Privacy

Operator: ELECTRICODE S.R.L. · Tax ID 49893781 · J2024001286223
Address: Fundac Sf. Teodor no. 1, Iași, 700117, Romania
Contact: contact form

1. Account and community

When you first enter the game, we create an account with a random username stored in the database. Email is optional and becomes active after confirmation through a link sent to the address provided. Confirmation and reset links expire after 60 minutes and can only be used once. Passwords are not sent by email.

We use your username, email, cryptographically protected password, profile description, registration date and club memberships to provide your account and the features you request. The legal basis is performance of the requested service, Article 6(1)(b) GDPR. Your name, description and registration date are public. Your email and password are not published.

For Single Player statistics of signed-in accounts, we store the level, best time, category with or without a Joker, performance score and result date. The username and time appear in the level's best-times list. Results contribute to aggregate comparisons between players. Temporary game records are periodically cleared after 24 hours; personal bests are retained until account deletion and included in data exports. Visitors who are not signed in can see comparisons without their time being saved in the rankings.

2. Contact messages

The form sends your name, email, subject and message to the operator's contact address. These details are used to respond and resolve your request, based on the legitimate interest in communicating and providing support (Article 6(1)(f)) or contractual steps initiated by you (point (b)), as applicable. Checking the notice does not subscribe you to marketing. Messages are not stored in the site's database.

3. Security and technical data

IP addresses are used temporarily to limit requests: 10-minute windows for accounts and up to one hour for contact. Form tokens expire after 30 minutes. Sign-in sessions expire after 7 days, while the initial automatic-account session may remain active for up to 365 days. These measures protect the service and users based on legitimate interest. Infrastructure may process IP addresses and browser information to deliver and secure the site.

4. Providers and transfers

The site is hosted on Hetzner infrastructure in Germany and uses Cloudflare for DNS, proxying and security. Correspondence is sent through SMTP to the Google contact mailbox. Providers may process data as needed to deliver their services. Some services may involve processing outside the European Economic Area; relevant transfer mechanisms apply, such as adequacy decisions or standard contractual clauses. You can request further information through the contact page.

5. Data retention

Account data is retained until the account is deleted. Deletion removes the profile, sessions, memberships and founded clubs from the active database. Correspondence is retained as needed to resolve requests and defend rights, and retention needs are reviewed when the discussion closes. Temporary anti-spam data is removed on expiry or restart. Technical logs are limited in size and do not intentionally contain message contents or passwords.

6. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. From your account, you can edit your description, change your password, export your data and delete your account. To correct other details or make other requests, use the contact form. We may request information strictly necessary to verify your identity. We normally respond within one month, subject to extensions permitted by law.

You can lodge a complaint with ANSPDCP or contact the competent court. We do not use automated decisions with legal effects.

Google Analytics 4

With your consent, Google Analytics uses cookies to measure visits and site usage. You can refuse or withdraw consent at any time in Cookie settings. The _ga and _ga_* cookies and your local choice expire within 180 days. We do not send names, emails or form contents. Legal basis: consent, GDPR Article 6(1)(a). Google may process data outside the EEA under its transfer safeguards.

Google Analytics

7. Cookies and updates

See the cookie policy for the sign-in session and notice preference. Advertising and analytics in the mobile app are described below. We update this policy when the service or processing changes.

8. Mobile app, advertising and analytics

The app uses account details, in-game friends, messages, your selected avatar, profile and club content, progress and results to provide game and community features. We do not import your phone address book. Support requests may include your name, email and information you send us.

For purchases and rewards, we retain the account identifier, product, transaction and history of Joker grants. The store processes payment; we do not receive card details. Installation, device and notification identifiers also support account recovery, security and notifications you enable. Country and approximate location inferred from IP may be used to prevent abuse; we do not request precise GPS location. Optional Google or Apple sign-in links the provider identifier to your existing account. We retain this link for sign-in and recovery until account deletion. The recovery key is protected by the operating system; on Android, Google Block Store may back it up encrypted for restoration, depending on device settings. Hashed device identifiers help detect a previous installation without granting account access.

We use Google AdMob for advertising, including optional rewarded ads. The SDK may process device identifiers, approximate location, app and ad interactions, and crash, performance and diagnostic data for advertising, measurement and fraud prevention. Your account identifier is sent for reward verification. Device identifiers may be used for tracking across apps and websites, depending on consent and platform permissions. On iOS, tracking covered by Apple rules requires App Tracking Transparency permission.

Firebase Analytics is active from app startup, with no off switch in settings. It may include account and installation identifiers, interactions, level progress, and ad and purchase events. Ad personalization in Firebase Analytics remains disabled. Firebase Cloud Messaging uses the device token for notifications you enable. On Android and iOS, when campaign measurement is enabled, Tenjin measures installs and app opens according to consent choices. Data may include IP address, device information, installation source and the advertising identifier permitted by the operating system. Events may be shared with configured advertising partners for attribution. Preferences can be changed in ad privacy options and iOS tracking settings.

You can change notifications in the app and permissions in device settings. Ad privacy options are available when required by the Google consent system. For access, deletion or other data requests: [email protected].

Google Privacy Policy

Reference: General Data Protection Regulation.