Privacy Policy

Effective date: November 15, 2025

Last updated: November 15, 2025

1. Introduction

Tavrn ("we", "us", or "our") operates a social media platform at tavrn.gg (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Username, email address, password (encrypted), and profile information (bio, avatar)
• Content: Posts, comments, direct messages, and other content you create or share
• Payment Information: When you make purchases, payment data is processed by our payment provider (Paddle) and we receive transaction confirmation but not full payment card details
• Communications: Messages you send to us for support or feedback

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, posts viewed, search queries, timestamps
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies: We use essential cookies for authentication and optional cookies for analytics (with your consent)
• Location Data: General location inferred from IP address (not precise geolocation)

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process transactions and send transaction confirmations
• Send notifications about your account and activity
• Respond to your requests and provide customer support
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations and enforce our Terms of Service
• Analyze usage patterns to improve user experience
• Send promotional communications (only with your consent)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), UK, and Switzerland, we process your data based on:

• Contract Performance: Processing necessary to provide the Service you've signed up for
• Legitimate Interests: Improving our Service, fraud prevention, and security
• Consent: Optional features like analytics cookies and marketing communications
• Legal Obligation: Compliance with laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

5.1 Service Providers

• Hosting: Our infrastructure provider to host the Service
• Payment Processing: Paddle for processing payments
• Analytics: Services that help us understand how users interact with the Service (only with your consent)

5.2 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of Tavrn, our users, or others.

5.3 Business Transfers

If Tavrn is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5.4 Public Information

Your profile information, posts, and comments are public by default and visible to other users and search engines. Direct messages are private.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete your personal data within 30 days, except:

• Information required for legal compliance (e.g., transaction records for tax purposes)
• Anonymized data used for analytics
• Information necessary to resolve disputes or enforce agreements

7. Your Rights and Choices

7.1 GDPR Rights (EEA, UK, Switzerland)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Data Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for optional processing
• Lodge a Complaint: File a complaint with your data protection authority

7.2 California Privacy Rights (CCPA/CPRA)

California residents have additional rights including the right to know what personal information is collected, request deletion, and opt-out of "sales" (we don't sell data).

7.3 How to Exercise Your Rights

Email privacy@404nerds.com or use your account settings to:

• Update your profile information
• Manage notification preferences
• Manage cookie preferences
• Download your data
• Delete your account

8. Children's Privacy

Age Requirement: You must be at least 13 years old to use Tavrn (16 in some countries). We do not knowingly collect information from children under the applicable age limit.

If we discover we have collected information from a child under the age limit without parental consent, we will delete that information immediately. If you believe we have collected information from a child, contact us at privacy@404nerds.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally approved transfer mechanisms

10. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted storage of passwords
• Regular security assessments
• Access controls and authentication
• Monitoring for security threats

However, no system is completely secure. We cannot guarantee absolute security of your data.

11. Cookies and Tracking

We use cookies and similar technologies:

• Essential Cookies: Required for authentication and Service functionality (no consent needed)
• Analytics Cookies: Help us understand how users interact with the Service (requires consent)
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences in your browser settings or through our cookie consent banner.

12. Push Notifications

If you enable browser push notifications, we will send you updates about activity on your account. You can disable these at any time through your browser settings or notification preferences page.

13. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites. Please review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting a notice on the Service
• Sending an email to your registered email address
• Updating the "Last updated" date at the top of this policy

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. UK-Specific Information

For UK users, the data controller is Tavrn / AjaxSelectButtonGames. You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

16. Contact Us

For questions about this Privacy Policy or to exercise your rights:

• Email: privacy@404nerds.com
• Support: support@404nerds.com

This Privacy Policy was last updated on November 15, 2025. Please review it regularly.