PRIVACY POLICY

Welcome to Pointless Button ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

Pointless Button is operated by Balazs Simon (sole proprietor), who serves as the data controller responsible for your personal data.

For any privacy-related questions or requests, submit a ticket:

We collect the following categories of personal data:

We process your personal data under the following legal bases (GDPR Article 6):

• ✓ Contract Performance: Processing necessary to provide our game service to you
• ✓ Legitimate Interest: Security, fraud prevention, and service improvement
• ✓ Consent: For optional features like marketing emails

We use cookies to make our service work properly. Here's what we use:

Since we only use essential and functional cookies, no consent banner is required. We use privacy-friendly server-side analytics that don't use cookies.

We keep your data for as long as your account is active. Specifically:

When you delete your account, we remove or anonymize your personal data typically within 7 days, and no later than 30 days.

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms:

• ✓ We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (GDPR Article 33)
• ✓ If the breach is likely to result in a high risk to you, we will notify you directly without undue delay (GDPR Article 34)
• ✓ Notifications will include the nature of the breach, likely consequences, and measures taken

As a user, you have the following rights regarding your personal data:

We share data with these specific service providers:

• • Stripe — Payment processing (PCI DSS compliant). We never store your card details.
• • Railway — Application hosting. Our servers are in the EU.
• • Cloudflare — CDN and privacy-friendly analytics. No personal data stored, no tracking cookies.
• • Sentry — Error monitoring (only loaded with your consent). Helps us fix bugs.
• • Authentication Providers — Google, Facebook, GitHub, Discord, Twitter/X, Twitch, Steam. Used for login only — we receive your name and email.
• • Other Users: Public game data only (username, leaderboard stats)
• • Legal: If required by law or to protect our rights

We never sell your personal data.

Our servers are located in the European Union, providing strong data protection.

• • CDN is caching proxy only - no personal data stored
• • Payment processor is EU-based and GDPR compliant

We may update this privacy policy from time to time. We will notify you of significant changes via email or by posting a notice on our website. The "Last Updated" date at the top indicates when changes were last made.