Privacy policy
1. Who processes the data
The controller of personal data is Marek Bodynek ("we"). Contact about data: europbros@gmail.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| E-mail and password (the password is stored only in hashed form), or a Google / Discord account identifier | creating the account and signing in | performance of a contract, Art. 6(1)(b) |
| Nickname, level, statistics, ranking, match history, loadout, in-game purchases, in-game currencies | running the game, progress, ranking, matchmaking | performance of a contract, Art. 6(1)(b) |
| Purchases with real money (Gold packs, Premium): order number, plan, subscription state | granting what was bought, handling complaints and refunds | performance of a contract, Art. 6(1)(b); keeping billing records, Art. 6(1)(c) |
| Profile picture (if you add one) | showing it to other players | consent, Art. 6(1)(a) (you can remove it at any time) |
| Friends list, invitations, online status | social features: friends and lobby | performance of a contract, Art. 6(1)(b) |
| Game settings (graphics, sound, controls, language) | restoring them on every device | performance of a contract, Art. 6(1)(b) |
| In-match chat messages | passing them to players in the match; not stored permanently | performance of a contract, Art. 6(1)(b) |
| Player reports and account bans | moderation, security, fair play | legitimate interest, Art. 6(1)(f) |
| IP address and technical connection data (also the app version when the Windows and Android apps check for updates) | connecting to the game server, app updates, protection against abuse; servers may keep them briefly in logs | legitimate interest, Art. 6(1)(f) |
| Game error reports: the error, the place in the code, the game version, the kind of app and browser (no account, nickname or typed data; the IP address is used only to limit the number of reports and is not stored) | finding and fixing bugs | legitimate interest, Art. 6(1)(f) |
| Your cookie choice | respecting it and showing that you gave consent | legal obligation, Art. 6(1)(c), with Art. 7(1) |
We do not sell data and do not profile players. The Meta pixel, which measures how well the game's ads work, runs only with your consent (it is currently off); without it Meta gets no data from us.
3. Cookies and browser storage
The Game stores in your browser (localStorage and sessionStorage) your settings, the last chosen mode and map, progress without an account and the sign-in session. This is needed for the game to work. The Spotify player in the menu and the Meta pixel are switched on only with your consent; change your choice with the cookie icon in the bottom right corner of the menu. Details: Cookie policy (in Polish).
4. Who we share data with
- Supabase (database, sign-in, picture storage), servers in Frankfurt (EU);
- Oracle Cloud (match server), Frankfurt (EU); as a backup Fly.io, Frankfurt (EU);
- Cloudflare (serving the website and game files), which may keep IP addresses in technical logs;
- Paddle (Paddle.com Market Limited, the seller of Gold and Premium, payment processing), if you buy something: it gets your e-mail, payment details and country, and we get from it only the order information and subscription state; under its privacy policy;
- Resend (e-mails confirming the account and resetting the password), servers in the EU;
- Google and Discord, if you sign in with their account, under their own privacy policies;
- Spotify, only if you switch on the player in the menu: it gets your IP address and stores its own cookies;
- Meta (Meta pixel), only with your consent, once we switch it on.
Some of these companies are based outside the EU. Where data leaves the European Economic Area, this happens under the European Commission's standard contractual clauses or other mechanisms provided for in the GDPR.
5. How long
We keep account data for as long as you have the account. Deleting the account in the Game (Profile, then Delete account) immediately removes the account, profile, progress, purchases, friends, match history and picture. Database backups may hold the data for their rotation period, no longer than 30 days. Reports and ban records are kept as long as needed for moderation, no longer than 12 months. Error reports and server logs are deleted after 30 days.
6. Your rights
You have the right to access your data, to rectify, erase and restrict it, to data portability and to object. You can withdraw consent for the profile picture, the Spotify player and the Meta pixel at any time, without affecting what happened before. You delete the account and all its data yourself in the Game. For anything else write to europbros@gmail.com. You also have the right to complain to the Polish data protection authority (President of the Personal Data Protection Office, uodo.gov.pl).
7. The Windows and Android apps
The apps load the same game and process the same data. When they start, they check our server (Oracle Cloud, Frankfurt) for a new version; the server sees the IP address and the app version. The apps store game data in the app data on your device.
8. Age
You must be at least 16 to create an account. Younger players need a parent's or guardian's consent.
9. Changes
We will announce significant changes to this policy in the Game. The current version is always at this address.