Privacy policy

Draft - to be completed and reviewed before the public launch. The Polish version is binding.

Who controls the data

The data controller is [FULL NAME / COMPANY NAME], [ADDRESS]. Contact: [CONTACT E-MAIL].

What data we collect and why

• E-mail, pilot name, password (the password only as an encrypted hash) - to run your player account (Art. 6(1)(b) GDPR).
• Game progress - to save your game on the account.
• IP address - temporarily, to protect against break-ins and abuse (Art. 6(1)(f) GDPR).

Cookies and browser storage

We use two essential cookies: of_session keeps you logged in (up to 30 days) and of_device - a random device identifier (2 years) that lets us e-mail you when someone logs in to your account from a new device. On the server we keep only a hash of this identifier - it is not used for tracking. The game stores settings and progress in browser storage (localStorage). We do not use advertising or analytics cookies.

Where the data is

On a Hetzner Online GmbH server in Finland (EU). Account e-mails (address confirmation, password reset, new device warning) are sent through [E-MAIL PROVIDER, e.g. Brevo SAS, France, EU] as a processor - it only receives the e-mail address and the message content. We do not sell data.

How long

Until the account is deleted. You can delete the account yourself under Account → Account security - the data disappears from the database immediately and from backups within 30 days.

Your rights

You have the right to access, correct, delete, restrict processing of, move and object to the processing of your data, and to complain to the Polish data protection authority (UODO). Write to [CONTACT E-MAIL].