PRIVACY POLICY
Your privacy matters. We're committed to being transparent about how we collect and use your data.
Introduction
Welcome to Pointless Button ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.
TL;DR: We only collect what we need to make the game work. We don't sell your data, and you can delete your account anytime. Now go push that button!
Data Controller
Pointless Button is operated by Balazs Simon (sole proprietor), who serves as the data controller responsible for your personal data.
For any privacy-related questions or requests, submit a ticket:
Submit Privacy RequestData We Collect
We collect the following categories of personal data:
Account Information
- • Username: Your display name
- • Email: For verification
- • Country: Optional
Game Data
- • Push Stats: Counts, streaks
- • Rewards: PBits, items
- • Preferences: Button, avatar
Technical Data
- • IP Address: Security
- • Session: Stay logged in
- • Timestamps: Activity
- • Click timing: When each click happened, kept for up to a day to spot automated clicking
- • Human check: After long nonstop play, Cloudflare Turnstile confirms you are a person; Cloudflare sees your IP address and browser signals for that check
Legal Basis for Processing
We process your personal data under the following legal bases (GDPR Article 6):
- ✓ Contract Performance: Processing necessary to provide our game service to you
- ✓ Legitimate Interest: Security, fraud prevention, and service improvement
- ✓ Consent: For optional features like marketing emails
Cookies & Similar Technologies
We use cookies to make our service work properly. Here's what we use:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Essential | Session management, authentication, security (CSRF protection) | No - Required for site to function |
| Functional | Remember your preferences (login, settings) | No - Legitimate interest |
| Marketing Emails | Promotional emails (not cookies). Not opted-in by default. You can opt-in via "Get Free PBits" to receive occasional offers in exchange for bonus PBits. | No - Opt-in only |
Since we only use essential and functional cookies, no consent banner is required. We do not use any third-party visitor analytics or tracking product. We do work out our own totals from account activity — how many people played, signed up or bought something on a given day — and those are only ever reported as totals, never used to build a profile of you.
Data Retention
We keep your data for as long as your account is active. Specifically:
When you delete your account, we remove or anonymize your personal data immediately.
Data Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms:
- ✓ We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Article 33)
- ✓ If the breach is likely to result in a high risk to you, we will notify you directly without undue delay (GDPR Article 34)
- ✓ Notifications will include the nature of the breach, likely consequences, and measures taken
Your Rights (GDPR Articles 15-22)
As a user, you have the following rights regarding your personal data:
How to Exercise Your Rights: Visit your account settings to download your data or delete your account, or submit a privacy request ticket. We will respond within 30 days.
Data Sharing & Third-Party Services
We share data with these categories of service provider:
- • Payments — Card payments are handled by a PCI DSS compliant processor. We never store your card details.
- • Hosting — Runs the application. Our servers are in the EU.
- • Content delivery and protection — Delivers the site and defends it against attacks. No tracking cookies.
- • Error monitoring — Loaded only when you are signed in. Sets no cookies and never receives your name or email.
- • Authentication Providers — Google, Facebook, GitHub, Discord, Twitter/X, Twitch, Steam. Used for login only — we receive your name and email.
- • Other Users: Public game data only (username, leaderboard stats)
- • Your player page: Every account has a public page showing the same game data as the leaderboards — your username, flag, avatar, pushes, records and ranks. No email, no location, no activity times.
- • Legal: If required by law or to protect our rights
We never sell your personal data.
International Transfers
Our application servers and database are in the European Union.
Some of our service providers operate global networks or are based outside the EU. Where data leaves the EU, the transfer is covered by the safeguards required under Article 46 GDPR — standard contractual clauses or an equivalent approved mechanism — set out in our agreement with each provider. Contact us if you would like details.
- • Content delivery and protection — routes and filters your requests through a global network, which processes your IP address in transit.
- • Payments — card details go directly to the payment processor. We never receive or store them.
- • Error monitoring — if you are signed in, error reports may be processed outside the EU. They contain technical diagnostics and an anonymous account number, never your name or email.
Children's Privacy
Our service is not intended for children under 13 (or 16 in some EU countries). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
Security
We implement appropriate technical and organizational measures:
- • Encryption in transit and at rest
- • Secure authentication & password storage
- • Access controls & security monitoring
- • Fraud detection systems
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes via email or by posting a notice on our website. The "Last Updated" date at the top indicates when changes were last made.
Contact Us
For privacy questions, data requests, or concerns:
Submit Privacy RequestYou also have the right to lodge a complaint with your local data protection authority.
Curious what other players can actually see about you? It is only what is on the Hall of Fame and in Ranked Divisions — a username, a country and a score.