Palarena
See Palarena on my club

SECURITY AND DATA Your data and your payments, protected at every step.

A club trusts Palarena with its schedule, its takings and its list of players. A player creates a profile and pays their share there. Here is how we protect all of it, from the payment to the backups.

Updated on

PAYMENTS

The card goes to Stripe, the money to the club.

When players pay their share, they enter their card directly with Stripe. The payment is created on the club’s Stripe account, and Palarena only receives the confirmation.

  1. The player pays their shareThe card is entered in Stripe’s secure field, with the bank’s approval when it asks for it.
  2. Stripe processes the paymentStripe is certified PCI DSS Level 1, the highest security level for card payments.
  3. The money reaches the clubThe payment is created directly on the club’s Stripe account, without going through a Palarena account.
  4. Palarena receives the confirmationNever the card number. Every message from Stripe is authenticated before it is acted on.

Simplified diagram

YOU RUN A CLUB

Your list of players stays your club’s.

For every action, Palarena checks who is asking, for which club and with which role. No other club can see your list of players, what they book with you or your takings.

Your list of players serves your club alone. You export it whenever you like, and if you ever change software, the Palarena team hands over your club’s data and helps you transfer it, free of charge.

  • Each member of your team has the access of their role. Your front desk sees the schedule, not your finances or the export of your players.
  • Invitations, role changes and exports are written to a log that cannot be altered.
  • Passwords are never stored in readable form, and passwords already exposed in a leak on another site are refused.
  • Repeated sign-in attempts are blocked, and you are told by email when your password changes.
  • You can sign out every device connected to your account in one go.
  • Your players and your finances export to a spreadsheet, and all of your data to a complete archive.

These commitments are written into the Palarena contract, with its data protection appendix. Read the club contract (in French)

YOU PLAY AT A PALARENA CLUB

Your card, your profile and your messages stay in your hands.

You sign in with a code sent by email or with your Google account, with no password to remember. When you pay your share, your card is entered with Stripe, never with Palarena.

  • You only appear in Partners if you turn it on. Other players see your town there, never your address or contact details.
  • You can block or report a player at any time.
  • Your conversations stay between you. The Palarena team only accesses them in specific cases, for example when a message is reported to it.
  • You can sign out of all your devices in one go.
  • Your data is never sold, and you can ask for a copy of it or for its deletion at any time.

BEHIND THE SCENES

What we do every day to keep Palarena safe.

  • Hosted in France

    The apps and their databases are hosted in France by OVHcloud, a French hosting company. Photos and backups are stored in Europe.

  • Shielded from attacks

    All traffic goes through Cloudflare first, which protects our servers against attacks. Our servers refuse any connection that does not come from Cloudflare.

  • Encrypted in transit

    Exchanges between the apps and our servers are always encrypted, and so is the traffic between our own servers.

  • Restricted access

    The Palarena team signs in to its back office with mandatory two-factor authentication, and every sensitive action there is recorded with its reason.

  • Every release checked

    Before it goes live, every new release goes through automated tests and a scan for known vulnerabilities.

  • Continuous monitoring

    Automatic alerts warn the team as soon as an indicator moves out of its normal range, and an independent probe checks that backups have run.

Your data, backed up without interruption.

Each square stands for one night’s backup.

  1. ContinuouslyEvery change is archived as it happens, a few minutes at most after it was made.
  2. Every nightA new copy is made, encrypted before it even leaves our servers.
  3. Four weeksCopies from the last four weeks are kept in the European Union, and the most recent ones are protected against any deletion.
  4. Restores testedWe regularly check that a backup restores properly, under real conditions.

OUR PROVIDERS

Certified specialists where it matters most.

We entrust payments, traffic protection and email delivery to providers audited by independent bodies. These certifications are theirs, for the services they provide to us.

The full list of our providers (in French)

A procedure ready, a team you can reach.

We have a written procedure for responding to an incident, with named people in charge. If your club’s data were affected, we would tell you without delay, keep you informed as we learn more, and make the notifications the GDPR requires.

Found a security flaw? Write to us. We answer every report, and we thank everyone who helps us protect our users.

contact@palarena.com

Our commitments, in writing

Frequently asked questions

Where is Palarena’s data hosted?

The apps and their databases are hosted in France by OVHcloud. Photos and encrypted backups are stored in Europe. Specialist providers, such as Stripe for payments, have their own processing locations, listed with our providers.

Is Palarena French software?

Yes. Palarena is designed and built in France, its apps and databases are hosted there, and our team answers you in French or English.

Does Palarena see players’ card numbers?

No. The card is entered directly with Stripe, certified PCI DSS Level 1, and its number never passes through Palarena’s servers. Palarena only receives the payment confirmation.

Can another club see my list of players?

No. No other club can see your list of players, what they book with you or your takings. Permissions are checked on every action, and your list serves your club alone.

Does Palarena sell players’ data?

No, never. Players can also ask at any time for a copy of their data or for their account to be deleted, by writing to contact@palarena.com.

What happens to my club’s data if I leave Palarena?

You get it back. You export your players and your finances whenever you like, and the Palarena team hands over all of your club’s data, free of charge. It is then erased within the periods set in the contract.

How do I report a security issue?

Write to contact@palarena.com, in French or English. We answer every report.

A question about the security of your data?

Ask it during the demo, or write to us. We answer you ourselves, precisely.

Request a democontact@palarena.com