This document is our engineering blueprint for data handling. It's designed to be read, not just filed away. Every clause reflects a technical constraint, a user expectation, or a design trade-off we actively chose.
Every interaction with our website or games triggers a predictable data flow. We designed our systems to minimize data collection by default, treating personal data like a liability—something to be contained and secured.
Legitimate Interest: For basic site analytics and security logging. We balance this against your privacy through strict retention periods (see Section 4).
Contractual Necessity: Required only for account creation and game saves. Never used for marketing unless explicitly opted-in.
We do not build customer profiles. Game telemetry is anonymized within 24 hours and aggregated. Your email is stored in a hashed format unless you interact with support. Our Cookie Policy details our strict category approach: strictly necessary only.
A Privacy Lens
On a gaming site, performance is paramount. Third-party cookies for ads or analytics are performance killers. Our choice was stark.
Server-side logging with IP pseudonymization. Zero third-party trackers. A single, first-party session cookie for game saves.
Optimizes
Speed, User Trust, Legal Compliance
Granular user behavior analytics. Real-time conversion funnels. Cross-visit retargeting capabilities.
Sacrifices
Marketing Automation, Deep Behavioral Insights
"A player's frame rate is more important than our marketing team's dashboard. We chose the player." — Tech Lead, Internal Memo Q2 2025
Under GDPR and Italian privacy law, you hold the rights below. We've built the technical pathways to exercise them without gatekeeping or delay.
Request a full copy of all data we hold. Process time: 30 days max.
Initiate Request →Ask us to delete your account and all associated personal data.
Excludes: Legal obligation data, anonymized analytics.Download your game save data and profile in a machine-readable format.
Format: JSON. Structured by game title & timestamp.Stop us from processing your data for 'legitimate interest' (e.g., analytics).
For any data-related questions or requests, our DPO monitors this inbox directly.
Security isn't a feature. It's a foundational layer. Our retention periods are not arbitrary; they're based on user utility and legal requirements.
Database fields containing personal identifiers (emails, tokens) are encrypted using AES-256-GCM.
Zero-trust model. Engineering staff have segmented access. No single database key holds all data.
Stored indefinitely unless manually deleted by the user. Max 3 saves per game per account.
User ControlledAnonymized IP addresses after 7 days. Full deletion after 30 days for security audits.
System NecessityRaw Server Logs
Full IPs, request paths
Pseudonymized Logs
Hashed IPs, timestamps
Game Saves & Accounts
Until deletion request
See Cookie Policy for session lifecycle.
