Privacy

In short

SNEAKY BUGS has no accounts, no ads and no profiling, and no data is sold. The game sets no cookies. Your nickname and score go to the online leaderboard only if you choose that.

Who is responsible

The data controller is Jacek Mariusz Taczała (a private individual, the author of the game), contact: kontakt@stop60.no.

Cookie-free statistics

We count visits with GoatCounter (the script is hosted with the game): page and referring page, browser and system, language, screen width, country (derived from the IP address) and the events “game started” and “game finished”. The IP address and browser are only used in the server’s memory (up to 8 hours) to count unique visits; only aggregate statistics are stored, without IP address or identifier. GoatCounter stores nothing in your browser.

Purpose: to know how many people play and where they come from. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). You can object at any time: block scripts, or open the game with #toggle-goatcounter at the end of the address (counting then stays off on that device; this is remembered in localStorage as “skipgc”), or write to us.

Data on your device

The browser’s storage keeps your nickname, the local leaderboard (nickname, points, number of bugs squashed), your best score, the sound setting, the “Skip the intro” setting, the language, your choice about the online leaderboard and any scores waiting to be sent to the online leaderboard while you were offline. These are not cookies and do not leave the device, except what the online leaderboard needs (below).

They are strictly necessary for features you use, so no consent is needed. You can delete them at any time in your browser’s settings for this site (clear site data).

Online leaderboard

You need a nickname to play. Only if you tick “I am 16 or older (18 or older in India) and want …” below the nickname field (it is off until you do), the following goes to the public online leaderboard after a round: nickname, result (points, number of bugs squashed, wave), game and time saved; anyone can see the top 10. Without the tick your result stays on your device. You can untick it at any time. Don’t use your real full name, e-mail or anyone else’s details – any made-up nickname is fine. Nicknames are filtered automatically and entries that break the rules are removed.

Purpose: to run the leaderboard. Legal basis: consent (GDPR Art. 6(1)(a); for players in India also s. 6 of the DPDP Act 2023). You give it with the tick box, where you also confirm that you are 16 or older (18 or older in India), and you can withdraw it at any time by unticking it or asking for deletion. Spam protection (the salted IP hash, see “How long”) relies on legitimate interest (GDPR Art. 6(1)(f)).

Sharing

The Share buttons (the game and your score) open your device’s share menu or copy the text and link. Nothing about this is sent to us; what you share goes through the app you choose.

Fonts and sounds

The fonts are hosted with the game (no Google Fonts or other external font or script services). Sounds are played or generated in your browser.

Recipients

Supabase (Supabase Pte. Ltd., Singapore, part of Supabase, Inc., USA) – the leaderboard database, on servers in the EU (AWS, Ireland), as processor under a data processing agreement (DPA) with the EU standard contractual clauses for any access from outside the EEA (e.g. support); its server logs may briefly record the IP address (Supabase privacy policy).

GoatCounter (Martin Tournoij, Ireland) – statistics, servers at Hetzner in Finland and Germany (GoatCounter privacy policy).

GitHub, Inc. (USA) – hosting via GitHub Pages; GitHub may log the IP address and browser data when pages are loaded. Transfer to the USA under the EU–US Data Privacy Framework (GitHub privacy statement).

E-mail: messages to kontakt@stop60.no are forwarded by ImprovMX Inc. (USA) (ImprovMX privacy policy) to a mailbox at Proton AG (Switzerland, a country with an EU adequacy decision) (Proton privacy policy). We use e-mails only to reply.

How long

Online leaderboard entries: until you ask for deletion, at most 12 months after they are saved. Leaderboard spam protection: when a score is sent, a salted SHA-256 hash of your IP address (it cannot be turned back into the address) is stored for at most 24 hours, only to block leaderboard spam, and is then deleted. Statistics: aggregate figures only (IP address and browser at most 8 hours in server memory). Server logs at Supabase and GitHub: briefly, as set out in their policies. E-mails: deleted when the matter is closed. Data on your device: until you delete it.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and to object (GDPR Art. 21). Write to kontakt@stop60.no. To remove a leaderboard entry, give the nickname, the game (SNEAKY BUGS) and the approximate date.

You can also complain to a data protection authority: Datatilsynet (Norway), UODO (Poland, Prezes Urzędu Ochrony Danych Osobowych) or the authority where you live, e.g. the ICO (UK).

If you live in the UK, the UK GDPR and the Data Protection Act 2018 apply with the same rights (complaints to the ICO). If you live in India, the Digital Personal Data Protection Act 2023 (DPDP) applies, and you can also complain to the Data Protection Board of India.

Contact point, also for authorities and notices under the EU Digital Services Act (DSA): kontakt@stop60.no. Nicknames that break the law or the rules can be reported there and will be removed; where possible, we tell you why. To get your own nickname removed, give the nickname, the game and the approximate date.

Children

Anyone can play. The online leaderboard is only for players aged 16 or over (18 or over in India). If you are younger, play without it – nothing is sent. If a child has submitted a score anyway, email kontakt@stop60.no and we will delete it.

Changes

If the game starts to process data differently, we will update this page and the date at the top before the change takes effect.

Contact

kontakt@stop60.no · Terms & licences