Privacy policy
Template text. Fill in every highlighted field and have a lawyer review it before launch. It is written for a free game with cash rewards run from Denmark.
Who we are
Minetown is run by [COMPANY NAME], CVR [CVR NUMBER], [ADDRESS], Denmark. We are the data controller for the personal data described here. Contact: [CONTACT EMAIL].
What we collect and why
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Username and password (stored only as a salted hash) | To give you an account and log you in | Contract, art. 6(1)(b) | Until you delete your account |
| Game progress, play statistics and the time your account was created | To save your game, run the leaderboard, and check that rewards were earned through real play | Contract, art. 6(1)(b), and our legitimate interest in preventing fraud, art. 6(1)(f) | Until you delete your account |
| Payout address (PayPal email or wallet address) | To pay out rewards you claim | Contract, art. 6(1)(b) | Until you delete your account. For paid claims, see below. |
| Records of paid claims (amount, date, payout address) | Bookkeeping | Legal obligation, art. 6(1)(c) (Danish Bookkeeping Act) | [5 years from the end of the financial year] |
| Confirmation that you are 18 or older and accepted the terms, with the time | To show you agreed to the terms | Contract, art. 6(1)(b) | Until you delete your account |
| IP address in server logs and bot checks | Security and keeping the service running | Legitimate interest, art. 6(1)(f) | As kept by Cloudflare, see below |
Who processes data for us
The game and its database run on Cloudflare (Cloudflare, Inc. and its group). Cloudflare acts as our data processor. Data may be processed outside the EU/EEA; transfers rely on the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. [Check Cloudflare's current DPA and data location settings for your account.]
If we use Cloudflare Turnstile to block bots at sign-up, Cloudflare processes data about your browser to tell humans from bots.
Payouts are sent through [PayPal / the blockchain network you use]. They handle the payment under their own privacy terms. Crypto transactions are public on the blockchain and can't be deleted.
We don't sell your data, and we don't use advertising or tracking cookies.
Your rights
You can ask for access to your data, correction, deletion, restriction, and a copy in a portable format, and you can object to processing based on legitimate interest. You can delete your account yourself in the game: open the cabin and press "Delete account". This removes your account, save and unpaid claims straight away. Records of paid claims are kept for bookkeeping as described above.
To use your rights, write to [CONTACT EMAIL]. You can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
Cookies
See the cookie policy.