Privacy Policy

1. Data Controller

RumbleZone is operated as a personal project. For any questions about this privacy policy or your personal data, contact us at contact@rumblezone.io.

2. What Data We Collect

When you create an account, we collect:

• Email address (for authentication)
• Display name (shown to other players)
• Password (stored securely as a hash, never in plain text)

When you play games, we automatically collect:

• Game statistics (games played, wins, kills, food eaten)
• Game session data (game mode, duration, results)

Our web server automatically writes standard access logs that may include your IP address. These logs rotate automatically and are not used for tracking or profiling.

Guest players (without an account) are assigned a random name. No personal data is collected from guest players.

3. Legal Basis for Processing

We process your data based on:

• Consent— You provide your data voluntarily when creating an account and agree to our terms.
• Legitimate interest— Standard server access logs for security and operational purposes.
• Contract performance— Processing game data is necessary to provide the service.

4. How We Use Your Data

• To provide and maintain the game platform
• To authenticate your account
• To display your profile and game statistics
• To populate leaderboards
• To detect and prevent abuse

5. Data Storage and Security

Your data is stored in a PostgreSQL database on our self-hosted server. Passwords are hashed using industry-standard algorithms. We use HTTPS for data in transit and JWT tokens for authentication. We do not use third-party cloud providers for data storage.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties. We do not use analytics services, advertising networks, or any third-party tracking tools. Your display name and game statistics are visible to other players on leaderboards and in game sessions.

7. Data Retention

Account data is retained for as long as your account exists. If you request account deletion, your personal data will be removed. Game session data may be retained in anonymized form for platform statistics. Server logs are rotated automatically and older logs are deleted.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access— Request a copy of your personal data.
• Right to rectification— Request correction of inaccurate data.
• Right to erasure— Request deletion of your account and personal data.
• Right to data portability— Request your data in a machine-readable format.
• Right to object— Object to processing based on legitimate interest.
• Right to withdraw consent— Withdraw your consent at any time by deleting your account.

To exercise any of these rights, contact us at contact@rumblezone.io. We will respond within 30 days.

9. Cookies and Local Storage

RumbleZone does not use cookies. We use browser localStorage to store your authentication token and sessionStorage for temporary guest names. For more details, see our Cookie Policy.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of RumbleZone after changes constitutes acceptance of the updated policy.