Privacy policy

Plankway collects as little as possible. You don’t need an account, e-mail address or password.

Who is responsible?

Mathieu De Keyser, Duffelsesteenweg 55, 2550 Kontich, Antwerpen, België (BE 1040.500.093). Privacy contact: info@dekeyserwebdesign.com.

What we process and why

• Game data on your device: your progress, daily results, statistics and settings are kept in your browser’s storage (localStorage and IndexedDB). This is needed for the game to work and stays on your device.
• Anonymous profile: on your first visit we create a profile with a random id, so your streak is kept and you can continue it on another device. Your device gets a secret key in a cookie; our server only stores an irreversible hash of it. The same goes for your recovery code.
• Daily results: for each solved daily the puzzle number, your time, the number of undos and hints, and when you solved it. Your solution is checked but not stored.
• Sign in with Google (optional): when you sign in, we only ask Google to confirm who you are (scope "openid"). We get no e-mail address, name or photo. We only keep an irreversible hash of your Google user id, linked to your profile, so you can reach your progress on any device. For each signed-in device we keep a hash of a session key. Signing out deletes that session; deleting your profile also deletes the link with Google.
• Friends (optional, only with an account and a name): your friend code, and who you are friends with. Your friends see nothing extra, only a leaderboard with just you. You can always remove a friend and renew your code.
• Leaderboards: if you have an account and picked a name, other players see your name, country and your times or furthest level on the leaderboards. Without a name you don’t appear; your profile id is never shown.
• Name and country (optional, only with an account): the name and country you choose yourself, to show you on the leaderboards. When you sign in we suggest a country based on the location Cloudflare attaches to your connection; you can change or clear it at any time.
• Endless results: for each solved level the level number, your time, the number of hints and when you solved it. To check times, the server hands out a signed start time when a puzzle begins; it is not stored separately.
• IP address: needed to deliver the website (by our hosting partner Cloudflare). Our own server only uses it as an irreversible hash to limit abuse (a maximum number of requests per hour) and deletes it after 24 hours.
• Visitor statistics: we use Cloudflare Web Analytics, which works without cookies and doesn’t build visitor profiles.
• Advertising: we show ads through Google AdSense. For personalized ads we first ask your consent through a certified consent banner (IAB TCF v2.2). Without consent you get non-personalized ads or none.

Legal bases

• Providing the game and your profile: necessary to deliver the service you use.
• Limiting abuse and security: our legitimate interest.
• Personalized ads and ad cookies: your consent, which you can withdraw at any time.

How long we keep data

• Your profile, results, name, country and link with Google: until you delete them via Profile → Delete my data.
• Hashed IP addresses for abuse limiting: at most 24 hours.
• Data on your device: until you delete it in the app or in your browser.

Who else sees your data

Cloudflare (hosting, database and statistics) processes data on our behalf. If you sign in with Google, Google handles that sign-in under its own privacy policy. For ads, Google acts as an independent controller; see how Google uses data at policies.google.com/technologies/partner-sites. These parties may process data outside the EU with the legal safeguards (EU standard contractual clauses or the EU–US Data Privacy Framework).

We never sell your data.

Your rights

You have the right to access, correct, erase, restrict, object to and port your data. Deleting is instant in the app (Profile → Delete my data). You can change your ad consent in Settings → Privacy choices.

For anything else: info@dekeyserwebdesign.com. You can also lodge a complaint with a supervisory authority — in Belgium the Data Protection Authority (dataprotectionauthority.be) — or the one in your own country.

Changes

When we change this policy we update the date below. We announce important changes in the app.