SpikeDash Zone / Legal
Privacy
Policy
Last updated: 12 August 2026
1. Controller
SpikeDash Zone is operated by Semy WEB GbR, Zaunkönigstraße 7, 82140 Olching, Germany. The legal contact details and privacy contact are listed in our Legal Notice (Impressum). You can contact us at support@semy-games.com.
2. What the game stores
To provide player profiles and game progress, SpikeDash Zone may process the following information:
- the unique player name you choose;
- scores, progress, coins, completion status and the level identifier;
- the names and data of up to seven levels created in the editor;
- a randomly generated profile token. The server stores a hash of this token, not the token itself;
- a separate randomly generated deletion code. The server stores only a hash of this code;
- technical request information needed to operate and protect the API, such as IP address, date and time, requested path, user agent, response status and error information in server logs.
No email address, password or social-login account is required. The browser or Android app also stores the local profile token, recovery code and deletion code in local storage. Local settings, offline progress and editor levels may remain on the device until the app data is cleared. If local storage is cleared, an online profile can be restored with its recovery code; an offline-only profile cannot be restored after its local data is removed.
3. How we use the data
We use the data to create and operate the player profile, save scores and progress, display the leaderboard, save up to seven player-created levels, provide offline play, prevent abuse and maintain the security and reliability of the API. The player name may be shown publicly in the leaderboard. We do not sell player data and do not use it for advertising or behavioural profiling.
The legal basis is the performance of the game service requested by you under Article 6(1)(b) GDPR, and our legitimate interest in operating and protecting the service under Article 6(1)(f) GDPR.
4. Offline mode
If the online service is unavailable, you can continue offline. Offline progress remains on your device and is not sent to the leaderboard until an online profile is created.
5. Retention and deletion
Online profile data, scores, progress, player-created level data and the stored hashes of the profile token, recovery code and deletion code are retained while the profile remains active. There is currently no automatic deletion based on inactivity. After a verified deletion request, the live profile, scores, progress, levels and associated token hashes are deleted from the database immediately, unless a longer retention period is required by law.
Nginx and PHP-FPM access and error logs are configured to rotate and be deleted within a maximum of 30 days. A longer period applies only where required for a specific security investigation or legal obligation. Local data on a device is controlled by the user and can be removed by clearing the app or browser data.
6. Service providers and sharing
The game uses hosting, PHP-FPM and MySQL infrastructure. Hosting and infrastructure providers may process technical request data and stored game data only as needed to operate, secure and maintain the service, under applicable data-processing arrangements. We do not share player data with advertisers, analytics companies or social-login providers. The current version does not include advertising, third-party analytics, payments or social login.
7. Your rights
You can delete your profile and associated scores, progress and saved level from the Profile & privacy section in the game. You can also use the public profile deletion page. Both methods require your player name and private deletion code. The name alone is not sufficient, and failed requests do not disclose whether a profile exists. The deletion code is shown in the game, is stored by the server only as a hash, and cannot be recovered by support. Once verified, the profile and associated game data are permanently deleted. Contact us using the address in our Legal Notice (Impressum) for other privacy requests.
The recovery code restores access to an online profile after local app or browser data is cleared. The deletion code permanently deletes the profile and must not be shared. Subject to applicable law, you may request access to, correction of, restriction of or objection to the processing of your personal data, as well as data portability. You also have the right to lodge a complaint with a competent data-protection supervisory authority.
8. Changes
We will update this page when the game adds features such as advertising, analytics, payments or new online functionality. The date at the top shows when this page was last changed.