← Back to the game
ENCZ

Privacy Policy

Last updated: 21 July 2026

1. Data controller

The controller of your personal data is Jakub Fišer (Smíchov Labs), IČO: 19616287, Fráni Šrámka 2622/18, 150 00 Praha 5, e-mail: sekone9@gmail.com. This policy is governed by the GDPR and Czech law.

2. What we process

  • IP address and session token — required to run the game and its cloud save sync (Upstash Redis). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Google account identifier and basic profile — only if you choose to sign in with Google, so that premium access follows your account across devices. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Payment data — handled exclusively by Stripe, Inc. as an independent controller. When you pay you are subject to their privacy policy. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Push notification subscription — only if you enable notifications; we store the browser push endpoint in order to deliver them. Legal basis: consent (Art. 6(1)(a) GDPR).
  • Advertising cookies (Google AdSense) — only with your consent. Until consent is given, Google Consent Mode keeps ad storage and personalisation denied. Legal basis: consent (Art. 6(1)(a) GDPR).

Your game progress itself is stored in your browser (local storage). It only leaves your device if you turn cloud sync on in Settings; turning it off deletes the cloud copy.

3. Recipients

  • Google Cloud (Google Cloud EMEA Limited, Ireland) — application hosting; the server runs in the europe-west6 region (Zurich, Switzerland)
  • Upstash, Inc. — cloud storage of game state (EU or US region; transfers under standard contractual clauses)
  • Stripe, Inc. — payment processing
  • Google LLC — AdSense advertising (only with consent) and Google Sign-In (only if you use it)

4. Retention

The session token and the game state held in Redis are kept for the lifetime of the session (at most 400 days from the last activity). Premium status (an HMAC-signed cookie) is valid for 365 days.

5. Your rights

You have the right to access your data and to its rectification, erasure, portability and restriction of processing. Consent to advertising cookies can be withdrawn at any time by writing to us at the address below, or through the consent banner if one is shown to you — in the EEA, the UK and Switzerland consent is collected by Google's certified consent tool. Complaints can be filed with the Czech Data Protection Authority (ÚOOÚ).

Send requests to: sekone9@gmail.com