` comment markers. See TODO/tech/TODO_deploy.md §2. -->

Legal

Privacy Policy

Effective date: 1 April 2026

This Privacy Policy describes how Portal Avalon ("we", "our", "us") collects, uses, and protects information when you visit portal-avalon.top (the "Site"). By using the Site you accept the practices described in this policy.

Portal Avalon is an adult fiction publishing site. We are committed to handling the limited information we collect with discretion and transparency.

1. Information We Collect

We collect the following categories of information:

  • Usage data. Standard server logs may record your IP address, browser type, operating system, referring URL, and pages visited. These logs are retained for up to 30 days for security and diagnostic purposes.
  • Newsletter subscriptions. If you subscribe to our newsletter, we collect your email address. We use a third-party email service provider (such as Mailchimp or equivalent) to store and process subscription data. You can unsubscribe at any time via the link in any newsletter email.
  • Contact form submissions. If you use our contact form, we receive the information you provide (name, email, message). Form submissions are processed via Formspree or a similar third-party service.
  • Session storage. We store a session-scoped flag in your browser's sessionStorage to record your age verification confirmation. This data never leaves your device and is cleared when you close your browser.

We do not collect payment information. We do not create user accounts or require registration.

2. Avalon RPG (Browser Game)

Portal Avalon hosts a browser-based role-playing game ("Avalon"). The game processes the following data:

  • localStorage. Game progress, settings, inventory, quest state, and Codex entries are saved in your browser's localStorage. This data never leaves your device and is not transmitted to any server. You can clear it at any time via your browser settings or the in-game "Delete Save" option.
  • No accounts or logins. The game does not require or create user accounts. All game state is local to your browser.
  • Future payments (not yet active). If in-app purchases are introduced, they will be processed through Stripe. Payment data (card details, billing address) will be handled entirely by Stripe and never stored on our servers. This policy will be updated before any payment features are enabled. See Stripe's Privacy Policy.
  • Virtual currency. Any virtual currency or in-game items are stored locally and have no real-world monetary value. They are non-transferable and non-refundable.

3. Cookies and Tracking

The Site uses the following technologies:

  • Google Fonts. We load fonts from Google Fonts (fonts.googleapis.com). Google may log font requests; see Google's Privacy Policy.

We do not currently use analytics cookies, advertising cookies, or tracking pixels. If this changes, this policy will be updated and a cookie consent mechanism will be implemented.

4. How We Use Your Information

  • To deliver and maintain the Site
  • To send newsletter content to subscribers who have opted in
  • To respond to contact form messages
  • To investigate security incidents or abuse

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

  • Consent — for newsletter subscriptions and any optional communications
  • Legitimate interests — for server log retention for security purposes
  • Legal obligation — where required by applicable law

6. Data Retention

  • Server logs: 30 days
  • Newsletter subscriber data: until you unsubscribe
  • Contact form data: up to 12 months, then deleted

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right to access the data we hold about you
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict or object to processing
  • Right to data portability
  • Right to withdraw consent at any time

To exercise any of these rights, contact us at: portal-avalon.top/contact

8. Third-Party Services

The Site may link to or integrate with third-party services. This policy does not cover those services. We encourage you to review the privacy policies of any third-party services you use.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. The Site is served exclusively over HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Age Verification

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this page periodically.

12. Contact

For privacy-related questions, data requests, or to report a concern:

▶ Play Avalon