Privacy policy

Greenveil game and website · Updated 5 October 2026

Who is responsible?

Oliver Fucec, Linz, Austria. Contact: [email protected].

What we process and why

Service providers

Supabase provides authentication, databases, storage and online services. Cloudflare hosts the website, downloads and support forwarding. Resend delivers account emails and receives/forwards support mail to the operator's Gmail mailbox (Google). Expo and Firebase/Google provide Android push delivery. Providers may process data outside the EEA under their applicable processing terms and transfer safeguards. We do not sell player data or use advertising trackers in this alpha.

Local storage and permissions

The app stores local progress, preferences and sign-in sessions on your device. Website account flows use authentication data; language/display preferences and hosting security mechanisms may use essential storage. You can play as a guest, but uninstalling can erase local progress. Revoking step or notification permission stops access through that permission; previously saved records are not automatically deleted.

Legal grounds and retention

Account and gameplay processing supports the service you request (GDPR Article 6(1)(b)); security and moderation support legitimate interests in a safe service (Article 6(1)(f)). Optional health-data access is based on your consent, including explicit consent where GDPR Article 9 applies; you can withdraw it through permission/settings controls or contact us. Account-linked data is retained while the account is active unless deleted or no longer needed. Deletion requests cover associated personal data; any limited legal/security retention must have a specific reason and period explained in our response. Provider backups can expire later under their retention cycles and are not used to restore a deleted account.

Your choices and rights

You may request access, correction, export, deletion, restriction or object to processing, and withdraw consent where applicable. Contact support; requests are handled without undue delay, normally within one month, with notice if a lawful extension applies. You may complain to the Austrian Data Protection Authority: dsb.gv.at.

Request account and data deletion

This policy describes the current alpha. Material changes will be reflected here.