PRIVACY POLICY

👋

Introduction

Welcome to Pointless Button ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

👤

Data Controller

Pointless Button is operated by Balazs Simon (sole proprietor), who serves as the data controller responsible for your personal data.

For any privacy-related questions or requests, submit a ticket:

📊

Data We Collect

We collect the following categories of personal data:

⚖

Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• ✓ Contract Performance: Processing necessary to provide our game service to you
• ✓ Legitimate Interest: Security, fraud prevention, and service improvement
• ✓ Consent: For optional features like marketing emails

🍪

Cookies & Similar Technologies

We use cookies to make our service work properly. Here's what we use:

Since we only use essential and functional cookies, no consent banner is required. We use privacy-friendly server-side analytics that don't use cookies.

📅

Data Retention

We keep your data for as long as your account is active. Specifically:

When you delete your account, we remove or anonymize your personal data immediately.

🚨

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms:

• ✓ We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Article 33)
• ✓ If the breach is likely to result in a high risk to you, we will notify you directly without undue delay (GDPR Article 34)
• ✓ Notifications will include the nature of the breach, likely consequences, and measures taken

🔐

Your Rights (GDPR Articles 15-22)

As a user, you have the following rights regarding your personal data:

👥

Data Sharing & Third-Party Services

We share data with these categories of service provider:

• • Payments — Card payments are handled by a PCI DSS compliant processor. We never store your card details.
• • Hosting — Runs the application. Our servers are in the EU.
• • Content delivery and protection — Delivers the site and defends it against attacks. No tracking cookies.
• • Error monitoring — Loaded only when you are signed in. Sets no cookies and never receives your name or email.
• • Authentication Providers — Google, Facebook, GitHub, Discord, Twitter/X, Twitch, Steam. Used for login only — we receive your name and email.
• • Other Users: Public game data only (username, leaderboard stats)
• • Your player page: Every account has a public page showing the same game data as the leaderboards — your username, flag, avatar, pushes, records and ranks. No email, no location, no activity times.
• • Legal: If required by law or to protect our rights

We never sell your personal data.

🌎

International Transfers

Our application servers and database are in the European Union.

Some of our service providers operate global networks or are based outside the EU. Where data leaves the EU, the transfer is covered by the safeguards required under Article 46 GDPR — standard contractual clauses or an equivalent approved mechanism — set out in our agreement with each provider. Contact us if you would like details.

• • Content delivery and protection — routes and filters your requests through a global network, which processes your IP address in transit.
• • Payments — card details go directly to the payment processor. We never receive or store them.
• • Error monitoring — if you are signed in, error reports may be processed outside the EU. They contain technical diagnostics and an anonymous account number, never your name or email.

📝

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or by posting a notice on our website. The "Last Updated" date at the top indicates when changes were last made.