Privacy

Operator: ELECTRICODE S.R.L. · Tax ID 49893781 · J2024001286223
Address: Fundac Sf. Teodor no. 1, Iași, 700117, Romania
Contact: contact form

1. Account and community

When you first enter the game, we create an account with a random username stored in the database. Email is optional and becomes active after confirmation through a link sent to the address provided. Confirmation and reset links expire after 60 minutes and can only be used once. Passwords are not sent by email.

We use your username, email, cryptographically protected password, profile description, registration date and club memberships to provide your account and the features you request. The legal basis is performance of the requested service, Article 6(1)(b) GDPR. Your name, description and registration date are public. Your email and password are not published.

For Single Player statistics of signed-in accounts, we store the level, best time, category with or without a Joker, performance score and result date. The username and time appear in the level's best-times list. Results contribute to aggregate comparisons between players. Temporary game records are periodically cleared after 24 hours; personal bests are retained until account deletion and included in data exports. Visitors who are not signed in can see comparisons without their time being saved in the rankings.

2. Contact messages

The form sends your name, email, subject and message to the operator's contact address. These details are used to respond and resolve your request, based on the legitimate interest in communicating and providing support (Article 6(1)(f)) or contractual steps initiated by you (point (b)), as applicable. Checking the notice does not subscribe you to marketing. Messages are not stored in the site's database.

3. Security and technical data

IP addresses are used temporarily to limit requests: 10-minute windows for accounts and up to one hour for contact. Form tokens expire after 30 minutes. Sign-in sessions expire after 7 days, while the initial automatic-account session may remain active for up to 365 days. These measures protect the service and users based on legitimate interest. Infrastructure may process IP addresses and browser information to deliver and secure the site.

4. Providers and transfers

The site is hosted on Hetzner infrastructure in Germany and uses Cloudflare for DNS, proxying and security. Correspondence is sent through SMTP to the Google contact mailbox. Providers may process data as needed to deliver their services. Some services may involve processing outside the European Economic Area; relevant transfer mechanisms apply, such as adequacy decisions or standard contractual clauses. You can request further information through the contact page.

5. Data retention

Account data is retained until the account is deleted. Deletion removes the profile, sessions, memberships and founded clubs from the active database. Correspondence is retained as needed to resolve requests and defend rights, and retention needs are reviewed when the discussion closes. Temporary anti-spam data is removed on expiry or restart. Technical logs are limited in size and do not intentionally contain message contents or passwords.

6. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. From your account, you can edit your description, change your password, export your data and delete your account. To correct other details or make other requests, use the contact form. We may request information strictly necessary to verify your identity. We normally respond within one month, subject to extensions permitted by law.

You can lodge a complaint with ANSPDCP or contact the competent court. We do not use advertising profiling or automated decisions with legal effects.

7. Cookies and updates

See the cookie policy for the sign-in session and notice preference. Advertising and traffic analytics are not implemented. We update this policy when the service or processing changes.

Reference: General Data Protection Regulation.