Privacy Policy

1. Data Controller

Dragoslav Kovacevic
c/o Postflex #9831
Emsdettener Str. 10
48268 Greven
Germany

Email: hello@gridsport.games

This service is registered in Germany and complies with German data protection law (BDSG) and the EU General Data Protection Regulation (GDPR/DSGVO).

2. What Data We Collect

2.1 Data Stored Locally on Your Device

The following data is stored ONLY in your browser and NEVER sent to our servers:

• Game Progress: Your scores, completion status, and statistics
• Preferences: Language, dark mode, color theme
• Push Notification Token (if enabled)

You can delete this data anytime through your browser settings.

2.2 Push Notifications (Optional)

• We store your push notification subscription endpoint
• Used ONLY to send game update notifications
• No personal information is collected
• You can unsubscribe at any time

2.3 Feedback Form Submissions

When you submit feedback through our form, we collect:

• Your message content and feedback details
• IP address (for spam prevention and abuse protection)
• Timestamp of submission
• Game context (if submitted from a game page)

Cloudflare Turnstile: Our feedback form uses Cloudflare Turnstile (a privacy-friendly CAPTCHA alternative) to prevent spam and abuse. Turnstile processes browser and device information to verify you're human. No personal data is collected, and Cloudflare's processing complies with GDPR.

Legal Basis: Legitimate interest (preventing spam and abuse, as per GDPR Article 6(1)(f))

This data is stored securely on our servers, not shared with third parties (except Cloudflare as our security processor), and deleted after the issue is resolved or 90 days, whichever comes first.

3. What We DON'T Currently Collect

During normal gameplay, we currently do NOT collect:

• ❌ No cookies (except essential PWA service worker)
• ❌ No analytics or tracking scripts
• ❌ No user accounts or registration
• ❌ No personal information or identifying data
• ❌ No behavioral profiling
• ❌ No IP address logging (except feedback submissions)

Note: IP addresses are only collected when you voluntarily submit feedback through our form (for spam prevention).

Future Changes: We reserve the right to introduce analytics, tracking technologies, or other data collection methods in the future. Any such changes will be reflected in an updated Privacy Policy and communicated to users. Where required by GDPR, we will obtain your consent before implementing new tracking technologies.

4. Your Rights Under GDPR

• Right of Access: Request information about your data
• Right to Erasure: Request deletion of your data
• Right to Object: Object to data processing
• Right to Rectification: Request correction of inaccurate data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time (e.g., for push notifications)
• Right to Restriction: Request restriction of processing under certain circumstances

Game Data: Since all game data is stored locally on your device, you can exercise these rights by clearing your browser data.

Feedback Submissions: To exercise your rights regarding feedback form data (IP address, messages), contact us at hello@gridsport.games. We will respond within 30 days as required by GDPR.

5. Data Security

• HTTPS encryption for all connections
• No server-side storage of personal data
• Content Security Policy (CSP) headers

6. Third-Party Services

6.1 API-Football

Player images and logos are loaded from API-Football's CDN. This is necessary for displaying game content.

6.2 Cloudflare Turnstile

Our feedback form uses Cloudflare Turnstile to prevent spam and abuse. When you submit feedback:

• Cloudflare processes browser and device information (user agent, screen resolution, etc.)
• No cookies are set by Turnstile
• No personal data is collected
• Data is processed according to Cloudflare's Privacy Policy

Cloudflare is a GDPR-compliant data processor based in the US with EU Standard Contractual Clauses in place.

We do NOT use analytics, advertising, or behavioral tracking services.

7. Contact

Email: hello@gridsport.games

Or use our feedback form available on most pages.

You have the right to lodge a complaint with the competent data protection authority. For complaints against businesses, contact the data protection authority of your federal state (Landesdatenschutzbehörde).

A list of all supervisory authorities can be found at:
List of German Data Protection Authorities