1. Who we are
2. Data we collect
Account and sign-in. Depending on how you log in:
• Telegram: your numeric Telegram ID, first and last name, username and profile photo URL.
• Google: your Google account ID, name, e-mail address and profile photo URL.
• Discord: your Discord ID, username, e-mail address, avatar, and whether you are a member of the CyberCookie Discord server and its roles.
Game data. Coins, energy, upgrades, cards, achievements, missions, friends, guild, game statistics, preferences, and the pictures and names you choose (display name, username, avatar, guild name and description).
Technical data. Your IP address (kept as a hash and as the last address used, only to prevent fraud and multi-accounting), session and login tokens, the type, operating system and browser of the devices you play on, the push-notification tokens of your devices, and error logs.
Purchases. When you buy something we receive the transaction reference and status from the payment provider (Google Play, Stripe, Telegram Stars or the blockchain). We never see or store your card number.
Wallets and crypto payments. If you link a wallet we store its public Solana and/or TON address and a signed proof that you own it. We never ask for or store your seed phrase or private key. When you pay in crypto we create a one-time deposit address for the order and record the amount, network and transaction reference. Blockchain transactions are public and permanent: we cannot erase them.
Android app. The app asks for the permissions it needs: Internet, notifications, vibration and billing. It does not use your location, contacts, camera, microphone, photos or SMS.
We do not run third-party advertising and we do not sell your data.
3. Why we use it
• Provide the game (contract): create and secure your account, calculate your progress, show leaderboards and friends, deliver purchases.
• Keep the game fair and safe (legitimate interest): detect cheating, multi-accounts and abuse, moderate names, pictures and reports.
• Notifications (consent): push notifications about friend requests, duels, trades and events. You can switch them off in Settings or in your phone.
• Improve the service (legitimate interest): aggregated statistics.
4. Who receives your data
We only use service providers needed to run the game:
• netcup GmbH (Germany): hosting of our servers, database and image storage.
• Cloudflare: network protection and the Turnstile captcha.
• Google: Google Sign-In, Google Play Billing and Firebase Cloud Messaging (Android notifications).
• Discord and Telegram: login and platform features you choose to use.
• Stripe: card payments on the web.
• Telegram Stars and blockchains (Solana, TON): Stars payments and public on-chain transactions for crypto purchases.
Your profile name, picture, level and public statistics are visible to other players. Profiles can be set to private in Settings.
5. How long we keep it
We keep your data while your account exists. When you delete your account, your profile, progress, cards, friends and device tokens are erased. Payment records are kept for the period required by accounting law, and moderation logs for a limited time to prevent abuse.
6. Your rights and deleting your account
You can access, correct, export and delete your data:
• Delete your account in the app: Settings → Delete account. You can also follow the steps on cybercookie.party/en/delete-account or e-mail us.
• Download your data: Settings → My data (JSON or CSV).
• Other rights (objection, restriction, complaint to your data protection authority, for example the CNIL in France): contact [email protected].
7. Children
CyberCookie is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from them. If you think a child gave us data, contact us and we will delete it.
8. Security and transfers
Connections are encrypted (HTTPS). Access to data is restricted, requests are rate-limited, and passwords are never stored because we use Telegram, Google and Discord sign-in. Some providers (Google, Cloudflare, Discord, Telegram, Stripe) may process data outside the EU under their own safeguards.
9. Changes
We will post any change to this policy on this page with a new date.
10. Contact
[email protected]
CyberCookie.party, Paris, France