Privacy
Policy
Contents
- Data Controller & Contact
- Scope — Who This Applies To
- Types of Data We Collect
- How We Collect Data
- Purposes & Legal Bases
- Cookies & Tracking
- Third-Party Services & Data Sharing
- International Transfers
- Data Retention
- Your Rights (EU/UK/EEA)
- Security
- Children
- Automated Decisions & Profiling
- Changes to This Policy
- Contact & Complaints
- Additional Notes
This Privacy Policy explains how Peaxel collects, uses, discloses, and protects personal data when you visit or interact with peaxel.me and related services. It describes the choices you have about your personal data and how you can contact us.
01 — Data Controller & Contact
Peaxel
2 rue des Cortalets, 66400 Céret, Occitanie, France
Website: peaxel.me
Email: [email protected]
If you are located in the EU/EEA/UK, our representative for data requests is the same contact above.
02 — Scope — Who This Applies To
This Policy applies to visitors, registered users, creators/talents, and other persons who use the Site or Services. Where specific services (marketplace, wallet integration, tournaments) require additional information, that will be explained at the point of collection.
03 — Types of Data We Collect
We collect the following categories of personal data depending on your interactions:
Account & Identity Data
- Name, username, email address, password (hashed)
- Profile picture, date of birth (if required)
Contact & Transactional Data
- Payment details (tokenized or via third-party processor — we do not store raw card data)
- Purchase history, invoices, billing address
Blockchain / Wallet Data
- Public wallet address, on-chain transaction hashes
- Public token/NFT identifiers and associated metadata you elect to associate with your account
Usage & Device Data
- Cookies, device identifiers, IP address, browser type
- Pages visited, referring URL, timestamps, feature usage and performance metrics
Communications
- Messages you send to support, feedback, and contest/tournament submissions
Optional KYC / Identity Verification
For services that legally require identity verification (e.g., prize disbursements above thresholds), we may collect identity documents and verification data. We will notify you before collection.
04 — How We Collect Data
- Directly from you — forms, account creation, messages
- Automatically — cookies, server logs, analytics
- From third parties — payment processors, analytics providers, identity verification services
05 — Purposes & Legal Bases for Processing
To provide the Service
Account management, gameplay, marketplace operations, wallet integrations.
Legal basis: Performance of a contract / legitimate interest.
To process payments
Payment processors are used; we only receive transaction confirmations and necessary billing data.
Legal basis: Performance of a contract / legal obligation.
To improve and analyze the Service
Analytics, error reporting, product development.
Legal basis: Legitimate interest; consent where required.
To communicate with you
Account notices, transactional emails, support.
Legal basis: Performance of a contract / legitimate interest.
To comply with legal obligations
Tax, fraud prevention, law enforcement requests.
Legal basis: Legal obligation.
For marketing
Promotional emails, newsletters, or personalized offers. You may opt out at any time.
Legal basis: Consent / legitimate interest depending on jurisdiction.
06 — Cookies & Tracking
We use cookies and similar technologies to operate the Site, remember your preferences, and analyze usage. On first visit you will be presented with a cookie consent control to accept, reject, or manage categories (required, analytics, marketing).
You can withdraw consent at any time via cookie settings or by contacting [email protected].
07 — Third-Party Services & Data Sharing
We may share data with:
- Service providers — hosting, payment processors, analytics, email delivery, KYC/AML providers
- Partners — for co-promotions or tournament administration (only with your consent where required)
- Legal & safety — to comply with laws, respond to legal requests, or protect rights, property, or safety
- Business transfers — in connection with a merger, acquisition, or sale of assets
We require third parties to process data in compliance with applicable law. Where third parties act as independent controllers, they will have their own privacy policies.
08 — International Transfers
Your data may be processed in countries outside your jurisdiction, including in the United States (Google Cloud — Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043). When we transfer data internationally, we implement appropriate safeguards (standard contractual clauses or other lawful mechanisms) to protect your personal data.
09 — Data Retention
We retain personal data for as long as necessary to provide the Services and for legitimate business purposes. Typical retention periods:
- Account data: retained while account is active + up to 5 years after deactivation for legal/compliance needs
- Transactional records: retained for tax and accounting as required by law (commonly 5–7 years depending on jurisdiction)
- Analytics data: aggregated or pseudonymized when possible; retention periods applied per service provider
10 — Your Rights (EU/UK/EEA)
Where applicable you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion ("right to be forgotten") subject to legal and contractual limits
- Request restriction of processing
- Object to processing (including profiling/marketing)
- Request portability of your data
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact [email protected]. If you are unhappy with our response, you may lodge a complaint with your local data protection authority — for France, the CNIL.
11 — Security
We implement reasonable administrative, technical, and organizational measures designed to protect data, including encryption in transit, access controls, and regular security reviews. No internet service is 100% secure. If a breach affecting your rights occurs, we will notify you and regulators as required by law.
12 — Children
The Site is not intended for children under 18 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If we learn we have done so, we will delete it immediately.
13 — Automated Decisions & Profiling
We may use automated tools to analyze usage for product improvements or to detect fraud. If any automated decision would significantly affect you, we will provide meaningful information about the logic involved and your rights to contest the decision.
14 — Changes to This Policy
We may update this Policy from time to time. Material changes will be posted on the Site with an updated effective date. You will be deemed to have accepted changes by continuing to use the Services after the effective date.
15 — Contact & Complaints
For privacy questions, data requests, or complaints: [email protected]
If you are in the EU/EEA/UK and remain unsatisfied after contacting us, you may contact your supervisory authority — e.g., the CNIL for France.
16 — Additional Notes for Specific Features
Wallet Integrations & Blockchain
Public wallet addresses and on-chain activity are by nature public data. When you connect a wallet, we collect only what is necessary and we never store private keys. Users should be aware that blockchain records are immutable and public.
Marketplace & Trading
Trading data (transactions, trade history) are retained per contractual and financial reporting obligations.
Contests & Prizes
Winners may be asked to provide identity documentation to claim prizes. Such data is used only for verification and legal compliance.