← Back to game

Privacy Policy

Last updated: July 15, 2026

The Castle ("we") respects your privacy. This policy explains what data we collect, why, and your rights under the GDPR.

1. Data controller

The Castle is a web game published at playthecastle.com. For any question about your data, contact us through the site.

2. Data we collect

• Account: if you create a gamertag, we store your email, ID and game progress.

• Payments: purchases (ad removal, donations) are handled by Paddle. We never store card or bank details.

• Technical: server logs (IP address, user-agent) kept for security and debugging.

3. Cookies & advertising (Google AdSense)

We display ads via Google AdSense. Google and its partners use cookies to serve personalized or non-personalized ads depending on your consent.

Visitors from the EEA, UK and Switzerland see a Google CMP consent banner on first visit. You can accept, reject, or manage your choices in detail.

You can change your choices at any time by clearing site cookies. More info: policies.google.com/technologies/ads.

If you purchase ad removal, no Google ads or advertising cookies will be loaded.

4. Legal basis

• Consent: advertising and non-essential cookies.

• Contract: user account, payments, progress.

• Legitimate interest: security, fraud prevention.

5. Retention

Account: while active. Technical logs: up to 12 months. Payment data: per accounting obligations (up to 10 years).

6. Your GDPR rights

You have the right to access, rectify, erase, restrict, port and object. You can withdraw consent at any time and lodge a complaint with your data protection authority.

7. Processors

• Lovable Cloud / Supabase (hosting, database, auth)

• Google AdSense (advertising)

• Paddle (payments)