Stormbound Privacy Notice

Paladin Privacy Notice
We are Paladin Studios. We make the mobile game Stormbound.

We are based in The Netherlands and you can reach us at or by post at or by post at Saturnusstraat 60 unit 76, 2516AH Den Haag, The Netherlands.

In this privacy notice we describe:

  • The ways we collect personal data about you when you play Stormbound, and why we do so
  • How we use your personal data, and
  • The choices you have about your personal data.

We collect data, including personal data, when you launch our game, connect to a social networking site through our website or subscribe to our newsletter.

When you play Stormbound, you can sign in with an existing Kongregate account, if you have one. If you don’t have an account yet, you can set one up from inside the game, and Kongregate will ask you to enter your e-mail address, year of birth and give a player-name.

We are committed to a lawful, fair and transparent processing of personal data, adhering to the EU General Data Protection Regulation (GDPR) and this notice describes how we handle your data.

  • We process the following (categories of) personal data
    When you play our games we process the following personal data:

    • Your IP address, and the country based on the IP address,
    • Your device type (for example, iPhone 7, Samsung Galaxy S7) and operating system version.
    • Your Game Center ID (for iOS games) or Google Play ID (for Android games) and the nickname.
    • When you connect to Facebook or other social platforms, we access your limited profile, including your username.
    • For analytics, when you installed and played the game, your progress throughout the game, and events that are connected to your game-play. We generally cannot identify you with this data but treat it the same as personal data.
    • Your e-mail address, if you subscribe to our newsletter. Note that if at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.
  • What (purposes) do we use the data for
    We use this personal data to perform analytics for our games. We currently do not collect data, and do not allow third-parties to collect data related to the delivery of advertizing.

We use social network data to show you personalized content. For example, we might show a high score list with only your friends in it, or show your name or avatar on an in-game object.

We use your email address that you provided when you signed up for our newsletter to send you the newsletter.

  • What is our legal basis for the processing
    For analytics we base the processing of personal data on the legitimate interest of Paladin Studios and that of our partners: the ability to analyze how players progress through our games to make them better, and to know our player-base on an aggregate level. For the third-parties we use, this is their legitimate interest is to be able to offer us their services.

Some third-parties choose to rely on consent, in which case they (or us on their behalf) will ask for your consent before processing your personal.

  • Where do we obtain the data from (sources) and who do we share data with
    We obtain the data from our third-party services providers and share data with them. These are either controllers, or processors acting on our behalf. We have linked to their respective policies:

When you play Stormbound at Kongregate’s website ( or on your PC or Mac as a download from Steam that use is covered by Kongregate Inc. privacy policy, available here:

Your use of Steam ( is covered by Valve Inc.’s privacy policy, available here:

We might sell (part of) our business to another company. Such transfer of ownership could include the transfer of your personal data to the buyer if the data directly relates to that (part of the) business.

We will also release personal data to the authorities, if we are compelled to do so by law.

  • How long and where do we store data
    We store the personal data that we collect for up to two years, and only aggregate data after that time. Aggregation data means that we can no longer look at data for individual players.

When a third-party service provider is a controller, they may keep data as well, either for a shorter or longer period.

  • What safeguards have we taken to protect data
    Taking into account the nature, scope, context and purpose of the processing, we have taken the following technical and organizational measures:

    • Access to our database and user accounts with third-party service providers is protected with access control.
    • Access to the database is limited, not all staff in our organization have full access.
    • Data sent from our games is encrypted in transit where technically possible.

We do not actively monitor the security of our databases and need to rely on our processors to notify us of any data breaches.

  • Transfer of your personal data
    You should also know that your personal data may be transferred from your home country to third parties. If you are an EU resident, this could imply that we also transfer data to countries that do not offer an adequate level of protection for your personal data. When we transfer this data, we will do so only when we have put in place appropriate safeguards to protect your personal data. Please contact us to get a copy of the safeguards that we have put in place. Our contact details are at the bottom of this text.
  • Cookies
    We, and our third-party services providers, use the following cookies:
Name How long Placed by Reason
_gat_ga 1 minute2 years from set/update Google Inc. We use Google Analytics. This is a web analytics service provided by Google, Inc. to count visitors to our websites and analyse their usage of the site to help us determine the value of our content to our users.

Their precise use is described in the respective privacy policies:

  • Your Rights
    You have the right to request access to your personal data that we process. You also have the right to:

    • Rectify incorrect personal data or erase it in certain circumstances.
    • Restrict or object to the processing of your personal data.
    • Receive your data so that you can use it elsewhere (data portability).

If you wish to exercise any of the above rights, please write us at Finally, if we don’t properly handle your complaint, you have the right to lodge a complaint with a supervisory authority. If you do not know who your supervisory authority is, please contact us and we will tell you.

California Online Privacy Protection Act Compliance

Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

Childrens Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Childrens Online Privacy Protection Act), we do not collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

  • How to contact us
    You can contact us with any questions you may have about the processing of your personal data or the use of cookies and similar technologies by us, or to exercise the above rights:

Address: Paladin Studios
Saturnusstraat 60 unit 76, 2516AH Den Haag, The Netherlands