Privacy Policy for the Sindral Alpha test

1. Controller and contact

The controller of personal data used for the Sindral Alpha test is SindralGame, represented by Sebastian Narczyk. Send privacy requests to team@sindralgame.com with the subject “Privacy”.

This policy covers the game, account access, the in-game feedback channel and the technical systems required to run the open test.

2. Data we process

Depending on how you use the test, we process:

• account data: internal user ID, email address, sign-in provider, authentication/session records, your declaration that you are at least 18, the accepted version of the Terms and the time of acceptance;
• profile and gameplay data: pseudonym, language, avatar, character state, progress, choices, activity times, operation outcomes, resources, rankings and command history;
• security and diagnostic data: IP address and request logs handled by infrastructure providers, timestamps, error and audit records;
• feedback data: category, description, account and character link, current level and screen, language, viewport, shortened user-agent string and an optional screenshot.

3. Sources of data

We receive data directly from you, create gameplay and security records when you use the service and receive limited identity data from Google only if you choose Google sign-in.

We do not use advertising trackers, sell personal data or build marketing profiles in this test build.

4. Purposes and legal bases

• provide the account and game, save progress and answer service requests — performance of the Terms (GDPR Article 6(1)(b));
• secure the service, prevent abuse, diagnose faults and keep essential audit records — our legitimate interests in operating a safe and reliable test (Article 6(1)(f));
• review voluntary feedback and improve the game — our legitimate interests in developing the test (Article 6(1)(f));
• meet tax, accounting, law-enforcement or other binding legal duties if they arise — compliance with law (Article 6(1)(c)).

Where we ask for consent for a new optional purpose, that request will be separate and you may withdraw it without affecting earlier lawful processing.

5. Recipients and processors

Authorized Operator personnel may access data only as needed to operate, secure and evaluate the test. Supabase provides database, authentication and private file-storage infrastructure as a processor. Hosting, network, backup and transactional-email providers may process the minimum data required to deliver their services.

If you choose Google sign-in, Google handles its authorization screen under its own privacy terms and sends the test the account details required to sign you in. Data may also be disclosed when required by law or to establish, exercise or defend legal claims.

6. International transfers

Some infrastructure providers and their subprocessors may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard. Information about the applicable safeguard may be requested at team@sindralgame.com.

7. Retention and test resets

• account, profile, gameplay and essential audit data: while the account participates in the test, then deleted or anonymized after a verified deletion request or closure of the test, subject to backups and legal or security holds;
• feedback text and reproduction context: up to 12 months after submission; optional screenshots: up to 6 months after submission;
• security incident records: for the time needed to investigate and defend claims, normally no longer than 12 months after closure of the incident;
• provider logs and backups: for the periods set in the relevant infrastructure configuration and contracts, with deletion propagating through normal backup cycles.

A reset of the Alpha test may remove gameplay data earlier. Data required to document security abuse, a legal claim or compliance may be retained for the applicable limitation or statutory period.

8. Your rights

Subject to applicable conditions, you may request access, a copy, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You may complain to the President of the Polish Personal Data Protection Office or another competent supervisory authority.

Email team@sindralgame.com from the account address and describe the request. We may ask for proportionate identity verification. We normally respond within one month; if a lawful exception applies, we will explain it.

9. Cookies and browser storage

The test uses only storage needed for sign-in, security, language and interface preferences. This may include authentication cookies or local storage. The current build does not use advertising or cross-site marketing cookies.

Blocking essential storage may prevent sign-in or cause preferences to be lost. You can clear it in browser settings; doing so may sign you out.

10. Security

The test uses access controls, row-level database policies, private storage, encrypted network transport and restricted administrative tools. No system is risk-free, so report suspected unauthorized access promptly to team@sindralgame.com.

Do not include passwords, unrelated personal data or another person’s information in a feedback description or screenshot.

11. Automated decisions and children

We do not make decisions producing legal or similarly significant effects through automated profiling. In-game outcomes and rankings affect only the test game state.

This test is for adults aged 18 or over and is not directed to children. Contact us if you believe a child has created an account.

12. Policy changes

A material change will receive a new document version and will be communicated in the service before it takes effect whenever reasonably possible. The version and date at the top identify the current notice.

Questions about this policy or the data used by the test may be sent to team@sindralgame.com.