Privacy policy

Version: 25 October 2026. This notice explains how DADAMIAN Games intends to handle personal data. It must be completed and legally reviewed before public launch.

Publisher action required before launching: Add a real privacy contact email or postal address and verify the actual controller's legal identity, lawful bases, retention and vendor transfer terms. Privacy contact: [INSERT WORKING CONTACT EMAIL BEFORE GOING LIVE]. Until then, do not activate online registration for the public.

Short version for players

You can play ten games without making an online account. We do not ask for your real name, school, address or birthday. If you opt into an online account, your game nickname, your game points and your accepted friendships are stored online. Only you and accepted friends can view each other's scores. Never share personal information in your nickname.

Who is responsible?

The operator of DADAMIAN Games is the data controller. Copyright belongs to Bogdan Talpalaru; copyright ownership alone does not establish the legal identity of the controller. Controller identity and contact: [OPERATOR MUST COMPLETE].

What information is processed and why?

Offline: nickname, game score, unlock progress and preferences are saved in this browser's local storage for gameplay continuity. They are not uploaded by the application when you choose offline play.
Online (optional, 16+ only in this version): pseudonymous login ID, nickname, unique friend code, points, unlock progress, friend requests, and the date a record was created or updated. We use these to provide the account, unique usernames and friends-only leaderboard at your request, on the basis of your affirmative consent for this optional online service (subject to legal review).
Security and operations: our hosting and database providers may process network metadata such as IP addresses, logs and authentication information to deliver and protect the site. The operator must document the applicable legal basis, processor arrangements and actual log retention.

Children and online accounts

Anyone can play offline. Online registration in this release is limited in the interface to players who confirm they are at least 16. This is a self-declaration, not independent age verification. If under 16, do not use the optional online account features; adults should supervise. Online accounts and friend features for younger children must remain disabled until a suitable parent/guardian verification and consent process has been built and reviewed. Read the Parents & Safety page.

Who receives this information?

The site is designed to use Cloudflare Pages as the web host and Supabase for optional accounts and database storage. The controller must verify the actual hosting setup, data-processing agreements, subprocessors and international transfer safeguards. The primary Supabase database should be created in a specific EU region, e.g. Frankfurt. Primary storage in the EU does not imply every log, backup or support activity stays in the EU. The Supabase JavaScript client is currently loaded from jsDelivr CDN only when online features are used; this means the CDN may receive connection metadata. Review or self-host the library for production.

Who can see names and scores?

Online username registration checks whether a name is available. Only the player and accepted friends receive each other's names and scores from the controlled database API. A friend ID is used to request friendship; there is no public all-player leaderboard. However, players can copy and disclose information they can see. Public or offensive nicknames may need moderation before launch.

Cookies and local storage

No advertising, analytics or marketing tags are enabled in this distribution. AdSense is prepared but disabled pending AdSense approval, a certified consent platform and verified age-treatment settings. Local storage is used for player name, scores, preferences and — only after choosing optional online services — authentication/session storage. The site does not set an advertising cookie. Providers may use technical infrastructure cookies or logs; confirm their use before deployment. If optional analytics or advertising is added later, implement the appropriate notice and consent choices before enabling them.

How long is information kept?

Offline data remains in your browser until you clear it or use the Clear data button. Online data remains until the user deletes their account or the operator implements and runs an inactivity-retention policy. The operator must adopt, publish and implement specific retention periods, including access logs, backups and inactive anonymous accounts, before public launch. Database point events may be retained separately for abuse prevention and must be included in the retention policy.

Your rights and choices

EU users may have rights to access, rectify, erase, restrict, object and receive a portable copy of eligible personal data, and to withdraw consent. The Friends & Highscores page includes buttons to download a JSON copy of your game profile, score events and friendship records, and delete your account if the accompanying database migration is installed. This automated export does not include Supabase authentication logs, IP logs or provider backups; request those details from the operator. You can also clear local game data on that page. Contact the operator for other requests or if an automated action fails. You may also complain to your local data protection authority, including Romania's ANSPDCP at dataprotection.ro.

Security

Use HTTPS and enforce strict database authorization. Online passwords are not collected in the current anonymous-account version. Anonymous accounts are browser-specific and can be lost when browser data is cleared. Do not disclose your friend code to strangers. Client-side game scores are not anti-cheat proof. Security is a continuous operational responsibility; no site can guarantee absolute security.

Advertising (not yet enabled)

No AdSense code, advertising SDK or advertising cookie is active in this downloadable package. If advertisements are enabled following operator review, Google and authorized advertising partners may process cookie and similar identifiers and device/network data as described in Google's advertising technologies information. Since this is child-oriented content, behavioral profiling advertisements will not be used; age-restricted treatment must be configured. Consent or other lawful permissions will be collected where legally required by a Google-certified consent management platform before relevant processing. Parents and players can consult the Advertising and Cookies pages. This policy must be updated with actual vendor disclosures, retention periods and consent controls before activating ads.

Changes

Material changes to the purposes of processing will require an updated notice and, where applicable, new consent. The date at the top identifies this draft revision.