Privacy Policy
This policy explains what personal data Swish & Legacy (the “Game”) processes, why, and what rights you have. We keep data collection to a minimum: you can play without an account and without giving us any personal data.
1. Who is responsible
The data controller is Biel Diaz Basullas, with address at Carrer Sant Onofre, 4, 08272 Sant Fruitós de Bages (Barcelona). You can contact us at bieldiazbasullas@gmail.com.
2. What data we process
- Game data stored in your browser. Your career in progress, Hall of Fame and settings are saved in your own browser (localStorage). They are not sent to us and we cannot see them.
- Account data (optional). If you create an account or sign in with Google, we process your email address, display name (if you use Google) and a unique user ID. Passwords are handled by Firebase Authentication; we never see or store your password.
- Achievements. If you are signed in, the achievements you unlock and their dates are stored in Cloud Firestore, linked to your user ID, so they sync across your devices.
- Technical data. Our hosting provider processes your IP address, browser and request data in server logs to deliver the site and keep it secure.
- Advertising and analytics (only with your consent). If you accept them, Google AdSense and, if enabled, an analytics tool may set cookies or use identifiers. See our Cookie Policy.
- Messages. If you email us, we process your email address and the content of your message to reply.
3. Why we process it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account and syncing achievements | Performance of the service you request (Art. 6.1.b) |
| Hosting, security and preventing abuse | Legitimate interest (Art. 6.1.f) |
| Advertising and analytics cookies | Your consent (Art. 6.1.a), which you can withdraw at any time |
| Answering your messages | Legitimate interest / your request (Art. 6.1.f / 6.1.b) |
4. Who receives your data
- Google (Google Ireland Ltd. / Google LLC) — Firebase Authentication, Cloud Firestore and, if you consent, Google AdSense.
- Vercel Inc. — hosting and delivery of the website.
These providers act as processors or independent controllers under their own terms. Some of them are located outside the European Economic Area (for example in the United States); transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell your data.
5. How long we keep it
Account data and achievements are kept until you ask us to delete your account. Server logs are kept by the hosting provider for a short period. Consent choices are stored in your browser until you change or clear them. Messages are kept for as long as needed to handle your request.
6. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise them, write to bieldiazbasullas@gmail.com from the email address of your account. To delete your account and its data, send us that request. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority.
7. Children
The Game is not directed at children under 14. In Spain, a minor under 14 needs parental consent to create an account. If you believe a child has given us personal data without that consent, contact us and we will delete it.
8. Security
We rely on the security measures of Firebase and our hosting provider (encrypted connections and access controls) and restrict access to account data so that each user can read and write only their own record.
9. Changes to this policy
We may update this policy when the Game changes. The date at the top shows the latest version.