Privacy policy

Last updated: 2026-10-18

This policy explains what Colony Isle (https://colonyisle.app, “the game”) stores about you, why, for how long, and what you can do about it. We keep only what the game needs to work, to stay safe and to get better. There is no advertising, no selling of data and no third-party tracking.

1. Who is responsible

The controller of your data is Mykhailo Zablotskyi, Pokotilovka, 62458, Ukraine. Contact for everything about privacy: m.zablotskyi177@gmail.com. You can also write through Report a problem in the game menu.

2. What we collect and why

2.1 Your player profile (everyone)

When you open the game, a guest profile is created for you: a game name (chosen by you or generated, like “Jolly Otter 27”), an avatar, the faction you last played, the number of games you played and won, and a random id of your browser. The browser keeps that id and a session key so that you stay the same player next time. Why: to run the game and keep your profile. Legal basis: performance of the service you asked for (GDPR Art. 6(1)(b)).

2.2 Account (optional)

If you sign up with email, we store your email address and your password as a one-way scrypt hash (we never see the password itself). If you sign in with Google, Google tells us your Google account id, your email address and your name (scopes openid email profile); we use the name only as the starting game name and do not store your photo or anything else from Google. Why: to let you sign in on any device and recover your account. Legal basis: Art. 6(1)(b).

2.3 Technical and visit data

Each time you open the game we record the time, your IP address, the country derived from it, your browser's user agent, language, time zone and screen size, how you signed in, and — on your first visit from a link — the website you came from (only its domain, e.g. “reddit.com”) and campaign tags in the link (utm_source, utm_medium, utm_campaign). We also record, per day, whether you entered a game room. Why: to protect the game from abuse (limits per IP address), to fix problems that only happen on some devices, and to count — only in our own database and only as totals — how many people visit, start and finish games and come back. Legal basis: our legitimate interest in a safe, working and improving game (Art. 6(1)(f)). You can object at any time (see section 7).

To find the country of an IP address, the server sends the address once to the free service api.country.is and caches the answer for 30 days. Your browser never contacts it.

2.4 Games and chat

To run a game the server keeps the room: its name, the players' names, colours and factions, the board, every move and the room chat. After a game we keep its result for statistics (scenario, players' names, colours, factions, points, winner, duration) and the list of moves for 30 days. Why: to play the game, to show results, to investigate bug reports and to balance the rules. Legal basis: Art. 6(1)(b) and (f). Other players in the room see your name, avatar, faction, moves and chat messages.

2.5 Bug reports and feedback

When you send a report through Report a problem, we store what you write, the contact you add (optional), your IP address and country, and technical details that help us reproduce the problem: the page address, browser, languages, platform, screen and window size, a log of the last events in your tab (including messages between your browser and the server, which can contain moves and chat lines), and a snapshot of your room and game at that moment (including the players' names and the chat, never passwords or keys). Legal basis: Art. 6(1)(f); you decide whether to send a report.

2.6 Error reports

If the page crashes, the browser sends the error message, a technical stack trace, the page address, the browser's user agent, the room code and your player id. Legal basis: Art. 6(1)(f).

2.7 Emails

We send only the letters you trigger: email confirmation and password reset. No newsletters, no marketing.

3. Who else gets data

• Hosting: Contabo GmbH (EU) runs the server and the database for us.
• Email delivery: the email provider we use to send confirmation and password letters receives your address and the letter.
• api.country.is receives IP addresses (see 2.3).
• Google — only if you choose to sign in with Google; its own privacy policy applies to what happens on Google's pages.
• Other players see what you show in a game (name, avatar, faction, moves, chat).

We do not sell or rent data, show ads, or use third-party analytics, trackers or social-media plugins. The fonts and all other files of the game come from our own server. Some of these providers may process data outside the EU/EEA; where that happens, the transfer relies on an adequacy decision (e.g. the EU–US Data Privacy Framework for Google) or the European Commission's standard contractual clauses.

4. How long we keep it

• Rooms with their chat: empty lobbies 10 minutes, finished games 6 hours, unfinished games 3 days after the last activity.
• Moves of past games, error reports, the IP-to-country cache: 30 days.
• Visit records (IP address, browser, source), room-entry statistics, bug reports: 1 year.
• Sign-in sessions: 180 days after their last use. Email links: 48 hours (confirmation) or 1 hour (password reset).
• Your profile and account: until you delete them. Results of finished games stay in the statistics without your name.
• Server logs (technical errors): rotated automatically, a few days.

5. Storage on your device — no cookies

The game uses no cookies. It keeps a few entries in your browser's local storage, all needed for the game you asked for: the session key and the browser id (to keep your profile), the language you chose, your last game name, your recent rooms and last scenario, whether you have seen the first-visit screen and the hints, and — per browser tab — your seat in the current room. The installable app version also caches the game's own files so it starts fast. Because all of this is strictly necessary for the service and nothing is used for advertising or third-party tracking, the law (ePrivacy Directive Art. 5(3)) does not require a consent banner. You can delete this data any time in your browser's settings; you will then start as a new guest.

6. Security

The site is served only over HTTPS. Passwords are stored as scrypt hashes, session keys and email links only as SHA-256 hashes. Access to the admin panel is limited to the operator.

7. Your rights

You have the right to access your data, to correct it, to have it deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests. You can change your name and avatar yourself in the profile. To delete everything: Profile → Account → Delete account (guests: Delete my data); see how to delete your account. For any other request write to m.zablotskyi177@gmail.com; we answer within one month. You may also complain to the data protection authority of your country.

When you delete your account we erase at once your name, avatar, email, password, Google link, browser id, sessions, and the IP addresses, browsers and sources of your visits; your bug reports lose their IP address and contact; finished games stay in the history with “—” instead of your name.

8. Children

The game has a chat with other players. If you are younger than 13, please play with the consent of a parent or guardian. We do not knowingly collect more data from children than described here; parents can ask us to delete a child's profile.

9. Changes

If we change this policy, we will update the date above and, for important changes, tell you in the game.