Last updated: August 4, 2026
Pals Post (“we,” “us”) is an independent fan publication at palspost.com covering Palworld and the Palworld OFFICIAL CARD GAME. This policy explains what information we collect, why, and what we do with it. The short version: we collect what a member account needs to work, we use Google Analytics and Google AdSense (both of which you can switch off), and we do not sell your information.
What we collect
Account information
If you create an account, we store your email address, username, display name, a securely hashed password (we never store the password itself), and anything you add to your profile, such as a bio. Your email address is used to sign in, verify your account, and reset your password — we do not send marketing email.
Discord sign-in
If you sign in with Discord or connect a Discord account, Discord sends us your Discord user ID, username, and avatar. We store the ID and username to link your accounts, and your avatar is displayed directly from Discord’s servers. We never see your Discord password, and we do not receive your Discord messages, friends, or server list.
Content you create
Decks, deck descriptions, favorites, and profile details you publish are stored and — depending on the visibility you choose — displayed publicly with your username.
Technical and security data
Like nearly every website, our hosting provider keeps standard server logs, which include IP addresses and browser information, used for security and troubleshooting. On our sign-up and password-reset forms we use Cloudflare Turnstile to block bots; verifying a Turnstile response sends your IP address to Cloudflare. We do not use it anywhere else.
What we do not do
- We do not run session recording, heatmaps, or any tracker beyond Google Analytics and Google AdSense, both listed below and both switchable off in our cookie settings.
- We do not sell your personal information, and we have never accepted money for it. Because we serve Google AdSense, personalized advertising may involve what California law calls “sharing” for cross-context behavioral advertising. You can stop it: turn Advertising off in our cookie settings, or use the Do Not Sell or Share page. Ads still appear; they stop being personalized.
- We do not send marketing email.
Advertising and analytics went live on August 9, 2026. Both are listed in the Cookie Policy with every cookie they set, and both have a real off switch in the cookie settings panel.
Cookies and similar storage
We set cookies the site needs to function — signing you in, remembering your light/dark preference, and remembering your cookie choices — plus the analytics and advertising cookies Google sets while those switches are on. The complete list, with durations and purposes, is in the Cookie Policy, where you can also open the cookie settings panel.
Services we rely on
These providers process limited data so the site can operate:
| Provider | What it does | What it sees |
|---|---|---|
| Hostinger | Web hosting | Everything the site stores; standard server logs (IP, browser) |
| Cloudflare | Domain, network/content delivery, and Turnstile bot protection | Site traffic passing through its network; your IP when Turnstile verifies you |
| Discord | Optional sign-in, the community widget, avatar images | Your IP when your browser loads the widget or a Discord-hosted avatar; your Discord profile basics if you connect it |
| Google Fonts | Serves the site’s typefaces | Your IP and browser information when fonts load |
The live Steam player count in our header is fetched by our own server — your browser never contacts Steam.
How long we keep it
Account information is kept while your account exists. If you delete your account or ask us to, we delete your account data; public content you created may be removed or disassociated from your name. Server logs rotate on our host’s standard schedule.
Your rights and choices
- You can view and edit your profile information anytime from your account settings.
- You can ask us to access, correct, or delete your personal information by emailing [email protected]. We respond to every request.
- We honor the Global Privacy Control signal. Because we do not sell or share personal information, there is currently nothing to opt out of — the signal is honored by default.
Children
Pals Post accounts are for people 13 and older. We do not knowingly collect personal information from children under 13, and we delete any such account on discovery. If you believe a child under 13 has an account, email us.
California residents
We do not sell personal information. Personalized advertising through Google AdSense may constitute “sharing” under California law; the Advertising switch in our cookie settings opts you out of it. Details are on our Do Not Sell or Share My Personal Information page. The categories of personal information we collect are described above; we collect them directly from you and use them only for the purposes described.
Changes
If this policy changes in a way that matters — new data collection, new providers, advertising — we will update this page and change the date at the top before the change takes effect.
Contact
Privacy questions and requests: [email protected]