Privacy and device storage
Effective 31 October 2026 · Version 2026-10-31
Controller: Endre Kántor. For privacy, access, correction, export, objections or account deletion, email admin@teamball.io. This notice covers registered and guest players aged 16+.
Information and purposes
| Information | Purpose and basis |
|---|
| Login provider identifiers, email, provider name/avatar, authentication tokens where supplied; session identifiers, IP and browser information. Password hashes only where password registration is enabled. | Requested account authentication and account linking; necessary security and abuse prevention. Contract necessity for core account services; legitimate interests for proportionate security. |
| Player ID/name, appearance, country/flag choice, inventory, earned coins, progression, match results and gameplay recordings. | Provide the requested multiplayer game and persistent progression. Core game operation relies on contract necessity; additional public statistics and service integrity are assessed under legitimate interests. |
| Guest recovery ID/name and technical connection information. | Reconnect the requested guest session, maintain game state and prevent abuse. Guests are pseudonymous, not anonymous. |
| Chat messages, sender/recipient IDs, reports, nearby evidence and moderation actions. | Deliver requested chat and protect players, investigate reports and enforce fair play. Contract necessity and legitimate interests in safety and integrity. |
| Error details, player identifiers, browser/device information and service logs; text and images you choose to submit in a bug report. | Necessary reliability, security and requested support. Legitimate interests in maintaining a working service; information is limited and access restricted. |
| Country estimated from your IP address. | Suggest a country flag, which you can change or hide. Our legitimate interest is displaying country information. We estimate only the country, using IPinfo data on our own server; your IP address is not sent to IPinfo for this lookup. |
Public information
Your game nickname, appearance, visible country, rankings, results, match history, cumulative online time, gameplay heatmaps and replays can be visible to other people. Public replay output excludes chat. Your login email and provider profile are not included in public game profiles. Hiding your current flag does not remove historical match snapshots.
Storage and retention
Automatic cleanup applies to these records:
- Chat messages: 30 days from sending. Closed chat reports and their evidence: 90 days from closure. Moderation-access audits: 90 days.
- Individual error records and bug-report attachments: 30 days from creation or upload. Closed bug reports: 90 days from their last update. Resolved or dismissed error summaries: 90 days after the last occurrence, unless still linked to a bug report.
- Friendly-match reward records: 90 days from receipt. This does not automatically delete separate match summaries, progression or reward histories.
- Access activity records: up to 30 days, or less if storage fills. Web-server logs: the current log and 14 previous daily log periods. Days without activity can extend this beyond 14 calendar days.
- Gameplay recordings: older files are deleted as storage fills, with no fixed expiry. Related match and replay information follows the review policy below.
Automatic deletion may take a short time after these periods expire.
Other records are reviewed at least every six months: account and progression data, match and ranking histories, coin and item transactions, administrative logs, open reports and investigations, unused newsletter subscriptions, system logs and backups.
We keep these only while needed for account access and saved progression, relevant game history, an active investigation, security, recovery or a justified legal obligation or claim. At each review, we delete or genuinely anonymise records no longer needed and record why any remaining records are kept and when they will be reviewed again. Newsletter subscriptions are kept only while the planned newsletter and the requested updates remain relevant.
Six months is a review interval, not a minimum retention period or an automatic deletion deadline. Withdrawal of consent and requests concerning your data are handled without waiting for a review. Backup access is restricted; if an older backup is restored, we reapply deletion requests. Contact admin@teamball.io about a particular record.
Cookies and local storage
We store information on your device for sign-in, game preferences and reliable operation:
- Sign-in and access: a session cookie normally lasts 30 days. Short-lived information protects sign-in through Google or Discord. We remember which terms you accepted to avoid asking on each visit. Guest recovery credentials last up to 24 hours; related chat and other records follow the retention periods above.
- Preferences: graphics, controls and camera settings last 180 days when you select Save settings; Forget device settings removes them. Music on/off is saved separately in browser tabs and installed apps until you change it or clear storage. Tutorial progress, tutorial control choices and visit history also have no fixed expiry. Reset tutorial clears its progress; clearing site storage also removes its visit history. Forget device settings does not remove tutorial information. Muted-player lists remain until cleared.
- Reliable operation: temporary connection-retry information lasts for the browser session. An offline page is cached on your device.
Device settings are separate from account progression. Clearing browser storage can sign you out and lose guest recovery. There are no advertising cookies or third-party marketing analytics in this release. Controls for optional saved preferences explain your choices.
Optional future newsletter
At registration you can separately subscribe to emails from Endre Kántor about major Teamball updates, significant events and tournaments only. We will not email you about every minor change. We store your account email and player name, the consent version and timestamp. Registration without the newsletter is equally available. No newsletter emails are sent in this phase. You can withdraw in Account at any time or contact admin@teamball.io; withdrawal does not affect your account or earlier lawful processing. Retention follows the review policy above.
Recipients and security
Authorised operators and moderators access information needed for their role. Infrastructure providers process information needed to host the service; Google or Discord participate only when you choose their login. Google and Discord also process information for their own services under their privacy policies; their roles are not limited to processing on our behalf. Their processing can involve the United States and other countries outside the EEA. Google describes its adequacy, Data Privacy Framework and standard contractual clause safeguards in its transfer framework notice. Discord describes its applicable standard contractual clauses, adequacy decisions and Data Privacy Framework in its Privacy Policy. These links describe the providers’ transfer safeguards. We restrict access to credentials and moderation evidence and do not sell player data.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw consent at any time. We normally respond within one month; complex requests may take longer as permitted by law, with notice. We may need proportionate proof of account ownership. Erasure is subject to justified legal/security exceptions; retained records must not be reused for unrelated purposes. No-reset does not prevent your deletion request.
You can complain to the Hungarian supervisory authority, NAIH, or your competent supervisory authority. We do not use solely automated decisions with legal or similarly significant effects.