Privacy policy
Revised October 11, 2026
Who is responsible for your data
Silver Palace RU is an unofficial fan project of the Silver Palace RU Discord server community. The site is not affiliated with the game’s developer. The site owner, a private individual, is responsible for processing data. You can contact us through the feedback form. An email address for requests will be published before launch.
If you use the site without an account
You do not need to sign up to read news, the calendar, or the forum. Your browser’s localStorage may retain your theme, server region, favorites, recent pages, profile settings, and sign-in session (gf:auth). You can delete these in your browser settings. We do not use analytics, advertising trackers, or tracking cookies.
Feedback
In Cloudflare D1, we store your message text, the page, optional contact details, and a hash of your IP address to limit how often messages can be sent. We do not store the IP address itself. The site team receives the messages. To delete your message, write to us through the feedback form.
Optional account
For email sign-in, we use your address and password; Supabase stores only a hash of the password. When you sign in through Discord or Google, we receive your email, name, and avatar from the provider; through Telegram, we receive your ID, name, username, and photo. Your profile contains a username, display name, avatar, “about me” text, and a visibility setting. If you are signed in, your profile design — including images you upload — and favorites are stored in your account and synced across your devices. Other users can see the design if your profile is public. This data is needed for sign-in and account functions. The legal basis for processing is the consent you give when signing up.
Forum
Forum threads, posts, and reactions are public: everyone, including guests and search engines, can see them along with the author’s username and avatar. We store post text, creation and edit times, the section, the thread language, and the post you are replying to. If you delete a post or a moderator hides it, others can no longer see it, but its text remains in the database and is available to moderators to review reports and repeated violations. Only moderators can see reports: we store who reported, which post they reported, the reason, the comment, and the decision. We store the duration and reason for a forum ban. To protect against spam, the database checks how often messages are posted and how old accounts are. We do not separately store IP addresses for the forum; Supabase and Cloudflare retain technical logs for a limited time under their own policies. Keep the community rules in mind when posting on the forum. The legal basis for processing is your consent and our legitimate interest in moderating the site.
Following, friends, notifications, and direct messages
Connections. We store who you follow, who follows you, friend requests and friendships, and users you have blocked. Counts of followers, following, and friends are visible on your public profile; the lists themselves are visible only if you allow this in your privacy settings. We do not show anyone who has blocked you. To protect against spam, the database keeps a technical count of actions (follows, requests, new conversations, and messages) and deletes it after one day.
Notifications. We store notifications about replies, mentions, follows, friend requests, and messages: who they are from, what they are about, and whether they have been read. Read notifications older than 90 days are deleted automatically. You choose which notifications to receive in the profile editor. If you have signed in through Telegram and enabled forwarding, our bot sends a notification to Telegram with the author’s name, the thread title, the first 160 characters of the text, and a link. This message passes through Telegram’s servers and is stored under Telegram’s policies; you can turn off forwarding at any time.
Direct messages. Only participants can see their conversation. We store message text, the time sent, and read and deletion status. You choose who can message you in your privacy settings: everyone, followers, or friends; blocked users cannot message you. If you delete a message, its text is erased from the database, and the other person sees “Message deleted.” Moderators do not read direct messages. The exception is a report: if the other person reports a message, a moderator sees a copy of that message saved when it was reported and up to five messages before and after it, to understand the context. The copy is kept with the report for as long as the report or the reporting person’s account exists, even if the author deletes the message. The legal basis for processing is performance of a contract (providing the features you use) and our legitimate interest in moderation.
Guilds and ranking. Guild membership is public: the guild tag and name appear next to your name and in the member list on the guild page. For the forum ranking, we store which threads you opened (the thread and day, without the time or IP address) and calculate points based on reactions to your posts, replies in your threads, and views of your threads. Only public profiles appear in the overall ranking.
Discord bot. If you have linked Discord to your account, the bot on the community server finds your account by Discord ID. If you enable forwarding, the bot sends notifications in Discord direct messages with the author’s name, the thread title, the first 160 characters of the text, and a link; they are stored under Discord’s policies. The /профиль command shows only public profile data. If you connect community roles on the server, we store encrypted Discord access tokens and send Discord your username, whether your account is linked, your forum ranking points, and whether you belong to a guild; this data is updated every 10 minutes. You can disconnect the roles in Discord settings (“Connections”) or by unlinking Discord from your account; the record is then deleted. For support tickets, we store the ticket number, your Discord ID, a link to the thread, and its status; the conversation itself stays in Discord. The legal basis for processing is performance of a contract (providing the features you use).
Who helps process your data
Supabase provides the database and sign-in on servers in the EU; Cloudflare provides the site, API, and Turnstile protection; Sanity provides site content without user data; Resend sends confirmation and password reset emails; Discord forwards feedback. Discord, Google, and Telegram are involved in sign-in only if you choose the corresponding method. We do not sell data or share it for advertising.
How long data is kept
Account data is kept for as long as the account exists and is erased when it is deleted. Your reactions, reports, and forum ban are deleted with your account, while threads and posts remain in discussions without an author, as “Deleted user,” so other people’s replies are not disrupted. If you also want their text removed, delete your posts before deleting your account or write to us, and we will erase them from the database. Follows, friendships, blocks, notifications, reports, guild membership, and thread views are deleted with your account; if you owned a guild, it passes to its longest-standing member. Your direct messages remain in the other person’s conversation with “Deleted user” as the sender; you can delete their text beforehand, before deleting your account. Supabase backups may be retained for a limited time under the service’s policies. Feedback and requests are kept for as long as they are needed to work on the site; we will delete them on request.
Your rights
You can download a copy of your data or delete your account from your account settings. The copy includes follows, friends, notifications, all your conversations in full, your guild, and thread views. You can change your profile, its design, and privacy settings in “My Profile,” and edit or delete your posts on the forum. You can withdraw your consent and lodge a complaint with the supervisory authority in your country. The GDPR applies to EU residents.
Age
You can sign up from age 13. If your country requires a higher age to consent to data processing (up to 16 in the EU), parental consent is required.
Changes to this policy
The revision date is shown at the top of the page. We will announce significant changes in the site’s news.