About the project
Pandora Mobile Online is an independent, educational, non-commercial project. This notice explains what data the game and this website keep and why, in line with the Turkish Personal Data Protection Law No. 6698 (KVKK).
Summary
We keep only the data needed to run the game and protect it. We do not sell personal data, we do not show ads and the website uses no trackers. No payment data is processed: there are no card numbers, bank details or billing addresses.
Your account
Your login name, your password (stored only as a salted Argon2 hash, never in plain text), your account role and your login sessions. Session tokens are stored as hashes and expire.
Game data
Your characters and everything that belongs to them: level, skills, items, gold, Silk, guild, friends, in-game memos, and records of trades and other actions that change your items. These records let us restore lost items and investigate cheating.
During the closed beta, free Silk claims are recorded (account, package, time) to apply the daily limit.
If you send a Help request, we keep the text and the email address you enter so a Game Master can answer. If you send a bug report, the game attaches technical details about your device and the current game state.
Security logs
The servers log IP addresses, times and error details to limit abuse, block attacks and fix problems. Database backups are kept for up to 14 days.
Your browser
The website stores only your language and theme choice in your browser (localStorage). It sets no cookies of its own.
The game stores its settings, your chosen channel and cached game files in your browser so that it loads faster. You can delete them by clearing the site data for game.pandoraworld.net.
Services we use
A hosting provider runs the servers. Cloudflare delivers the site and the game, filters attacks and may set a strictly necessary security cookie. Google reCAPTCHA protects some in-game actions (for example starting a caravan or joining Capture the Flag) and receives information about your browser when the check appears. Some of these providers process data outside Türkiye (KVKK art. 9). Authorities receive data only when the law requires it.
How long we keep it
Account and game data while your account exists. All closed beta game data (characters, items, Silk) will be wiped when the beta ends. Security logs for a short period; backups age out within 14 days.
Your rights
Under KVKK art. 11 you can ask whether your data is processed, get information about it, ask for corrections or deletion, learn who received it and object to results of automated analysis. Contact us through our Discord.