Privacy Policy
Last updated: 2026-06-21
This Privacy Policy describes how Cidle (operated by Sebastian Stepien, Norway - "we", "us") collects, uses, and protects your information when you use the game.
1. Data we collect
- Account data: username, password (stored as Argon2 hash), optional email address.
- Technical data: IP address (for rate limiting and abuse prevention), session tokens, login timestamps.
- Gameplay data: your in-game progress, resources, bases, cosmetics, purchases, and activity counters.
- Notification data: if you enable push notifications, your browser's push subscription endpoint.
- Payment data: we never store credit card details. Payments are processed by Stripe (web), Apple, Google, Steam, or Epic depending on the platform you use.
2. How we use your data
- To provide and operate the game.
- To authenticate you and maintain your session.
- To deliver push notifications you have opted into.
- To detect and prevent abuse (e.g. IP-based rate limiting and bans).
- To process and verify in-game purchases.
3. Third parties
We share limited data with the following third parties only as necessary:
- Stripe - payment processing on the web platform. See stripe.com/privacy.
- Apple, Google, Steam (Valve), Epic Games - payment processing on their respective platforms when you purchase through their stores.
- Cloudflare Turnstile - bot prevention on registration. See cloudflare.com/privacypolicy.
- Web push providers - Mozilla, Google, Apple, depending on your browser, to deliver notifications you have opted into.
4. Data retention
We retain your account and gameplay data for as long as your account exists. If you delete your account, your data is removed within 30 days, except where retention is required by law (e.g. tax records related to purchases).
5. Your rights (GDPR / EEA / UK)
If you are in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and data.
- Export your data in a machine-readable format.
- Lodge a complaint with your national data protection authority (in Norway: Datatilsynet).
You can exercise these rights from your in-game account settings, or by contacting us at the address below.
6. Children
Cidle is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
7. Security
Passwords are hashed with Argon2. Sessions use secure HTTP-only cookies. Communication uses HTTPS. No system is perfectly secure; we encourage you to choose a strong, unique password.
8. Changes
We may update this policy from time to time. Material changes will be announced in-game. The "Last updated" date at the top reflects the current version.
9. Contact
For questions or to exercise your rights, contact: sebstepet@gmail.com