Privacy policy
Prask! is a game without registration. We collect only the data the game needs to work and to keep the leaderboards fair. We use no ads, no analytics tools and no tracking.
Controller
The controller of personal data is Viktor Seidl, company ID (IČO) 07450273, registered address Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic.
Contact for questions about personal data: info@praskni.app
What data we process
- Game data: an anonymous player ID, nickname, results of rounds (score, combo, length, when the round was played and the record of taps used to check it, statistics of the round such as popped bubbles), streak of days, league membership and earned badges. Your device signs in with a random token that the server stores only as a hash, which cannot be turned back into the token.
- Your e-mail address, only if you save your account to it. It is used only to send links for saving and restoring the account.
- Technical data: your IP address and details of each request. The app does not store the IP address; it is kept only in the server's memory to limit the number of requests and may briefly appear in the technical logs of the hosting.
- Data on your device (token, nickname, best score, results not sent yet). The details are on the page about cookies and device storage.
- How you got to the game (directly, from a shared result, a daily challenge link or a league invite) and whether you opened the game as an installed app. Only these categories, never the link itself or the page you came from. The game also notes when your first round started.
- Notifications, only if you turn them on: the address the push service of your browser gave your device, the keys to encrypt the messages and the language of the app.
- The country you open the game in, which the game derives from the time zone of your device (for example Europe/Bratislava); never from your IP address or exact location. Only the last country and when it was noted are kept.
Why and on what legal basis
- Running the game, leaderboards, the daily challenge and leagues: providing the service you ask for by playing (Art. 6(1)(b) GDPR).
- Saving and restoring your account by e-mail: at your request (Art. 6(1)(b) GDPR).
- Fair play and security: the server recalculates every round from the record of taps, limits the number of requests and prevents abuse; legitimate interest (Art. 6(1)(f) GDPR). A round that does not match is only left out of the leaderboards and has no other consequences.
- Notifications about the daily challenge: your consent, given by turning them on in the profile and withdrawn by turning them off (Art. 6(1)(a) GDPR).
- Statistics for the operator: how players come to the game and in which countries it is played, to decide where to promote it and which languages to add; legitimate interest (Art. 6(1)(f) GDPR). Only the operator sees them.
What other players see
Leaderboards show your nickname, score, combo and number of badges. A league's leaderboard can be seen by anyone who knows its code. So do not use your real name as a nickname unless you want it to be public.
When you share a result or a badge as a link, the page behind it shows your nickname and that result to anyone who has the link. It works for 30 days after you last shared it and search engines do not index it.
Players with a saved account can open your profile from the leaderboards. It shows your nickname and game statistics computed from your rounds: scores, rounds and playing time, streaks, bubbles, daily challenge results, badges, the day you started and the day you last played. With a saved account you choose in your profile which statistics are shown; without one all of them are. A profile you share is visible to anyone with the link, with only your public statistics, until 30 days after you last shared it.
Who processes the data for us
- Microsoft Ireland Operations Limited (Azure): hosting of the app and the database in a data centre in Western Europe.
- Resend, Inc. (USA): delivery of e-mails with account links; it receives your e-mail address and the text of the e-mail. The transfer to the USA relies on safeguards under Art. 46 GDPR (standard contractual clauses).
- The push service of your browser (Google for Chrome and Android, Apple for Safari and iOS, Mozilla for Firefox, Microsoft for Edge): delivers notifications to your device. It gets the address of your device and the encrypted message, which only your device can read. These providers may process data outside the EU under their own safeguards (Art. 46 GDPR).
We do not sell your data and do not give it to anyone for marketing.
How long we keep it
- Game data: as long as the account exists or until you ask for it to be erased.
- Records of taps: 30 days after the round; for a round that failed the check, longer so that it can be reviewed.
- E-mail address: until you ask for it to be removed. Links from e-mails are valid for 30 minutes and their records are deleted within a day.
- Notifications: until you turn them off, the push service reports the address as no longer valid, or the account is deleted. What the app knows about your place for the notifications is deleted the day after the challenge closes.
The operator may remove accounts, results, nicknames and leagues or reset the leaderboards at any time and without giving a reason, for example for cheating, an inappropriate name, inactivity or when the game ends.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability, and you can object to processing based on legitimate interest.
Just write to the contact e-mail. If your account is saved to an e-mail address, write from that address; otherwise tell us your nickname and roughly when you played, so that we can find the account. We reply within a month. info@praskni.app
If you feel we do not handle your data properly, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or with the supervisory authority in the country where you live.
Children
Anyone can play. If you are under 15, save your account to an e-mail address only with a parent's consent.
Changes
If the way we process data changes, we update this page and its effective date.