PRIVACY POLICY

UPDATED 14 OCTOBER 2026

Rink Freaks is a browser game run by Martin Adámik, Slovakia (“we”). This page says what we keep about you, why, and what you can ask us to do with it. Questions or requests: hi@merton.sk.

What we keep

  • Your account: username, e-mail address, whether you confirmed it, and your password as a one-way hash — never the password itself.
  • Signing in with Google or Discord: the provider’s id for you, the e-mail it reports, and your first name (Google) or handle (Discord) to suggest a username. We never get your Google or Discord password.
  • Playing as a guest: the same game data, tied to a cookie in your browser instead of an e-mail.
  • The game itself: your teams, players, matches, items, missions, messages you send to other players and every movement of gold and crystals.
  • Purchases: what you bought, when and for how much. Payments are handled by Stripe — we never see or store your card.
  • Network address: a keyed hash of it (not the address) when you sign up and sign in, so invite rewards cannot be farmed from one connection.
  • Notifications: if you turn them on, the address your browser gives us to deliver them, and which topics you switched off.
  • E-mails we sent you and whether they were delivered.
  • The Beta waiting list: your e-mail, your phone (iPhone or Android), your language and when you confirmed, so we can send your invite. Kept until you leave with the link in its e-mails.

Why

  • To run your account and the game, and to keep it fair (contract).
  • To process purchases and keep the records the law requires (contract, legal obligation).
  • To stop abuse such as fake accounts farming rewards (legitimate interest).
  • Season news by e-mail and push notifications only if you turned them on (consent — switch them off any time in Settings or from the link in each e-mail).

We do not sell your data, and there is no advertising tracking in the game.

Who else handles it

  • Vercel — hosting. Neon — the database, in the EU (Frankfurt).
  • Stripe — payments. Resend — sending e-mails. Sentry — crash reports from the app: the device model and system, the app version and your account number, never your name or e-mail.
  • Google and Discord — only if you sign in with them.
  • Your browser’s push service (Google, Apple or Mozilla) — only if you turn notifications on.

Some of them are based outside the EU; they work under the EU’s standard contractual clauses or an adequacy decision.

Cookies and storage

  • A sign-in cookie, needed for the game to work.
  • An invite cookie for 30 days after you open a friend’s invite link, so they get credit.
  • A language cookie remembering the language you picked.
  • Small settings in your browser’s storage, such as a card you closed.

No advertising or analytics cookies.

How long

  • Your account and game history: until you ask us to delete the account.
  • A guest who has not played for 7 days: deleted automatically, team and all.
  • Purchase records: as long as tax and accounting law requires.

Your rights

You can ask for a copy of your data, to correct it, to delete your account, to restrict or object to how we use it, and to move it elsewhere. Write to hi@merton.sk from the e-mail on your account. You can also complain to the data protection authority — in Slovakia the Úrad na ochranu osobných údajov SR.

The game is not meant for children under 16.

Changes

If this policy changes in a way that matters, we will say so in the game before it applies. See also the terms of service.