Privacy policy

Who is responsible

VidaPath is responsible for your personal data (the "controller" under the GDPR). For anything about your data, write to hello@vidapath.cloud.

Playing without an account

You can play Quick Life, the daily challenge and the mini-games without an account. Those lives are played and kept only in your browser or app. Your device just downloads the day's challenge from us, and we learn nothing about you.

What we keep when you create an account

Your email address and the name you choose.

Your password, stored only as a one-way hash. Nobody can read it, not even us.

If you sign in with Google or Apple: the email, name and profile picture they share with us, and an ID that links your account to theirs. We never see your Google or Apple password.

Your game: the lives you play, the choices you make, the notes you write in the in-game journal, your results, streaks, XP, badges and leaderboard scores.

Your language setting.

Why we keep it, and on what legal basis

To run the game you signed up for: your account, saving your progress, the daily challenge and the leaderboard. The legal basis is performance of our agreement with you (Article 6(1)(b) GDPR).

To keep the service secure and working: short-lived technical logs, such as your IP address and the time of a request, kept by our hosting provider. The legal basis is our legitimate interest in a safe, working service (Article 6(1)(f) GDPR).

We do not use your data for advertising, we do not build marketing profiles, and we never sell or rent it to anyone.

What other players see

Your name, league and XP appear on the leaderboard, where other players can see them. Profile pictures are never shown to other players. Your email address, your journal and your choices are never shown to anyone.

Who helps us run VidaPath

Railway (Railway Corporation, USA) runs our server and database, in a data centre in the Netherlands.

Cloudflare (Cloudflare, Inc., USA) delivers this website and the game and protects them from attacks.

Google and Apple, only if you choose to sign in with them, and Apple and Google again if you install the app from their stores.

Railway and Cloudflare handle your data only on our behalf and under our instructions. Google and Apple handle sign-in and their app stores under their own privacy policies.

Data outside the EU

Your account and game data are stored in the EU, in the Netherlands.

Railway and Cloudflare are US companies, and Cloudflare delivers pages from data centres around the world, so some data, such as your IP address, may also be processed in the United States. Where the provider is certified under the EU-US Data Privacy Framework, the transfer relies on it. Otherwise it relies on the European Commission's standard contractual clauses. Both keep your data protected at the EU level.

How long we keep it

Your account and game data: as long as you have the account.

When you delete your account, it is erased from our database straight away. Copies in backups disappear within a month.

Technical logs: at most 30 days.

What is stored on your device

This website stores the language you picked and, until you close the tab, the country you are visiting from, so it can open in your language. It sets no cookies and runs no analytics.

The game sets one cookie, which keeps you signed in, and remembers your language, your light or dark theme and any lives you play without an account.

All of this is needed for things you ask for. There are no advertising or tracking cookies, so there is no cookie banner to accept.

The typeface and every other file are served by us. Opening a page sends nothing to advertisers or other third parties.

Age

You need to be at least 16 to create an account yourself. If you are younger, ask a parent or guardian to agree first. If we learn that a younger child created an account without that agreement, we delete it. Playing without an account needs no personal data at all.

Your rights

You can ask what we keep about you and get a copy, have it corrected, ask us to restrict or stop using it, take it with you in a common format, or have it deleted.

You can delete your account yourself at any time: open Profile in the game and choose Delete account. For anything else, write to hello@vidapath.cloud. We answer within a month.

If you think we handle your data wrongly, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or to the data protection authority in your own country.

Changes to this policy

If we change this policy in a way that matters to you, we will tell you in the game before the change takes effect. The date at the bottom shows the latest version.