Privacy Policy

Summary

• The services contain no advertising. The Android application has no in-app purchases.
• No name, email address, or visible user account is required to visit or play.
• After completing all levels, a player may optionally provide an email address to receive notifications about newly released levels.
• Game progress, language, audio, control, and accessibility settings are stored locally in the browser or on the device.
• The browser game uses Firebase Analytics. The Android application does not.
• Supported browsers offer optional speech input. Microphone audio is handled by the browser's speech-recognition service and is not received or stored by the developer.
• Text entered in AI-assisted interactions is sent to the game backend and the current AI service provider to generate a response.

New-level email notifications

After completing all available levels, a player may voluntarily request email notifications about newly released levels. Signing up is not required to play. The form collects:

• the email address entered by the player;
• the selected game language, stored as English or Polish;
• the version of the consent wording accepted in the form;
• confirmation that the player is at least 16 or has parent or guardian consent.

The address is sent through the game backend to EmailOctopus and tagged by language. Game progress and AI interaction content are not sent to EmailOctopus. EmailOctopus sends a confirmation message, and notifications are sent only after the address is confirmed. Every notification provides an unsubscribe option.

Processing for these notifications is based on consent. Consent can be withdrawn at any time by using the unsubscribe link or by contacting the developer. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

Information stored locally

The browser game and Android application store the following information locally:

• completed levels and local game progress;
• selected language;
• music and interface-effects preferences;
• control and accessibility preferences.

This information remains in browser storage or on the device unless it is included as relevant game context for an AI-assisted interaction. Local information can be removed by resetting progress, clearing site or application storage, or uninstalling the Android application.

Website access and server logs

When the website, browser game, or backend is accessed, hosting and network providers may process technical information such as the IP address, request time, requested address, browser or device type, operating system, and diagnostic information. This information is used to deliver the service, maintain security, prevent abuse, and diagnose failures.

Browser-game analytics

The browser version uses Firebase Analytics to understand general use of the game. The Android application is built without a Firebase Analytics measurement identifier and does not send these analytics events.

The browser game may record events such as:

• opening the game;
• starting, completing, or failing a level;
• changing the language;
• submitting an AI-assisted interaction.

Analytics events do not contain the free-form text entered by the player. Firebase Analytics may also process browser, device, application, and approximate-location information, identifiers, and cookies or similar browser storage as described in Google's documentation. Analytics is used to measure use, understand problems, and improve the game, not for advertising by the developer.

Optional browser speech input

In supported browsers, the player can choose to dictate text in AI-assisted fields. Speech input is optional and starts only after the player selects the microphone control and grants microphone access. The browser or operating system may process microphone audio remotely through its selected speech-recognition service.

The developer does not receive or store microphone audio. The browser returns a text transcript to the game, where the player can review and edit it. The transcript leaves the browser only if the player submits it: gameplay prompts are sent to the game backend and AI provider, while response-report comments are sent to the game backend for review.

AI-assisted interactions

Selected conversations and object interactions allow the player to enter free-form text. When this feature is used in the browser game or Android application, the service sends the following information over an encrypted HTTPS connection:

• the text entered by the player;
• recent conversation and gameplay context needed to understand the request;
• the current level, scene, language, and relevant game state;
• a random request identifier and an anonymous Firebase authentication identifier;
• technical information needed to secure and rate-limit the service.

Do not enter names, addresses, contact details, health information, financial information, passwords, or other sensitive personal information in AI-assisted fields.

AI response reports

The player can report an AI-generated response from inside the game. A report contains the reported response, its request identifier, level and scene context, a pseudonymous reporter identifier, and an optional comment entered by the player. Reports are used only to review safety and quality, investigate problems, and improve safeguards.

Service providers and international processing

The services use the following providers:

• Google Firebase, Google Analytics, and Google Cloud for website hosting, browser-game analytics, anonymous authentication, backend functions, rate limiting, report storage, and operational logging. Google may process technical information such as IP addresses, identifiers, cookies, and user-agent data to provide and secure these services.
• OpenAI, currently the generative-AI provider, to process player input and game context with a GPT model and return a structured game response. OpenAI states that data sent through its API is not used to train or improve its models unless the developer explicitly opts in to share it.
• EmailOctopus to store confirmed and pending newsletter contacts, record language and consent metadata, send confirmation messages, deliver new-level notifications, and process unsubscribes.
• The speech-recognition service selected by the player's browser or operating system to process microphone audio when the player voluntarily uses browser speech input. The provider and whether processing occurs locally or remotely depend on the player's browser, device, and settings.

These providers process information under their applicable service terms and privacy documentation. The AI provider may change in a future version; this policy will be updated before a materially different provider is used.

How information is used

Information transmitted through the services is used to:

• authenticate requests without requiring a named account;
• generate and validate AI-assisted gameplay responses;
• prevent abuse and enforce request limits;
• diagnose failed requests and maintain the service;
• review player-submitted AI response reports and improve safety.
• measure general browser-game usage and improve the player experience.
• send requested notifications when new game levels are released.

Information is not sold. It is not used by the developer for advertising or to build an advertising profile.

Retention and deletion

• Local browser or application data remains until it is reset, cleared, or uninstalled.
• Short-lived rate-limit records are designed to expire approximately two days after use.
• AI request and response logs are normally retained in Google Cloud Logging for up to 30 days, unless a longer period is required to investigate a reported response, abuse, security incident, or legal obligation.
• Under OpenAI's default API data controls, API inputs, outputs, and related metadata may be retained in abuse-monitoring logs for up to 30 days. The Responses API may also retain response data as application state for at least 30 days. OpenAI may retain data longer where required by law or reasonably necessary to protect its services or third parties.
• Player-submitted reports are kept only for as long as reasonably necessary to review and resolve the reported issue, maintain safety records, or meet legal obligations.
• Browser analytics data is retained according to the Firebase and Google Analytics project settings and the provider's applicable retention procedures.
• Anonymous Firebase authentication information remains until it is deleted by the developer or removed under the provider's retention procedures.
• Newsletter contact and consent information remains in EmailOctopus while the subscription is pending or active, and may be retained after an unsubscribe where necessary to respect the opt-out, demonstrate consent history, or meet legal obligations. A deletion request can be made to the developer.

To request access, correction, or deletion of information connected with the services, email kontakt@lukasz-socha.pl. Because the services do not require a named account, additional details such as the approximate date, time, language, and level may be needed to locate non-newsletter records. For a newsletter request, provide the subscribed email address. Do not send sensitive personal information with the request.

Security

Data sent by the services is transmitted using HTTPS. Access to backend data and AI reports is restricted to the developer and service providers that need it to operate the service. No method of internet transmission or storage is completely secure, but reasonable technical and organizational safeguards are used.

Children

The game is intended for players aged 13 and older and is not directed to children under 13. A player under 16 may use the optional email-notification form only with consent from a parent or guardian. If you believe information from a child under 13 has been submitted, contact kontakt@lukasz-socha.pl so it can be investigated and deleted where appropriate.

External links

The website and game may contain links to the developer's website, social-sharing services, Google Play, or a voluntary support campaign. Opening an external link is a user-initiated action and the destination's own privacy policy applies.

Policy changes

This policy may be updated when service features, providers, or legal requirements change. The effective date at the top of this page will be updated when a new version is published.

Contact

Developer and data controller: Łukasz Socha
Email: kontakt@lukasz-socha.pl
Website: witekadventures.com