PRIVACY POLICY
UPDATED 14 OCTOBER 2026
Rink Freaks is a browser game run by Martin Adámik, Slovakia (“we”). This page says what we keep about you, why, and what you can ask us to do with it. Questions or requests: hi@merton.sk.
What we keep
- Your account: username, e-mail address, whether you confirmed it, and your password as a one-way hash — never the password itself.
- Signing in with Google or Discord: the provider’s id for you, the e-mail it reports, and your first name (Google) or handle (Discord) to suggest a username. We never get your Google or Discord password.
- Playing as a guest: the same game data, tied to a cookie in your browser instead of an e-mail.
- The game itself: your teams, players, matches, items, missions, messages you send to other players and every movement of gold and crystals.
- Purchases: what you bought, when and for how much. Payments are handled by Stripe — we never see or store your card.
- Network address: a keyed hash of it (not the address) when you sign up and sign in, so invite rewards cannot be farmed from one connection.
- Notifications: if you turn them on, the address your browser gives us to deliver them, and which topics you switched off.
- E-mails we sent you and whether they were delivered.
- The Beta waiting list: your e-mail, your phone (iPhone or Android), your language and when you confirmed, so we can send your invite. Kept until you leave with the link in its e-mails.
Why
- To run your account and the game, and to keep it fair (contract).
- To process purchases and keep the records the law requires (contract, legal obligation).
- To stop abuse such as fake accounts farming rewards (legitimate interest).
- Season news by e-mail and push notifications only if you turned them on (consent — switch them off any time in Settings or from the link in each e-mail).
We do not sell your data, and there is no advertising tracking in the game.
Who else handles it
- Vercel — hosting. Neon — the database, in the EU (Frankfurt).
- Stripe — payments. Resend — sending e-mails. Sentry — crash reports from the app: the device model and system, the app version and your account number, never your name or e-mail.
- Google and Discord — only if you sign in with them.
- Your browser’s push service (Google, Apple or Mozilla) — only if you turn notifications on.
Some of them are based outside the EU; they work under the EU’s standard contractual clauses or an adequacy decision.
Cookies and storage
- A sign-in cookie, needed for the game to work.
- An invite cookie for 30 days after you open a friend’s invite link, so they get credit.
- A language cookie remembering the language you picked.
- Small settings in your browser’s storage, such as a card you closed.
No advertising or analytics cookies.
How long
- Your account and game history: until you ask us to delete the account.
- A guest who has not played for 7 days: deleted automatically, team and all.
- Purchase records: as long as tax and accounting law requires.
Your rights
You can ask for a copy of your data, to correct it, to delete your account, to restrict or object to how we use it, and to move it elsewhere. Write to hi@merton.sk from the e-mail on your account. You can also complain to the data protection authority — in Slovakia the Úrad na ochranu osobných údajov SR.
The game is not meant for children under 16.
Changes
If this policy changes in a way that matters, we will say so in the game before it applies. See also the terms of service.
