Who runs Games
The data controller is Nicola Panero, Cervere (CN), Italy. For questions about personal data you can write to panero.nicola01.np@gmail.com.
What is processed
- Browsing: Vercel may process IP address, date, time, requested page and technical browser data to serve the site and protect it.
- Visit statistics: Vercel Web Analytics collects data on the public pages visited, where the visit came from, approximate geographic area and browser and device type, to show aggregated statistics.
- Performance: Vercel Speed Insights records loading times, responsiveness and visual stability, together with technical data about the browser, device and connection. Vercel describes these metrics as anonymous and not linked to an identifiable visitor.
- Solo games: the game state stays in the tab’s memory while you play; we do not send it to the server and we do not keep permanent records.
- Online games: Firebase Authentication creates a pseudonymous identifier without asking for a name or email and also processes IP address and technical browser data for authentication and security; Firestore stores the room code, participants, moves, results and, for Hormuz Strict, the hidden fleets.
- Contact: if you write to the email address above, we process the address and the content you choose to send.
Before sending, we strip parameters and fragments from page addresses. Online room pages are excluded from both tools: we send them no room codes, moves, fleets or Firebase identifiers. We do not record custom events about your actions in the games.
Your opponent only sees the information the game needs, not your technical identifier, email address or browsing data. In Hormuz Strict they only receive the results of their own scans: we do not send them the full position of your fleet.
Why it is needed
We use technical data to run and protect the site, and aggregated measurements to understand which pages are visited and to improve performance (legitimate interest, Art. 6(1)(f) GDPR, to the extent personal data is involved). The identifier and room data are used to provide the online game you request (Art. 6(1)(b) GDPR). Data you send by email is used to reply to you. Without a temporary technical identity the two players of a room cannot be told apart; solo games remain available.
Local storage and cookies
We use no advertising or analytics cookies and no profiling tools. We use a single technical cookie, lang: it remembers the chosen language (Italian or English) for one year, applies only to this subdomain and is written only when you switch language with the selector; deleting it falls back to your browser language. When you switch language, the temporary pausa:lang-handoff sessionStorage entry keeps the target language and your position on the page: it is removed by the destination page or when the tab closes. The pausa:muted localStorage entry only remembers whether you muted the sounds, until you clear the site data; it contains no scores or progress. This technical storage stays in the browser and does not require consent. Web Analytics and Speed Insights work without cookies: to count visits, Web Analytics uses a temporary hash derived from the request, which Vercel states is deleted after 24 hours. Statistics are not linked to the Firebase identity.
Solo games do not write progress to persistent storage. Only if you choose online games does Firebase use technical browser storage, limited to the Games origin, to keep your pseudonymous access and let you rejoin a room. No cookie is shared with the other subdomains.
For how long
- Solo game state disappears when you close or reload the tab.
- Online rooms expire after 48 hours without activity and are deleted by the next daily automatic job.
- A daily procedure requests the deletion of Firebase technical accounts inactive for at least 30 days. With high volumes or outages the request may happen in the following days; Google states that removal from backups can take up to 180 days.
- Vercel keeps statistics and metrics according to the terms of its services; the 24-hour limit concerns the temporary visit hash, not all aggregated data. Dashboard viewing windows are not a deletion period.
- Technical logs are kept by the providers under their own policies; emails for as long as needed to reply and handle the request.
Where data is processed
Vercel hosts Games and handles requests, technical logs, visit statistics and performance metrics. Details on processing are in Web Analytics and Speed Insights.
Google Firebase handles technical authentication and online games. The Firestore database is located in Turin, Italy. Firebase Authentication processes data in the United States even though the database is located in Europe. Providers may also process data outside the European Economic Area, under their respective agreements and applicable contractual safeguards, including standard contractual clauses.
Your choices
You can request access, rectification, erasure, restriction or portability of your data where applicable, and object to processing based on legitimate interest, by writing to panero.nicola01.np@gmail.com. We will reply within the time limits set by the GDPR. You can also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
Scope and updates
This policy applies to Games. External sites reachable through links have their own privacy policies. If the processing described here changes, we will update this page and the date shown at the top.