Privacy policy
Who we are
This policy explains how God's World (https://www.god-s-world.org, "the site") handles personal data. The site is run by its owner, who is the data controller. Contact for everything about your data: [email protected].
You can play without an account
An account is optional. A guest plays everything without giving us any personal data: the settings of a guest (such as language, denomination and date format) stay in the browser of the device and are never sent to us. The game progress of a guest is not saved at all. Anybody can use the site this way, at any age. To create an account you must be at least 16 years old, or have the permission of a parent or guardian.
What we collect when you create an account
Depending on how you sign up:
- E-mail and password: your e-mail address and a password. The password is stored only as a one-way hash (argon2id), we cannot read it.
- Google: your Google name and e-mail address (the ones Google shares for sign-in). We never get your Google password or access to your Google data.
- Wallet (MetaMask): your public wallet address. No e-mail, no password.
For every account we also keep: the name shown in the game (a nickname you can change, we do not check it), the country if you choose one (we take no side in any dispute about countries: you may choose any flag), your year of birth if you choose to give it (optional, we do not check it), your language, the Christian denomination you choose (Catholic or Protestant), the date you agreed to keep it, the date of creation and of your last visit, the data of your game (progress, discovered chapters), and a login session (a random token, stored only as a hash).
Donations
You do not need an account to donate. Donations are made in cryptocurrency on the Solana network (see Donate with crypto).
- What you type in the game (an optional name and message, the amount and the token you choose) is saved on our server under a random reference until your payment arrives. A request that is never paid is deleted after 24 hours. If you are logged in, the identifier of your account may be saved with it.
- When your payment arrives we record the address of the wallet you paid from, the amount, the token, the date and time and the transaction identifier. The name and message you typed are saved with that record.
- What is public. The payment itself (your wallet address, the amount and the time) is written on the Solana blockchain, which is public and permanent: we cannot change or delete it. In the list of supporters in the game we show your address in short form, the amount, the token and the date. Your name and message are shown only after we have checked and approved them. An empty name is shown as "Anonymous", and we may hide any name or message.
- Notes written on the blockchain. If you send a payment directly to our address and attach a note (a "memo") to it, you write that note on the blockchain yourself, publicly and for ever. We may show it in the list of supporters after we have checked it. We can hide it on our site, but nobody can remove it from the blockchain. The name and message you type in the game are never written on the blockchain by us.
- Linking a wallet to your account (optional). If you link a Solana wallet to your account (user menu, Settings, Donations), we store its address with your account, so that the donations paid from it belong to your account and you can see them there. You prove that the wallet is yours by signing a free message; nothing is paid or sent. You can remove the link at any time, and it is removed when your account is deleted. The payments themselves stay on the public blockchain.
Why, and on what legal basis
- To create and run your account and keep your game on all your devices: performance of the service you asked for (GDPR art. 6(1)(b)).
- The Christian denomination is data about religious belief, a special category (GDPR art. 9). We store it only with your explicit consent (the box you tick when signing up) and use it only to show you the right texts of the game. You can withdraw the consent at any time by deleting your account.
- The year of birth is optional and is stored only with your consent: you give it by typing it in the game (user menu, "Personal data", "Year of birth") and tapping Save, and you can remove it there at any time, or by deleting your account. We keep only the year, and we do not check it. We use it only for future suggestions in the game based on age and for anonymous statistics (counts only: groups too small to be anonymous are not shown). It cannot be saved by people under 16 (GDPR art. 8): in that case nothing at all is stored, not even the fact that you tried.
- To receive, record and acknowledge donations, and to keep our accounting records: legitimate interest and legal obligations (GDPR art. 6(1)(f) and 6(1)(c)). Showing your name and message in the list of supporters is based on your consent (art. 6(1)(a)): you give it by typing them, and they are shown only after we have approved them. You can withdraw it at any time by asking us to hide or delete them.
- To keep the site secure (rate limits, server logs, abuse prevention): legitimate interest (art. 6(1)(f)).
Who receives your data
We do not sell your data and we do not use it for advertising. It is processed only by the services needed to run the site: our hosting provider (the server and the database are on a virtual server of Hostinger), an e-mail sending service (for verification and password-reset e-mails), and, if you choose them, Google or your wallet provider for the sign-in itself. For donations, the Solana blockchain is public by nature, and a blockchain data provider answers our technical requests about our own receiving address (it does not receive anything you type in the game). Our web server keeps ordinary technical logs (IP address, time, page requested) to run and protect the site and to count visits.
How long we keep it
Your account data is kept until you delete your account. When you ask for deletion, the account is marked and deleted for good after 7 days (logging in again within these 7 days cancels it); then your account, login sessions and saved game data are erased. Backups of the database are kept for 14 days and then overwritten. Server logs are kept for a limited time only. Donation records are kept for as long as we need them for our accounting and legal duties; on request we hide or delete your name and message. What is written on the blockchain cannot be erased.
Your rights
You can ask us to give you a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. You can delete your account yourself in the game (user menu, "delete account"). For anything else write to [email protected]. You also have the right to complain to your data protection authority. Data that has been written on a public blockchain (a payment, a note attached to it) cannot be erased by us or by anyone else.
Cookies and local storage
When you are logged in, the site sets one cookie that keeps you logged in (httpOnly, strictly necessary). It is removed when you log out. We do not use advertising or tracking cookies. The local storage of your browser keeps only a few settings of the game, such as your language, your Christian denomination, your date format and the settings of some games. It never keeps your game progress. The progress is saved only on our server, and only for registered users: we strongly recommend that you sign up, because without an account your progress is not saved.
Changes
If this policy changes, the new version is published on this page with a new date.