performance of a contract (Art. 6(1)(b)) |
| Leaderboards: your in-game character name, class and score | Displaying public leaderboards for the game region you play in. | Performance of a contract (Art. 6(1)(b)) |
| Technical logs and error reports | Keeping the service running, diagnosing faults and investigating abuse. | Legitimate interest (Art. 6(1)(f)), operating and securing the service |
What you have to give us. A username, an email address and a password are required to create an account, as without them we cannot create one for you. Everything else is optional: you can use Enthroned without adding your name or phone number, without subscribing to the newsletter and without posting any content.
We do not make automated decisions about you. Nothing on Enthroned profiles you or decides anything about you automatically that produces legal effects or similarly significantly affects you. Suspensions are decided by a person.
3. Who we share it with
We do not sell your personal data and we do not share it for advertising. We use the following service providers, who process data only on our instructions:
| Provider | What they receive | Where |
|---|---|---|
| Mollie B.V., payment processing | Your payment details, which you enter with Mollie directly, plus the amount and an internal reference to your account. We never receive or store your card details. | Netherlands (EU) |
| Twilio SendGrid, email delivery | Your email address and the contents of the emails we send you, plus delivery statistics for newsletters. | United States |
| Google Ireland Limited, reCAPTCHA | Your IP address and interaction signals, when you use the sign-in, sign-up or newsletter form. | Ireland (EU) |
| Sentry, error monitoring | Technical error reports, tagged with your internal account identifier. Your name, email and username are not sent. | European Union |
| Vultr, hosting and backup storage | Hosts our servers and stores our encrypted database backups. | European Union |
Our analytics and our support portal run on our own servers in the European Union, so no third party is involved in either.
Valve Corporation (Steam). If you sign in with Steam or connect Steam to your account, you are sent to Steam to sign in, and we ask Steam's servers for the public display name attached to the Steam ID you signed in with. Valve is not acting on our instructions here — it decides for itself how it handles your Steam account, so it is an independent controller rather than one of our service providers. This only happens if you use Steam; it never happens for accounts that do not. See Valve's privacy policy.
Transfers outside the EU. Email delivery through Twilio SendGrid involves a transfer of your email address to the United States. That transfer is covered by the European Commission's Standard Contractual Clauses. You can request a copy of the safeguards by writing to info@playenthroned.com. If you use Steam, signing in also involves Valve Corporation in the United States, as described above. No other provider we use processes your data outside the EU.
We may also disclose personal data where we are legally required to, for example in response to a lawful request from a competent authority.
4. How long we keep it
| Data | Retention |
|---|---|
| Account and profile data | Until you delete your account. |
| Purchase, payment and refund records | 7 years from the end of the financial year, as required by the Estonian Accounting Act. These are kept even if you delete your account. |
| Sign-in and security history, audit records | 12 months. |
| Fraud and chargeback records | 7 years, alongside the related payment record. |
| Moderation records | While the suspension is active, and for 24 months afterwards. |
| Newsletter subscription | Until you unsubscribe. We keep a record of the unsubscribe itself so we do not email you again. |
| Comments and other content you post | Until you or we delete it, or until you delete your account. |
| Support tickets | 24 months after the ticket is closed. |
| Leaderboard entries | Replaced each time we refresh from the game, and removed when your character no longer ranks. |
| Server logs and error reports | 30 days. |
| Encrypted database backups | Up to 30 days, on a rolling cycle. Data you delete disappears from backups as they roll over. |
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you, and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process your data;
- object to processing we carry out on the basis of a legitimate interest;
- receive your data in a portable, machine-readable format;
- withdraw your consent at any time, where we rely on consent, for example by unsubscribing from the newsletter. Withdrawing consent does not affect processing that already happened before you withdrew it.
You can export or delete your account data yourself from your account settings, or contact us at info@playenthroned.com. We answer within one month.
Some data survives account deletion where the law requires it, in particular payment and accounting records, as set out above.
If you think we have handled your data wrongly, you have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), or to the supervisory authority in your own country.
6. Cookies
Cookies and similar technologies are described in full, including how to change your choices, in our Cookie Policy.
7. Children
Enthroned is not intended for children under 13. We do not knowingly collect personal data from anyone under 13, and if we learn that we have, we will delete the account and the data.
8. Changes to this policy
If we materially change how we handle your personal data, we will update this page and change the date at the top. Where the change requires it, we will also notify you directly or ask for your consent again.
