Personal data, cookies and operator
Version 097 · 26 October 2026
Operator and data controller
Jiří Marek, nám. Soukenné 26/7, Liberec III-Jeřáb, 460 07 Liberec, Czech Republic, business ID 06570224. A sole trader registered in the Trade Register.Contact for the game, complaints and personal data: jiri.marek1984@gmail.com.
What data we use and why
You can use the game without registering. An account is optional and enables online saving and transfer of progress. Detailed analytics is a separate, optional choice.
| Purpose and data | Legal basis | Retention |
|---|---|---|
| Account: email, player name, password hash or Google identifier, email verification, acceptance of terms, creation and last sign-in. Online games, settings, rewards and your own game statistics. | Performance of the account and requested synchronization contract, Article 6(1)(b) GDPR. | Until account deletion. Unverified accounts are deleted after 30 days. Verified accounts are not automatically deleted merely for inactivity. |
| Security: login sessions, single-use tokens, attempt limits using a time-limited IP hash, and an audit of administrator actions. | Legitimate interest in protecting accounts, preventing abuse and documenting actions, Article 6(1)(f). | Sessions: at most 30 days; verification token: 24 hours; password reset and deletion confirmation: 1 hour; Google sign-in: 10 minutes. Attempt limits usually 15 minutes to 1 hour; audit: 90 days. Related application records are removed when the account is deleted. |
| Optional analytics: game sections, visible and active time, referral source, campaign, browser, device and approximate area. Consent record: version and time associated with the visitor session. | Consent, Article 6(1)(a), and consent to access data on the device under electronic communications rules. | 30 days from session creation, including the consent record. The session is not linked to an account; the full IP address is not stored in the analytics database. |
| Enquiries, rights requests, complaints: contact details, content and responses. | Handling a contractual request; legal obligation for statutory requests and complaints (Article 6(1)(c)); legitimate interest in protecting rights in a specific dispute. | Ordinary enquiries: 12 months after resolution. Records of handling rights requests and complaints: 3 years after resolution; in a specific dispute, until its final resolution and the expiry of related statutory periods. |
An online account cannot be created without an email and login details; you can play locally without providing them. Withholding analytics consent does not affect your account, play, rewards or your own game statistics. We do not make decisions with legal or similarly significant effects based solely on automated processing. We do not use data for advertising profiling, and creating an account does not subscribe you to a newsletter.
Your rights and account deletion
Your online account profile lets you download database data and request account deletion. Deletion completes only through a single-use link sent by email and a separate confirmation. The link alone does not delete the account. Exports contain no passwords or secret tokens; communications or separate server logs can be requested from the controller.
At jiri.marek1984@gmail.com you can request access, rectification, erasure, restriction of processing or portability where the conditions for the relevant right are met. You may object to processing based on legitimate interest. You may withdraw analytics consent at any time through “Analytics preference” in the footer or here; this does not affect the lawfulness of earlier processing.
We handle requests without undue delay, usually within one month. Any lawful extension and its reason will be notified within that period. Ideally, write from your account email; do not send your password or a copy of an identity document. We request further proportionate verification only where there are reasonable doubts. You may lodge a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Praha 7.
Signing out does not delete your account. After deletion, your exports and any local copies on other devices remain under your control; remove them by clearing site data. For historical analytics not linked to an account, we may be unable to determine which record belongs to you; we do not collect additional identifiers solely for that purpose.
Who can access the data
The operator manages account data in a private administration area. Hosting and service emails are provided by Webglobe, s.r.o., business ID 26159708, as a technical service provider; its access is limited to what is needed to provide those services. We use Google's Gmail for communications at the stated contact address. Requests can also be posted to the operator's registered address.
Google sign-in is used only if you choose it. The game receives an identifier, email, verification status and name. It does not request access to mail or contacts. Google processes data for its own service under its policies. Google Ireland Limited and group companies may also process data outside the EEA, including in the USA. Google lists adequacy decisions, including the EU–US Data Privacy Framework for participating recipients, and standard contractual clauses as transfer mechanisms; details and available safeguards are in Google's legal frameworks. This is not a promise that data will never leave the EU.
We may disclose data to public authorities where required by law, or to professional advisers handling a specific legal claim, to the extent necessary. We do not sell data.
Two separate types of traffic measurement
Basic counting is automatic: when the game loads normally, the server increments a single daily total. This counter stores no IP address, identifier, account, device, referral source or time on page. Totals are retained for 400 days. This is not a count of unique people: it includes page refreshes and bots. This aggregate contains no visitors' personal data.
Detailed analytics is off until you enable it. After consent, it processes the data described above. You may give consent from age 15; younger players may use the game without detailed analytics. Declining leaves play unchanged. We use no preselected checkbox. The session remains in page memory and renews on loading or after 30 minutes. Analytics requests do not send sign-in cookies.
Withdrawal stops further measurement, including in other open tabs of the same browser. If the server is available, the currently known measured session is also deleted. Older unlinked sessions are automatically deleted under the 30-day retention period. Preferences in another browser or device must be changed separately.
Security, logs and backups
We store passwords as secure hashes, sessions have time limits, and administration requires authorization. Separate hosting security logs may contain the IP address, time and requested URL and are used for security and troubleshooting on the basis of legitimate interest. Service operating rules limit these logs and recovery backups to at most 30 days; a specific record needed for a documented incident may be kept separately while the incident and related statutory claims are handled. Backups serve only for recovery, not ordinary work with a deleted account. Deletions and retention periods are reapplied after restoration.
Application cleanup runs during operation at intervals of no more than one hour and through daily scheduled maintenance. Once deletion is confirmed, an online account is immediately removed from the live database. Only the deleted account's random ID and deletion time remain for 30 days, without a name or email, based on the legitimate interest in preventing unintended restoration from backup. Any isolated recovery copy expires no later than the stated backup retention period.
Play without real money
The game is free and played against computer opponents. It accepts no monetary bets and pays no cash or material prizes. Points, XP, chips and rewards cannot be bought for money, withdrawn, monetized or transferred outside the game. Success in the game is no promise of success when playing for real money.