Plain and simple
Privacy policy
RedPandaOK! is a small, independent game. We collect as little as we can, we don’t sell data. The released app uses Google AdMob ads with privacy choices and required consent. This page explains what we collect and what our providers process.
Who is responsible
The data controller for the RedPandaOK! game and redpandaok.com is:
Michał Śnieżyński, sole proprietorship (jednoosobowa działalność gospodarcza)
Szymany 16A/3, 12-100 Szczytno, Poland
NIP (tax ID): 9532621635
Privacy questions and requests: privacy@redpandaok.com. Everything else: contact@redpandaok.com.
On this website
Visiting the site
The site is hosted by Vercel. Like any web server, it receives your IP address, browser type and the pages you request, and keeps them in short-lived technical logs for security and troubleshooting. A functional NEXT_LOCALE cookie remembers your language choice for one year; it is not used for tracking. We don’t use advertising cookies or tracking pixels.
Waitlist (“Keep me posted”)
If you join the waitlist, we store your email address, the platform you picked and where the signup came from in our database. Your email joins our common Resend audience for a welcome email and occasional updates about the game. Every update has an unsubscribe link.
Beta access requests
If you ask to join the beta, we collect your email address, your first name if you give it, your device type (iPhone or iPad) and, optionally, how you heard about us. First we email you a 6-digit code to confirm the address is yours; until you enter it, your details are kept only in an encrypted cookie in your browser for 10 minutes. Once confirmed, we store the request in our database and add your email to the same Resend audience as the waitlist. We email the request to our own inbox so we can review it, and send you a confirmation. If we approve the request, we add your email address to our TestFlight tester group in Apple’s App Store Connect, and Apple sends you the invite. The form also asks for your consent to occasional game news, which you can unsubscribe from at any time.
Form statistics
We send a completed-signup event to PostHog with the form (beta, Android or waitlist), platform, language and an opaque signup identifier. We do not send your email, name, IP address or free-text answers in this event. It sets no browser tracking cookie and does not create a PostHog person profile. Repeated requests share one event identifier.
Spam protection
Forms are protected by Cloudflare Turnstile, which checks your browser for signs of automated abuse and may set a cookie needed for that check. We also use your IP address, held briefly in server memory and not stored, to limit repeated submissions.
In the game
You can play without giving us your name or email. The game stores:
- An anonymous player ID, created on first launch, plus a sign-in token kept on your device so the game recognises you.
- Gameplay data: your progress, choices, skills, items, currencies, server, the explorer name you choose, and ranking results. Your explorer name and rankings are visible to other players.
- Technical data: the IP address and app user agent saved with each sign-in session, plus request and error details in server logs, used to keep the game secure, stop abuse and fix bugs. Rate-limit counters may be keyed by IP address.
- Purchase records: Apple transaction identifiers, products and purchase status, so we can deliver items, restore eligible purchases, apply refunds and prevent reuse of a transaction. Apple handles App Store payments and refund requests. Payment details stay with Apple; we never see them.
- Email address, only if you give it: when you request beta access, or if you choose to use the game's optional e-mail features. Only if you link an e-mail address or use it to sign in. We verify that you control the address to restore your linked profile.
Optional game analytics and session replays
Where available in your game version, you can choose to share game interactions and masked session replays with PostHog to help us improve the game. Collection starts only after your explicit consent. We use a random analytics identifier linked to your account, not your email address or explorer name. Events include screens, offers and verified purchases identified by product and price tier; payment details are not sent.
Inputs and text are masked, and account and payment dialogs are excluded from replays. Eligible game-world canvases may be recorded. This choice is optional, does not affect rewards and is separate from advertising consent. Change it in Settings → Help improve the game. Turning it off stops new collection; it does not itself delete data already collected. Contact us to request deletion.
Advertising and consent in the released app
Optional rewarded ads use Google AdMob. Its SDK may process your IP address (including an approximate location derived from it), device and advertising identifiers, app interactions, ad activity and diagnostics to deliver ads, measure performance and prevent fraud. This is subject to your privacy choices and any required consent; tracking requires your permission. Google’s handling of this data is explained in its privacy policy.
Where available, change ad consent in Settings → Privacy choices, and tracking permission in iOS Settings. Withdrawing consent does not affect earlier lawful processing. When AdMob is unavailable, we may show an in-house clip. Our game server records rewarded ad claims to deliver the reward and apply daily limits; it does not receive your ad consent strings.
TestFlight
Beta builds are delivered through Apple’s TestFlight. Apple runs TestFlight as its own controller under the Apple Privacy Policy. Apple shares with us your tester email and name, when you install and open the beta, crash reports, and any feedback and screenshots you send through TestFlight.
Why we use it (legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the game and your account, delivering purchases | Contract, Art. 6(1)(b) |
| Handling your beta request and inviting you through TestFlight | Your request (steps before a contract), Art. 6(1)(b), and your consent on the form, Art. 6(1)(a) |
| Waitlist and update emails | Consent, Art. 6(1)(a); withdraw any time by unsubscribing |
| Optional game analytics and session replays | Consent, Art. 6(1)(a); withdraw through Settings → Help improve the game |
| Security, abuse prevention, spam protection, fixing bugs | Legitimate interests, Art. 6(1)(f) |
| Keeping purchase and tax records | Legal obligation, Art. 6(1)(c) |
| Advertising personalisation and tracking, where consent is required | Consent, Art. 6(1)(a); withdraw through privacy choices or iOS Settings |
| Ad delivery, measurement and fraud prevention where permitted without consent | Legitimate interests, Art. 6(1)(f), subject to applicable consent requirements |
Who helps us
We use a few service providers who process data on our behalf, under data processing terms:
| Provider | What for | Where |
|---|---|---|
| Vercel | Website hosting and form handling | USA and global edge network |
| Cloudflare | DNS and Turnstile spam protection | Global network |
| PostHog | Form completion statistics without email addresses or names; optional game analytics and masked session replays | EU |
| Resend | Email lists and sending email | USA |
| Amazon Web Services | Game servers and database | USA (us-east-1, N. Virginia) |
| Migadu | Our mailbox, where requests and your emails arrive | Switzerland / EU |
| Apple | TestFlight, App Store and in-app purchases (Apple acts as its own controller) | USA and worldwide |
| Google AdMob | Rewarded advertising, consent, measurement and fraud prevention, subject to privacy choices and required consent | USA and worldwide |
Where data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses. We don’t sell your data. AdMob processes advertising data as described above.
Inside RedPandaOK!, only the owner can see player and beta-request data, including in an admin panel that only the owner can sign in to with a one-time email code, to run the game and keep the game fair and working.
How long we keep it
- Game account and gameplay data: until you delete your account. Data on test servers may be wiped earlier when a test server resets. Guest accounts that never finished the tutorial are deleted automatically after 30 days without activity.
- Beta requests: for as long as the beta runs, and at most 12 months after it ends, unless you ask us to delete them sooner.
- Waitlist and Android requests: news subscriptions last until you unsubscribe. Stored request history is retained until you ask us to delete it.
- PostHog session replays: retention is set to 30 days.
- PostHog events: retention follows our PostHog plan: 1 year on Free or 7 years on a paid plan. This applies to form statistics and optional game events. Retention does not replace our process for handling deletion requests.
- Sign-in sessions and rate-limit records: deleted by regular cleanup shortly after they expire.
- Server logs: only as long as needed for security and debugging, then deleted.
- Purchase records: as long as tax and accounting law requires (in Poland, generally 5 years from the end of the tax year).
- Transaction identifiers: also kept after account deletion to prevent a transaction being reused. They are detached from your deleted profile and game saves.
- AdMob data: retained by Google according to its privacy policy and your privacy choices; account deletion in our game does not delete data held independently by Apple or Google.
Deleting your data
In the game, open Settings → Account and choose Delete account. To confirm, type the last 6 characters of your Player ID. This permanently removes your profile, your players on every server and your sign-in sessions. It can’t be undone. Limited purchase records remain as described above. Deleting the app alone does not delete your account.
To remove your beta request or waitlist entry, or if you can’t open the game, email privacy@redpandaok.com. Leaving the TestFlight beta (TestFlight → RedPandaOK! → Stop Testing) removes the app but not your game data, so delete your account first if you want both gone.
Your rights
Under the GDPR you have the right to:
- access the data we hold about you and get a copy of it;
- have it corrected or deleted;
- restrict or object to how we use it, including objecting to processing based on legitimate interests;
- receive it in a portable format;
- withdraw consent at any time, without affecting what happened before.
Email privacy@redpandaok.com and we’ll answer within one month. We may ask you to confirm it’s your account, for example with your Player ID. You can also complain to a data protection authority, in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or the authority where you live.
Children
The beta request form and the waitlist are not meant for children under 16. If you believe a child has sent us their details, write to privacy@redpandaok.com and we’ll delete them.
Changes
If we change how we use data, we’ll update this page and the date at the top. For bigger changes we’ll also tell you in the game or by email.