Privacy Policy (GDPR)
What we store
Account data you give us: name, username, email, avatar choice, country, and — optionally — company name and LinkedIn link. Game data: your solo save and your multiplayer match points. Password: stored only as a salted scrypt hash, never in plain text. Session: one httpOnly cookie that keeps you signed in.
Why (legal basis)
To run the game you asked for (contract): sign-in, multiplayer rooms, rankings. Optional visibility of company and LinkedIn on rankings happens only with your explicit consent, which you can withdraw anytime in your profile.
What we do NOT do
No advertising, no tracking cookies, no analytics profiles, no selling or sharing of your data.
Your rights
Access and rectification: everything is visible and editable in your profile. Erasure: the “Delete my account and data” button removes your profile, sessions, saves and match history immediately and permanently. Consent withdrawal: toggle ranking visibility in your profile.
Retention
Data is kept while your account exists. Multiplayer room data is temporary and cleaned up after one day.