Privacy
Last updated: 31 October 2026
What this covers
This policy applies to tarylem.com, Tarylem accounts, the portal, Atmos, Forms, Feedback, and the status page. Dash World and its Demonlist have their own privacy policy.
Who is responsible
The person named in the legal notice is responsible for processing your data. Email: legal@tarylem.com
What we process
- Account data: your name and email address. Your password is stored as a hash at auth.tarylem.com, and Atmos and Forms never see it.
- For each signed-in session on your Tarylem account: the browser and system, such as Chrome on Windows, and when you signed in, so you can review and end sessions in the portal.
- If you link a Roblox account in the portal: your Roblox user ID, username, display name, and avatar link, until you unlink it or delete your Tarylem account. Your avatar image loads from Roblox on your profile page, so Roblox sees that request.
- If you use Atmos: your files and folders, with their names, sizes, and dates.
- If you make a form: the form and its responses, until you delete them or your Tarylem account.
- If you answer a form: your answers. The person who made the form can read them and is responsible for how they use them. If the form is set to show who answered, they also see your name and email. If it isn't, your answers aren't linked to your account.
- If you use Feedback: your posts, comments, and votes, your account name, and whether you want emails about your posts. Feedback doesn't hold your email address, so our account service sends those emails. If you've linked Roblox, also your Roblox user ID, username, display name, and avatar link. Your name, and any Roblox avatar, are shown publicly next to what you post. Your email is not. If you delete your account, your votes and details are removed, and your posts and comments stay without your name.
- If you report a form, post, or comment: your report, so we can review it. It isn't linked to your account.
- If we suspend your account: when and why, until it is unsuspended or deleted.
- If an admin acts on your account or form: what was done and when, linked to an internal ID, kept as a record of our decisions.
- Technical data when you open a site, such as your IP address and the time, in the server logs. Sign-in attempts are also counted against a hash of your IP address for a short time, to stop password guessing.
Why, and on what legal basis
We process account data and your content to provide the services to you (Art. 6(1)(b) GDPR). We process technical data to run the services securely (Art. 6(1)(f) GDPR).
Cookies and local storage
We only use what the services need to work. Strictly necessary cookies keep you signed in to your Tarylem account, Atmos, and Forms. They last up to 30 days and are removed when you sign out. Short-lived cookies protect sign-in and Roblox linking, and last up to 10 minutes. tarylem.com uses your account cookie only to show whether you are signed in. Your browser also remembers your grid or list choice in Atmos, and which form you were answering while you sign in. There are no analytics or advertising cookies.
Who receives your data
- netcup hosts our servers and stores the data on our behalf.
- Strato delivers the emails we send you, such as confirmation and password links.
- Roblox receives your request when you choose to link a Roblox account.
- Everyone can read what you post on Feedback, without signing in.
- A file in Atmos only becomes available to others if you create a link for it. Anyone with that link can download the file without signing in until the link expires or you turn it off.
How long we keep it
Account data and your content stay stored until you delete them or delete your Tarylem account. Deleted items in Atmos stay in the trash for 30 days, unless you delete them sooner. Data removed from the running system can stay in our backups until those are replaced.
Your rights
You have the right to access, correct, delete, and move your data, to restrict its processing, and to object to it. You can also complain to a data protection authority.