Privacy policy

Who is responsible

GeekedGames.io is independently operated in Poland. The current operator’s legal identity has not yet been added to this notice. The operator is responsible for the personal data processing described here. Contact contact@geekedgames.io for privacy questions or to exercise your rights.

Information on your device

Saved game IDs, recently played game IDs and your light/dark preference are kept in your browser’s local storage. There is no player account or cross-device synchronisation. These values remain until you clear them or your browser removes them; people using the same browser profile may see your lists.

Use Preferences to clear saved and recent game lists. Your browser’s site-data controls also remove the theme preference. Five Nights at Camp Nou uses the local storage key last-shift-save for unlocked nights, completion, volume, mute, look sensitivity, camera motion and effects settings. Clearing saved or recent game lists does not erase this game progress; clearing this site’s browser data does. Progress is not uploaded to a player account or cloud-save service.

Game play measurements

When a playable game loads, the site generates a random session identifier and sends the game ID and session identifier to our server. It records the session’s start time, last activity and active seconds. Active time is measured while the game page is visible and focused. This supports play counts and popularity and trending rankings.

The game analytics database does not store your name, email address or IP address. The session identifier is held in page memory, not in a tracking cookie or a player account. It is pseudonymous session data, not a guarantee that every technical request is anonymous. Daily aggregate totals are publicly available through the statistics service.

Requests, hosting and security

Cloudflare hosts the site, serves assets, handles security and stores game statistics. Serving a request involves technical information such as an IP address, request time, requested URL and browser headers. The play-event rate limiter uses a hash of the IP address to limit abusive traffic; the address is not written to our game statistics tables.

Fonts are currently fetched from Google Fonts, so Google receives the technical requests needed to deliver them. Social buttons are ordinary links, not embedded social feeds. Following a link opens the relevant provider’s service, where its own privacy practices apply.

Provider information is available in the Cloudflare privacy policy and Google privacy policy. These policies do not replace our responsibility to explain our own processing.

Messages and content reports

If you email us, we receive your address, message and any details or attachments you choose to provide. We use them to answer enquiries, investigate reports and handle legal requests. Please do not send passwords, payment details or unnecessary identity documents.

We may share the parts of a report necessary to investigate it with the relevant game developer, service provider, rights holder or legal adviser, or with an authority where lawfully required. Copyright claims may require identifying the claimant to the affected developer. We do not publish private correspondence as a matter of course.

Purposes and legal grounds

Where the GDPR applies, we rely on legitimate interests (Article 6(1)(f)) for operating and securing the site, responding to ordinary enquiries, and measuring limited game activity to maintain rankings. These interests must be balanced against your rights, including the interests of younger users. You may object to processing based on legitimate interests.

Where necessary, we process information to comply with a legal obligation (Article 6(1)(c)) or to take steps you request concerning an agreement (Article 6(1)(b)). Optional tracking that requires consent will rely on your affirmative consent (Article 6(1)(a)); it is not authorised by merely visiting the site. Cookie and device-storage rules apply in addition to these grounds.

You are not required to send us an email or maintain saved game lists. Technical request information is necessary to deliver and protect the site. Without enough information about a complaint, we may be unable to investigate it. We do not use these data to make automated decisions with legal or similarly significant effects about you.

Advertising

There is currently no connected ad network, advertising-cookie integration or personalised-ad profile maintained by this site. We do not currently sell personal data or share it for cross-site targeted advertising.

If ads are introduced, this notice will identify relevant partners, purposes and choices. Non-essential advertising or analytics cookies and similar technologies will not be enabled before consent where consent is required. Refusing or withdrawing optional consent must be possible. A future advertising plan does not mean those services are active today.

Retention

Our scheduled cleanup deletes individual play-session records after 30 days without activity. Daily aggregate game totals have no automatic expiry and are retained for historical statistics. Local browser preferences and game lists remain until cleared.

Correspondence and report records are kept only as long as needed to resolve the matter and meet applicable record-keeping, dispute or legal obligations. Retention depends on the nature of the issue and applicable limitation periods. Hosting, security and email providers may retain technical records under their service arrangements; the 30-day play-session period does not apply to all provider logs.

Service providers and international processing

Information may be processed by hosting, delivery and email providers, including outside Poland or the European Economic Area. GDPR-restricted transfers require an applicable legal mechanism, such as an adequacy decision or appropriate contractual safeguards. You may contact us for information about safeguards relevant to your data.

Details of the operator’s provider arrangements and international-transfer safeguards are being finalised. This notice does not certify that a particular transfer mechanism covers every provider.

Your rights

Subject to the conditions in applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. If processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Email contact@geekedgames.io with enough information to locate the relevant records. We may need proportionate verification; we do not require unnecessary documents. We cannot identify an individual from aggregate totals alone. GDPR requests are normally answered within one month, with an extension only where permitted and explained.

You may complain to Poland’s data protection authority, the President of the Personal Data Protection Office (UODO), or another competent supervisory authority. Contacting us first is optional.

Younger users and changes

The site is recommended for ages 13+ and is not primarily directed at children. This recommendation is not a legal consent threshold. Where a child’s consent or parental authorisation is required by law, an age recommendation does not replace it. If you believe a child’s information has been handled improperly, contact us so we can investigate and take appropriate action, including deletion where required.

We will update this notice when data practices change and provide further notice or obtain consent where required. The date at the top shows the latest revision.