Privacy policy | Playpora

1. Controller and contact

The controller of personal data is:

Telepora s. r. o. Karpatské námestie 7770/10A 831 06 Bratislava - mestská časť Rača Slovakia Company ID (IČO): 57 420 998 Tax ID (DIČ): 2122728751

Send privacy questions and requests to exercise data subject rights to our privacy address:

Privacy and GDPR: gdpr@playpora.com General contact: info@playpora.com

2. What data we process

When playing as a guest we process only a random guest profile identifier (only its hash in the database), game progress, results, star and coin balances and completed challenges.

When you sign in with Google we receive your name, email, profile photo and a unique Google account identifier (sub). We also store a record of your consent (16+ and the terms) with the date and the terms version.

Your public leaderboard name (“Ján K.”) is derived from your name. We also technically process data needed for security and operation (IP address in logs, browser type, request times).

3. Purposes and legal bases

We process data to run the game: saving progress, evaluating results, the game economy, challenges, leaderboards and account administration. The legal basis is the performance of a contract under Art. 6(1)(b) GDPR and your consent at sign-in under Art. 6(1)(a).

For security, leaderboard fraud prevention and diagnostics we process data on the basis of legitimate interests under Art. 6(1)(f) GDPR. We do not sell personal data to third parties for marketing.

4. Google sign-in

Sign-in uses OpenID Connect with PKCE. The web receives an authorization code from Google, which the API exchanges for profile data directly with Google; we never see or store your Google password.

The account token that keeps you signed in on a device is stored in the database only as a hash and in your browser in an httpOnly cookie. Signing out revokes the token on that device.

6. Transfers outside the EU or EEA

Some providers (e.g. Google, Cloudflare) may process data outside the EU/EEA. In that case we use the safeguards required by the GDPR, such as standard contractual clauses or an adequacy decision.

7. Retention and deletion

We keep account data while you use the account; after an account deletion request we deactivate access and delete or anonymise the data, except data we must keep for legal, security or accounting reasons.

Guest progress is kept while the guest profile is valid; clearing cookies in your browser makes it inaccessible. Consent records are kept as proof of consent.

8. Your rights

Under the GDPR you may request access to your personal data, rectification, erasure, restriction of processing, data portability, and you may object to processing based on legitimate interests. You may withdraw consent at any time; withdrawal does not affect earlier processing.

You can exercise your rights at gdpr@playpora.com. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority.

9. Cookies and local storage

We use only necessary cookies and local storage: guest and account tokens (sign-in and progress), a short-lived Google sign-in cookie, and your language and colour-mode choices. We do not use marketing cookies or personalised advertising yet.

Optionally, only if you explicitly confirm it in the cookie banner or in Cookie settings, we measure traffic with Google Analytics 4 (Google Ireland Limited, and Google LLC for data transfers): it loads only after your consent, sets the cookies _ga and _ga_*, sends nothing before consent, and when you withdraw consent sending stops immediately and these cookies are deleted. You can withdraw consent at any time in the footer (Cookie settings) or in Account; details are in the Cookie policy (link in the footer).

Games run in an isolated frame (iframe sandbox) without access to your cookies; they send results to the portal through a controlled interface.

10. Changes and contact

We may update this policy from time to time. The current version will be published in the service together with its effective date. Privacy questions or requests: gdpr@playpora.com.