Privacy
Last updated 3 November 2026
This is a short first version. A full privacy policy will be posted here soon. Items in [brackets] are still to be filled in.
Who is responsible
Indie Minds, [name or company, address, country]. Contact: [email address].
Playing the game
You can play Game of Votes without giving us anything. There is no analytics script and no tracking, and we set no cookies. The game stores only your settings and progress on your own device (in your browser's local storage); that never leaves your device.
Our host, Cloudflare, keeps standard server logs (such as IP address, time and page requested) to run and protect the site.
Signing up for updates
If you sign up, we store:
- your email address,
- your name and message, only if you write them,
- where you signed up (the game or this site) and the text you agreed to,
- when you signed up, confirmed, or unsubscribed, and when we last sent you a confirmation email.
We use this only to send you news about Game of Votes and other Indie Minds games, and to read your message. We don't sell or share the list. You get a confirmation email first; if you don't confirm, you won't hear from us again.
The form uses Cloudflare Turnstile to check that you're a person and not a bot. It loads only on pages with the form.
Support payments
If you pay to support us (and remove the ads), the payment is handled by Stripe on its own secure page. Your card details, name and email go to Stripe, not to us; Stripe processes them under its own privacy policy as [an independent controller / our processor].
Your browser makes a random code for this device and keeps it in local storage. We store only a one-way hash of that code, the amount, the currency, the date, and a refund date if you get one. This lets the game know the device is ad-free without knowing who you are. We keep these records for [as long as tax and accounting law requires, e.g. 10 years].
Legal basis: the contract you enter by paying (Article 6(1)(b) GDPR) and our legal duty to keep accounts (Article 6(1)(c)). For a refund or a question about a payment, write to [email address].
Legal basis for the email list
Your consent (Article 6(1)(a) GDPR), given when you tick the box and confirm by email. You can withdraw it at any time by unsubscribing; that doesn't affect emails sent before.
How long we keep it
- Until you unsubscribe. Your name and message are deleted when you unsubscribe, your address within 30 days after.
- Sign-ups that are never confirmed are deleted after 30 days.
Who processes the data for us
- Cloudflare: hosts the website and runs the bot check.
- Supabase: stores the email list in a database in the EU (Frankfurt).
- Resend (United States): sends the confirmation email.
- Stripe ([Stripe Payments Europe, Ireland]): takes support payments.
Where data goes to the United States (Resend, and Cloudflare for the site and the bot check), the transfer relies on the EU-US Data Privacy Framework or the standard contractual clauses in the provider's data processing terms.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to get it in a portable format. Write to [email address]. Every email also has an unsubscribe link.
You also have the right to complain to a data protection authority, for example the one in the country where you live.