The small print
This site is a small personal game, run by one person, not a company. It has no ads, no trackers and no cookies. Here is the little data it handles, why, and for how long.
Martin Kadlec — martin@kadlec.info. Write there about anything on this page: to ask what I hold, or to have a cloud save removed.
Like every web server, this one notes each request: your IP address, the time, the page, and the name of your browser. That is how the site is delivered and kept safe from abuse (my legitimate interest in running it).
Kept: 14 days. An address blocked for abuse stays in the system log for up to 30 days.
When the game opens, it tells the server the size of your window and the time zone your device is set to. The server adds one to a few totals — visits per day, by screen size, by country (worked out from the time zone, not from your address) — and one more when you open a place on the route. No address and no identifier is kept with them: only the totals, so I can see whether anyone comes by.
Kept: The totals are kept. Nothing about you is.
Your name, your email address and your message are sent to me as an email, through Resend (an email service), so that I can answer you. This site keeps no copy.
Kept: In my mailbox for as long as our conversation needs. Resend keeps its record of the email for 30 days.
Your progress in the game (places, finds, trophies, settings — nothing that says who you are) is stored on the server under a code of five words. The server keeps only a fingerprint of the code, so the save can be found only by someone who has the code.
Kept: Until 13 months after it was last used — or sooner, if you write to me with the code.
To stop floods of requests, the server remembers for a short while which IP address each visit, form or save came from.
Kept: Up to one hour, and never in backups.
The game keeps your progress and settings in your browser’s storage, so that you can carry on where you stopped — and, if you made a cloud save, its code. These are not cookies, and nothing but this game reads them. “Reset progress” on the map screen erases them.
Kept: Until you reset, or clear your browser’s data.
A nightly copy of the database — the totals and the cloud saves, without any IP addresses — is kept encrypted, away from the server.
Kept: 7 daily, 4 weekly and 12 monthly copies.
What there is not: cookies, advertising, an analytics service, anything loaded from other sites, profiling or automated decisions.
For me, and under a data processing agreement:
You can ask me what data I hold about you, to correct or delete it, to limit or object to its use, or to hand it over in a portable form. In practice there is very little: an email you sent me, or a cloud save you can name by its code. If you think I handle your data wrongly, you can complain to the Czech data protection authority (Úřad pro ochranu osobních údajů, uoou.gov.cz), or to the authority where you live.