Who we are
This policy covers Pandora Mobile Online (“Pandora”, “we”): the game in the browser, the Android app, the iPhone and iPad app, and this website. Pandora is a game project run by the Pandora Mobile Online team. Contact: [email protected].
Summary
We collect only what we need to run the game, keep it fair and answer you. We do not sell personal data, we do not show ads, we do not track you across other apps or websites, and there are no advertising or analytics tools in the website or the apps. Silk purchases are paid through our payment provider: we never see or store card numbers or bank details.
Your account
You create an account on this website: you choose an account name, a password, an email address and a secret question with its answer. The email address and the secret answer are used only to recover your account and for important account notices. We do not ask for your real name, phone number or date of birth.
We store the account name and the email address; the password and the secret answer only as salted Argon2 hashes (never in plain text); your account role, your login sessions (stored as hashes; they expire), account security events (password, email or secret changes and recoveries), any bans, your Silk balance and your Silk orders.
Game data
Your characters and everything that belongs to them: name, level, skills, items, gold, Silk, guild, friends and blocked players, in-game letters and settings stored on the server.
Records of trades and of other actions that change your items, gold or Silk, including free Silk claims (account, package, time). They let us restore lost items, apply limits and investigate cheating.
Chat
Chat messages are delivered to the players they are meant for. To stop spam, scams and abuse, the server keeps a log of every chat message, whispers included: time, channel, sender, recipient and text. Only our Game Masters can read it, only for moderation, and each message is deleted automatically after 30 days.
Help requests and messages to us
If you send a Help request in the game, we keep the text, the type of request and the email address you type, so that a Game Master can answer you. If you write to us by email or on Discord, we keep the conversation as long as we need it to help you.
Bug and crash reports
If you send a bug report, or if the game or app hits an error, a report is sent to us: device model, operating system and app or browser version, graphics and memory details, screen size, the game state, recent error messages and the last moments of game traffic. Passwords and login tokens are masked, and the content of private chat, letters and friend requests is removed before the report is stored. We use these reports only to fix problems and delete them when they are no longer needed.
Connection and device data
Our servers see your IP address and log it with the time and error details, to limit abuse, block attacks and enforce bans. The apps also send their version, the operating system and the device model, so that we deliver the right game files and can fix device specific problems.
On your device
The website stores only your language choice in your browser (localStorage). It sets no cookies of its own.
The game stores its settings, your chosen channel, your login session and downloaded game files on your device so that it starts faster. Clear the site data of game.pandoraworld.net in the browser, or uninstall the app, to remove them.
Services that help us
Hosting providers run our servers and deliver the game files. Cloudflare delivers the website and the game, filters attacks and may set a strictly necessary security cookie; it sees your IP address. Google reCAPTCHA protects account registration, password recovery and some in-game actions; when the check appears (in the apps inside a small built-in browser window), Google receives information about your device and browser under its own privacy policy. Silk payments are handled by our payment provider (HipoPAY), which processes your payment details under its own privacy policy; we receive only the order, the amount and whether it was paid. If you join our Discord server, Discord’s own policy applies there.
Some of these providers process data outside your country. We give data to authorities only when the law requires it. We never give or sell data to advertisers or data brokers.
Why we use your data
To provide the game you asked for (create your account, save your progress, deliver messages), to keep it safe and fair (security logs, chat moderation, anti-cheat), to fix problems (bug and crash reports), to answer you, and to meet legal obligations.
How long we keep it
Account and game data: as long as your account exists. When you delete your account, it is removed as described on the Delete account page. Silk order records are kept as long as the law requires for accounting.
Chat log: 30 days. Server logs: a short period. Database backups: up to 14 days. Records of item, gold and Silk changes are kept for security and accounting; older records are deleted or archived over time.
Deleting your account
You can ask us to delete your account and its data at any time. The steps are on the Delete account page.
Children
Pandora is not meant for children under 13. If you are under 18, or under the age of majority where you live, ask a parent or guardian before you play. If we learn that a child under 13 has created an account, we delete it.
Your rights
Depending on where you live (for example the KVKK in Türkiye or the GDPR in the European Union), you can ask what data we hold about you, get a copy, have it corrected or deleted, object to or limit its use, and complain to your data protection authority. Write to [email protected]. We answer within 30 days.
Changes
If we change this policy, the date at the top changes and important changes are announced in the game news.