Privacy Policy

The short version: this website sets no cookies, tracks nobody and loads nothing from other servers. The game processes only what it needs to let you play: a name, a lobby code and your connection, for as long as a match lasts.

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

2. This website

Hosting and server logs

The website is hosted by Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open a page, the server processes the data your browser sends with every request: IP address, date and time, the page requested, the referring page, browser and operating system. This is needed to deliver the page and to keep the server secure (Art. 6 (1) (f) GDPR). Google processes this data on our behalf under a data processing agreement. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

No cookies, no tracking, no third-party content

The website sets no cookies and uses no analytics, advertising or social media plugins. Fonts, pictures and videos are served from this website itself, so opening it sends no data to anyone else. The playable demo runs entirely in your browser; what you type there never leaves your device.

Links to Steam

Links to the Steam store take you to a website run by Valve Corporation. Its privacy policy applies there.

3. The game

What the game server processes

Matches are played on our game server, hosted by Colyseus Cloud, on servers in Frankfurt, Germany. To let you play, it processes:

• your IP address, to connect you and to limit how often one connection may open matches (protection against abuse);
• the player name you set, or your Steam name when Steam runs, which your opponents see;
• the lobby code and the match itself: words typed, abilities used, the result.

The game has no accounts and no database: this data is held in the server's memory while a lobby or match runs and is gone when it ends. The legal basis is the contract you entered by getting the game (Art. 6 (1) (b) GDPR) and, for abuse protection, our legitimate interest in a working server (Art. 6 (1) (f) GDPR).

Steam

On Steam, the game uses Steam features such as invites, the overlay and achievements. Valve Corporation processes this data under the Steam privacy policy; we receive only your Steam name and what is needed for invites and achievements.

On your device

The game stores your settings and progress (such as the finished tutorial) on your device. They never leave it.

4. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Write to us at hi@keystroker.app. You also have the right to lodge a complaint with a data protection supervisory authority.

5. Changes

We update this policy when the website or the game changes. The date at the top says when it last did.