PRIVACY POLICY / VERSION 2.21 · EFFECTIVE 14 October 2026
Fair play.
For your data too.
This is the full information notice under Articles 13 and 14 of the GDPR. It says who the controllers are, what personal data UNDO.games stores in its database, why, on what legal basis, for how long, who else sees it and what you can demand from us. Written to be read, not to be survived.
- Your email sits in our database because it is your sign-in name.
- You can delete the account in Settings.
- We never sell player data or hand it to games.
- Export or correction takes one email.
Who the controllers are and how to reach us
The joint data controllers under Regulation (EU) 2016/679 (GDPR) for the UNDO.games hub at undogames.cz are:
- Richard Remeš, a sole trader, company ID 11744651, registered office Kmochova 3142/5, 400 11 Ústí nad Labem.
- Matěj Christián, a sole trader, company ID 09575316, registered office Hradešín 221, 282 01 Hradešín.
The controllers jointly decide why and how your data is processed. You can exercise your rights against either controller.
For anything about personal data — a question, correction, export, deletion, objection — write to studio@undocollective.cz. We are not required to appoint a data protection officer and have not appointed one; the controllers handle these requests directly.
What we keep in the database
Every account is tied to an email address — it is your sign-in name and contact address. We store it in our database together with the data below. We do not look up anything else about you.
- Account
- Email, internal account identifier, identifier at the sign-in service, creation and last update dates, and any account suspension. Your password is not in our database — the Supabase Auth sign-in service keeps it hashed and we cannot read it. Signing in with Google or Discord creates no UNDO password at all. Password reset links are sent by the same sign-in service as account confirmation.
- Profile
- Nickname, avatar, hub theme, game catalog look and the items you bought and equipped in the shop.
- Friends and activity
- Friend requests and accepted friendships, blocks, presence status, last visible presence, current game, profile visibility, sharing game milestones and likes. We do not store bios. Nicknames are checked by a basic inappropriate-word filter.
- Level and league
- Lifetime experience points (XP), daily credited play seconds and session clock checkpoints to prevent duplicate credit. Levels are derived from XP; league points and positions are calculated from existing session minutes, match results and game scores. For matches against people a game may send a technical match ID that pairs the opponents’ results; on its own it contains no personal data.
- Wallet
- UNDO coin balance and transaction history: amount, kind (welcome pack, daily bonus, challenge, play time, purchase), game and time.
- Saved games
- Cloud progress for games supporting saves: account, game, saved world data, revision and update time. It enables continuing on another device and is deleted with the account.
- Game activity
- Game sessions: game, cost, outcome (win, loss, draw, abandoned), seconds actually played, the flat statistics a game reports, and start, last-activity and end times. Also favorite games, dismissed control guides and the day of your last daily bonus.
- Hub messages
- Messages from the operator addressed to your account or a group of players: message content, pending, shown or cancelled delivery, and the times of queuing, display, main-button click and closure. We also store the total time the message is displayed in an active, visible browser tab; this measures display time rather than confirming it was read.
- Technical data
- IP address, browser type and request time in the operational and security logs of the hosting and database. Your sign-in session lives in secure cookies in your browser.
Email and nickname are mandatory: without them no account exists and the service contract cannot be performed. Avatar, theme and favorites are optional and leaving them out costs you nothing.
Where the data comes from
Most of it comes straight from you when you register, edit your profile and play. The rest is created by operating the service:
- Signing in with Google or Discord gives us your email, basic profile information and identifier from the selected account. We do not request posts, contacts, friends or a server list.
- A game running in the iframe reports its state, the outcome and the flat statistics it chooses to send. Supported games also save their world to your account so you can continue on another device.
- Your browser reports when hub messages are displayed and closed, main-button clicks, and their display time in a visible tab.
Why we process the data and on what basis
Each purpose comes with its legal basis under Art. 6(1) GDPR and the period we keep the data.
- Account, sign-in and hub operation
- Without an email and a profile we cannot provide the service. Hub operation includes messages and records of their delivery and display, for example a daily-reward reminder.Contract · while the account exists
- Wallet and play-time billing
- Balance, transactions and sessions are the service itself, and your own check on where the coins went.Contract · while the account exists
- Security and abuse prevention
- Operational and security logs, protection against fraud and account takeover.Legitimate interest · logs for up to 90 days
- Language and mobile/desktop choice
- Preference cookies so the site opens the way you left it.Necessary for a requested function · 30 days to 1 year
You can object at any time to processing based on legitimate interest — see Your rights.
Ads and payments
We do not show ads right now. If that changes, we will add the provider, purpose and legal basis here before switching them on.
You can buy coins in the coin machine. Payments are processed by Stripe (Stripe Payments Europe, Ltd., Ireland) — by card, Apple Pay or Google Pay. You enter card details directly into Stripe's payment window; they never reach us. For each purchase we store: the Stripe payment ID, the pack, number of coins, amount, currency, status (paid, refunded, disputed), time, and when you gave express consent to immediate delivery and for which version of the terms. Stripe receives your e-mail (for the payment receipt) and an internal account ID.
The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and our tax and accounting obligations (Art. 6(1)(c)). Limits on payment attempts protect against card misuse (legitimate interest, Art. 6(1)(f)). Stripe processes payment data and fraud checks as an independent controller under its policy at stripe.com/privacy.
Who receives the data
We never sell your data or lend it for someone else’s marketing. Only these providers process it for us:
- Supabase
- Sign-in and the account database, project hosted in the European region.Processor
- Vercel
- Hosting and delivery of the site, European region.Processor
- Google / Discord
- The provider you choose verifies your identity and shares the information required for sign-in. Only the service you select is used.Independent controllers
- Stripe
- Coin payments (card, Apple Pay, Google Pay), e-mail payment receipts, fraud prevention.Independent controller of payment data
Games are a case of their own: they run in an isolated iframe and receive only the internal player identifier, nickname, avatar, coin balance, language and equipped cosmetics. Never your email or sign-in session. Back to us they report the game state, the outcome, statistics and, for supported games, cloud save data.
Other signed-in players see how many people are playing each game right now and, for up to four of them, the avatar colour and the first letter of the nickname. In a game's detail they also see the full nickname and avatar (linking to the player page) of up to twelve players whose player page is visible to all signed-in players. If you limit it to friends or yourself, you are only counted. Only sessions active in the last 3 minutes count; your email is never shown and invisible mode hides you completely.
Your player page shows signed-in players your nickname, avatar, the background equipped in the wardrobe, favorite games, selected game statistics and registration month. You can restrict it to friends or just yourself. Only accepted friends see presence, current game and last visible presence. Invisible mode hides live presence, your face beside an active game and game milestones in the feed; leaderboard results remain. Your email, wallet and transaction history stay private.
Your player page includes your level and lifetime XP from active play, capped at 120 XP per day. Only you see daily progress. Initial XP is calculated from previously stored play time, without publishing historical milestones. Selected new levels can appear in your friends' Activity according to your sharing and presence settings. These records and clock checkpoints are deleted with your account.
The UNDO league shows signed-in players nicknames, avatars, levels, league points and positions for today, this week and all time. Only active accounts whose profiles are visible to all players and scores from published games count. Restricting your profile to friends or yourself removes your results from the league; individual game leaderboards follow their own rules. The friends filter does not change the shared points calculation. The league also shows the latest point credits (nickname, avatar, game, minutes played or win/draw, and time) and, after Sunday 8 pm, the winner of the week with their points. The prize is recorded on the winner’s account (a wardrobe item or coins) so it can be claimed only once.
Activity contains system-generated milestones from friends and official UNDO Games posts. You can disable milestone sharing. Posts show a like count and up to three avatars of your own friends who reacted. Friendships, blocks, milestones and likes are removed with your account. Presence stores the latest state, not a movement history; spam prevention stores rolling hourly action counters.
Game invitations store the sender, recipient, game, lobby code, time and acceptance and connection status. They are addressed only to an accepted friend and can be accepted for two minutes; the sender can also see the connection status. Do Not Disturb and Invisible modes do not accept invitations. Blocking or removing the friendship prevents further acceptance. Accepting creates your own game session and does not share the sender's sign-in or session. Invitation and lobby records are deleted with the relevant account.
Games with a leaderboard show their signed-in players the nickname, avatar colour and best score of the top twenty players of the week and of all time. Scores are stored with the match result for as long as the account exists.
We also hand data to public authorities where the law requires it.
Transfers outside the European Union
The database and hosting run in the European region. Vercel and Stripe (parent Stripe, Inc.) are US companies, so a transfer to a third country may occur. It relies on the European Commission’s standard contractual clauses, or on an adequacy decision (the EU–US Data Privacy Framework) for certified recipients. We will send you a copy of the safeguards on request.
How long we keep it
- Profile, wallet, cloud saves, game history and hub-message deliveries for as long as the account exists. Message deliveries, including display time and clicks, are deleted with the account.
- After deletion, data may linger in security backups for up to 30 days and then disappears.
- Operational and security logs for up to 90 days.
- Coin purchase records as tax records for 10 years from the end of the year of payment, even if you delete your account (they are detached from the account; only the payment remains).
- Data needed to defend legal claims until the claim is time-barred.
Your rights
Under the GDPR you have the following rights towards us:
- Access — confirmation that we process your data, and a copy of it.
- Rectification — nickname you can fix in your profile, the rest on request.
- Erasure — delete the account in Settings, or write to us. We delete the profile, wallet and game history. Only records we must archive by law remain.
- Restriction — while we resolve disputed accuracy or an objection.
- Portability — an export of the data you gave us in a machine-readable format.
- Objection — against processing based on legitimate interest.
- Withdrawal of consent — at any time for processing that would rely on consent; none is running today.
- Not to be subject to automated decision-making — we do none, see the section below.
Write from the email you sign in with to studio@undocollective.cz. We reply within one month at the latest; for complex requests we may extend that by two more months and will tell you. Handling a request is free. If we cannot verify that the request is really yours, we may ask for additional information.
Complaint to a supervisory authority
If our answer is not enough, you can turn to the Czech Data Protection Authority (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz. You may also complain to the supervisory authority in your country of residence or where the infringement took place.
Player age
An account may be created by a player aged 13 or over; younger players only with the consent of a legal guardian. We do not knowingly process children’s data. If we find an account belongs to a child without the required consent, we delete it.
How we protect the data
The site runs over HTTPS only, with a strict content security policy. Passwords are kept hashed by the sign-in service and we cannot read them. Service keys and secrets stay on the server and never reach the browser. Games run in an isolated iframe and may exchange only strictly defined messages from a single origin. Only the operators have access to the database.
Automated decision-making and profiling
We do neither. No automated system judges you with legal or similarly significant effects, and we do not build profiles for targeted advertising. Game statistics serve your profile and the hub’s aggregate overviews.
Changes to this policy
We will update this policy when a feature or a provider is added. The current version and effective date are at the top. We announce material changes on the site, or by email, before they take effect; earlier versions are available on request.
Questions about your data: studio@undocollective.cz · Terms
Version 2.21, effective 14 October 2026.