Privacy policy

In force since 7 September 2026

Craterborn is a browser game. This page describes what data we collect, what for, and what you can do about it. It is short because there is little data — that is a deliberate design decision, not a shortcut.

Who is responsible for the data

The data controller is Michał Sikora, Aleja Reymonta 21 m. 255, 01-840 Warsaw, Poland. Contact: kontakt@craterborn.com.

What we collect and why

• Character name — you choose it yourself. Other players see it in the game. Legal basis: performance of the service contract (Art. 6(1)(b) GDPR).
• Character code — a random string the game uses to recognise your account. It is not tied to any personal data of yours. We keep it on the server and in your browser's storage.
• E-mail address — only if you link one yourself. It serves solely to recover access. We do not store the address itself — we store an irreversible cryptographic digest of it, keyed with a server secret. The address cannot be reconstructed from that digest; it only lets us recognise that it is you again. The address itself passes through the server at the moment the code is sent and is not written down. Legal basis: your consent (Art. 6(1)(a) GDPR), given by linking the address to the account. You may withdraw it at any time by removing the link or deleting the account — withdrawal does not affect what happened before it.
• Gameplay data — stash contents, in-game currency, run history, character level. Without them the game would have nothing to remember.
• Correspondence — if you write to the contact address, we keep the message for as long as handling the matter requires, and to be able to show that it was handled. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• IP address — in server logs and for rate limiting (abuse protection). Legal basis: legitimate interest (Art. 6(1)(f) GDPR), namely keeping the service secure.

What we do NOT do

• We do not use advertising or cross-site tracking.
• We do not profile you and we make no automated decisions.
• We do not sell or share data for marketing purposes.
• We do not collect your name, surname, age or location.

Cookies and browser storage

We do not use cookies. The game keeps your character code and settings — sound, fullscreen — in your browser's storage (localStorage). This data is strictly necessary for the service to work, is not used for tracking, and therefore requires no consent. You can remove it by clearing site data in your browser — you will then lose access to the account unless you linked an e-mail address first.

Who we pass data to

• Hosting provider — OVHcloud (OVH SAS, France), where the game runs.
• Mail provider — OVHcloud (Zimbra), for sending sign-in codes and handling mail sent to the contact address.

Nobody else. Data is not transferred outside the European Economic Area unless the provider named above changes that — in which case we will update this page.

How long we keep data

• Account and gameplay data — as long as the account exists.
• An account unused for 24 months may be deleted along with its data.
• Server logs — no longer than 30 days.

Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, and to object to processing based on legitimate interest. Write to the contact address above — we will answer within 30 days.

You can delete the account yourself in the game settings. Deletion is irreversible and covers the stash contents and in-game currency.

If you believe we process your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland), or with the supervisory authority in your own country of residence.

Children

The game is not directed at children under 16 and we do not knowingly collect their data.

Changes

We will announce material changes in the game before they take effect. The date at the top of this page always indicates the version in force.

Terms  ·  Polska wersja  ·  Back to the game