Information translation. This is a courtesy translation of the Polish document. Only the Polish version is legally binding, and this translation has not yet been reviewed by a lawyer.
Privacy Policy
Data controller and service provider: Studio Zero (the team making the game Reactor Zero) · contact: help@reactorzero.pl
What data we collect
- Player account: nickname, password hash (we do not store the password in plain form), password recovery code hash, session tokens (stored as hashes).
- Game progress: level, heroes, coins, chests, cosmetic collection, missions, match results.
- Game usage statistics: simple events such as entering the game together with the name of the domain the player came from (without the full address), starting and completing the tutorial, starting and ending a match (mode, hero, result, time), creating an account, activity on a given day and browser error messages. For logged-in players the events are assigned to the account; for people without an account we record them without an IP address and without any permanent identifier. We add to the events only a random visit number that exists solely in the memory of the open browser tab (we do not store it in cookies or in device storage) and disappears when the page is refreshed or closed, so it is used to count visits, not people. We use the events to improve the game and to measure whether players come back (legitimate interest, Art. 6(1)(f) GDPR). We keep the events for up to 13 months, and when an account is deleted we delete the events assigned to it. We do not use external analytics tools.
- Survey after the first match (voluntary): a rating of the fun, a choice from a list, an optional short description and the source of information about the game, assigned to the account. For completing it you get an in-game reward. We use the answers to improve the game (legitimate interest, Art. 6(1)(f) GDPR) and delete them together with the account.
- Referrals: every player has an invitation code. When a friend creates an account through your link and plays a few matches, we record the link between the two accounts (who invited whom) and the number of matches played in order to pay out in-game rewards. We do not share this information with other players.
- Proof of consent: when an account is created we record the date and the version of the Terms and the Privacy Policy that you accepted, and the declaration of age together with, for people under 16, the confirmation of the parent’s or guardian’s consent.
- Technical data: the IP address processed temporarily to limit abuse (limits on login attempts) and in server logs.
- Data in the browser: the login token and game settings (e.g. sound) stored in the device’s local storage (localStorage). Guest mode saves progress only on the player’s device.
- Reports through the form: nickname (optional), e-mail address, type and content of the report. Sending requires your consent (ticking the box) and we use this data solely to reply to and handle the report.
We do not require an e-mail address to create an account in the game and we do not send e-mails from the game.
Purpose and legal basis of processing
We process data to run the account and the game (Art. 6(1)(b) GDPR), to ensure security and limit abuse (Art. 6(1)(f) GDPR) and to handle reports submitted through the form (Art. 6(1)(f) GDPR).
Recipients and storage
Data is stored on the servers of the hosting provider, Seohost.pl, which acts as a processor. We keep account data until the account is deleted. The account can be deleted in the game at any time (Account → Delete account); deletion is permanent and removes the account data and progress. We keep reports from the form for up to 12 months after the case is closed. Database backups are kept for up to 14 days.
Your rights
You have the right to access your data, to rectify it, to erase it, to restrict processing, to object, and to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland. Contact: help@reactorzero.pl.
Age of players
The online account may be used by people aged 16 or over. People under 16 may create an account with the consent of a parent or legal guardian, confirmed at registration by ticking a box (we record the date of this consent). From younger players we collect only the necessary minimum: nickname, password hash and game progress. We run no chat and show no ads. The nickname and the chosen hero are visible to players in the same room and, in public rooms, in the list of open rooms (the founder’s nickname). In public rooms, people under 16 are matched only with people under 16; they can play with adults only in a private room which they join by entering the code themselves. A parent or guardian may at any time request access to the data and deletion of the account (help@reactorzero.pl or in the game: Account → Delete account).
Website
The reactorzero.pl website runs on WordPress and may store necessary cookies. With your consent (the cookie banner) we use Google Analytics 4 (Google Ireland Limited) for traffic statistics on the site: Google then stores cookies and may transfer data outside the European Economic Area, including to the USA. The basis is consent (Art. 6(1)(a) GDPR), which you can change or withdraw at any time with the „Cookie settings” button in the corner of the page. Without consent Google Analytics does not load. We do not use advertising tools. On the site we run our own simplified visit statistics: we count page views, the domain the visitor came from, the type of device (computer, phone, tablet) and clicks on links to the game. We do not store IP addresses, we do not use cookies or any visitor identifiers, we do not count bots, and we respect the Do Not Track and Global Privacy Control signals. The basis is our legitimate interest (Art. 6(1)(f) GDPR), and we keep the data for up to 13 months. If this changes, we will update this policy and ask for consent when it is required.
Last updated: 12 October 2026 (beta version of the document).