Last updated 16 October 2026
Privacy Policy
What we know about you, why, for how long – and what you can do about it.
1. Who is responsible
The controller of your personal data is [Operator name], [Company ID], [Registered address]. Questions and requests: [contact e-mail].
2. What we collect
- Your account: e-mail, password (stored only as a secure hash), the language and the date you accepted these documents. If you sign in with Google or Discord, we receive your account id there, your e-mail and whether the provider checked it – nothing else.
- Your game: your hero and everything it does – items, gold, trades, market offers, guild membership, messages in the chat, references and reports, and your settings (for example the flag you show).
- Technical data: the IP addresses and browsers you sign in from, when you were last seen and how many minutes a day the game was open, and errors the game ran into while you played.
- Purchases: what you bought, when and for how much. Card and bank details go straight to the payment provider; we never see them.
- Notifications: if you turn them on, the address your browser gives us for sending them.
3. Why, and on what grounds
- To run the game for you (the contract between us): your account, your hero, playing with others, the chat, purchases.
- To keep the game fair and safe (our legitimate interest): finding cheating, bots, multi-accounts and fraud, handling reports, fixing errors, and statistics about how the game is played.
- Because the law requires it: accounting and tax records of purchases.
- With your consent: push notifications and optional statistics cookies – you can withdraw it any time in the game’s settings or the cookie settings.
4. How long we keep it
- Your account and hero: as long as the account exists; after deletion we remove them, except what the law makes us keep.
- IP addresses: 30 days. Daily gold records per player: 90 days. Minutes played per day: 400 days.
- Chat: the global channel 7 days, guild chat 30 days, private messages 7 days; a reported message until our team has dealt with it.
- Mail in the game’s mailbox: 7 days (longer for Patrons). Finished trades: 30 days.
- Purchase records: as long as tax law requires (in the Czech Republic up to 10 years).
5. Who else gets it
We do not sell your data. We share only what is needed with the companies that help us run the game: hosting, e-mail delivery, the payment provider, Google or Discord when you sign in with them, and the push services of your browser (Google, Apple, Mozilla, Microsoft) when you turn notifications on. Some of them are outside the EU (for example in the USA); they are bound by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. Other players see what the game shows them – your hero’s name, portrait, flag, level, guild and what your privacy settings allow.
6. Cookies and your browser
The game keeps only what it needs to work in your browser – nothing to follow you elsewhere, no advertising. All of it is set by Floorfall itself. Statistics cookies would run only with your consent; none are used yet. You can change your choice any time in the cookie settings.
| Name | Purpose | Kept for |
|---|---|---|
floorfall-session |
Keeps you signed in while you play and protects your session. | 2 hours |
XSRF-TOKEN |
Protects your actions against requests from other websites. | 2 hours |
remember_web_… |
Keeps you signed in on this device when you choose “Stay signed in”. | 400 days |
tower_returning |
Remembers that this browser played before, so the sign-in opens first. | 400 days |
floorfall_locale |
Remembers the language you play in, so even the error pages speak it. | 400 days |
floorfall_invite |
Remembers which friend invited you, until you start playing. | 30 days |
floorfall_consent |
Remembers your choice in these cookie settings. | 182 days |
tower.*local storage |
Your settings in this browser: sound, music, the tabs you left open and similar. | Until you clear it |
7. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to get it in a portable form; and you can withdraw any consent. Write to [contact e-mail] – we answer within a month. You can also complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz) or the one in your country.
8. Children
The game is for players aged 15 and older. Younger players may play only with the consent of a parent or guardian; if you believe a child is playing without it, tell us and we will delete the account.
9. Changes
When we change this policy, we update the date at the top and tell you about important changes in the game or by e-mail.