Appearance
Legal requests and compliance
Platform identity
RustyThrones' own legal identity is the Legal details of the RustyThrones community (tenant #1). Those details are published on the panel's legal pages (panel.rustythrones.com/legal), on rustythrones.com and in these docs, and they fill the "technical provider" block on every community site. Keep them complete: name, address, phone, email, VAT status, registration (SIREN) once obtained, consumer mediator.
| Page (panel) | Content |
|---|---|
/legal | Legal notice: operator, publication director, host OVH SAS |
/legal/terms | Platform terms: service, plans, cancellation, withdrawal, data processing agreement (GDPR art. 28), content moderation (DSA) |
/legal/privacy, /legal/cookies | Privacy for panel accounts; strictly necessary cookies |
/legal/cancel, /legal/withdraw, /legal/report | Cancellation, withdrawal and notice forms about RustyThrones itself |
Platform inbox
Communities → Legal requests (/platform/legal-inbox, capability platform.read; changing a status needs platform.ops) shows every request from every community site plus those about RustyThrones itself ("about RustyThrones"). Communities handle their own; staff step in for platform-level notices (DSA reports about a community's content) and for RustyThrones' own customers.
Consents at checkout
Every checkout records proof of what the buyer ticked (terms version, immediate start, receipt email, time, IP) for 6 years: gem packs and passes on community stores, and community plans in the panel. The Stripe receipt repeats the statement. Bumping a terms version (in the backend document versions) makes open checkout windows ask the buyer to reload.
Retention job
Privacy: apply retention periods (daily 04:40 UTC) forgets player IPs 12 months after their last connection, deletes raw gameplay events older than 24 months and drops request IPs after 12 months.