Private preview notice

Privacy, in plain language.

This notice describes how Pal-Map handles information while the hosted service is invite only. It will evolve as the service and its support processes mature.

Last updated August 21, 2026

Information we handle

Pal-Map handles the information needed to operate the service: administrator authentication and account state; server names, access settings, and collector credential metadata; the latest allowlisted live-map snapshot sent by a collector; and limited security, reliability, and diagnostic information.

A live snapshot can include player display names, approximate world positions, levels, guild and base context, server settings, and world conditions that are shown in the map experience.

The collector boundary

The collector does not send the Palworld REST administrator password, server save files, raw platform or account identifiers, or player IP addresses to Pal-Map. Collector secrets are shown once to an administrator and stored by the service only as keyed digests used for authentication.

Pal-Map is designed around current state rather than location history. Hosted live snapshots expire after a short period when updates stop.

How we use information

We use information to authenticate administrators and private viewers, receive collector reports, render the live map, maintain server configuration, prevent abuse, diagnose failures, and improve the reliability and usability of the preview.

Server administrators choose whether a map is public, unlisted, or password protected. They are responsible for choosing an appropriate setting and sharing map links with the intended people.

Pal-Map does not sell personal information or use it for targeted advertising. Information may be processed by infrastructure and authentication providers that help operate the service, or disclosed when required to protect the service, its users, or comply with law.

Storage and sessions

Server and administrator configuration is kept while an account uses the service or as needed for security and operations. Live snapshots use short expiry windows. A completed administrator deletion removes active account contact data and owned server resources; a minimal non-contact audit fact may remain, and earlier database backups can retain a pre-deletion copy until their limited recovery window expires.

Pal-Map uses essential session cookies for administrator sign-in and password-protected viewers. The service does not use advertising cookies.

Your choices and questions

Administrators can change map visibility, rotate or revoke collector credentials, disable servers, and request server deletion through the Admin experience. The primary owner can permanently remove another administrator, including that account’s owned server resources and Auth0 user. Viewers can stop using a shared map and sign out of password-protected access.

During the private preview, use the support channel provided with your invitation for privacy questions or requests. Dedicated public contact details will be added before broader availability.

Changes to this notice