Privacy Policy
Fatum Ludi — web game and Android app. Last updated: 21 October 2026.
1. Who is responsible
Kolobok Gastronomie GmbH, Höninger Weg 369, 50969 Köln, Germany.
Represented by the managing director Andrej Olegovic Ermolenko.
E-mail: info@i-kolobok.de
We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Sign-in data: the e-mail address and account ID from Google sign-in or from e-mail sign-in — with Google sign-in also the name and profile-picture link of your Google account, kept by the sign-in service (the game does not show them); for players who have not signed in yet, a random anonymous ID | To give you your own account, so your heroes and progress are yours on any device | Art. 6(1)(b) GDPR — providing the game you asked for |
| Game data: your hero names (campaign and PvP), progress, rating, rank, coins, gear, defence settings, chosen country, friends list, list of hidden players, club membership | To run the game, the leaderboard and player-versus-player duels | Art. 6(1)(b) GDPR |
| Chat messages you send (global, private and club chat) and reports you file about other messages | To let players talk; to fight abuse | Art. 6(1)(b) and 6(1)(f) GDPR — a safe community |
| Messages to the developer: what you write with “Tell the dev” — the text itself, your hero name, the build number of the game, your language and the device-and-browser line your browser reports | To find and fix what you report, and to answer your idea. If you delete your account, the text stays but your hero name and account link are removed from it | Art. 6(1)(b) GDPR — the game you asked for; Art. 6(1)(f) GDPR — fixing our own faults |
| Online status: while you are in the game — that you are online, the name of the hero you are playing, which screen you are on (for example the menu, the shop or a duel), or that the game is in the background, whether you are in a duel, which version of the game you use (web, app, build number) and the time of the last change. It is deleted automatically a few seconds after you close the game or lose the connection | To show other players and your friends who is online and can be challenged or written to right now | Art. 6(1)(b) GDPR |
| Reminder subscription: if you turn on Reminders, the push address of your device (a technical token issued by your browser or phone), which site or app it belongs to, and when you turned it on. Up to five devices per account | To send you a short notice a minute before tournament registration opens and before your first match in a tournament or Order match — only when the game is not on your screen. Nothing else is sent | Art. 6(1)(a) GDPR — your consent, which you can withdraw at any time in Options → Reminders |
| Technical data: IP address, browser and device type, time of access, in the log files of our hosting providers | To deliver the game and keep it secure | Art. 6(1)(f) GDPR — secure operation |
| Visit counts: per day, how many browsers opened the game, started and finished the first fight, started the second one, signed in and played a first duel; how many stayed in the game for 1, 3, 5, 10, 15, 30 and 60 minutes and how much of that time went to the menu, fights, duels and the shop (only while the game is on screen and in use); how many came back the next day or a week later — and which of our links they came from (for example a link we posted on Reddit). Only totals are stored: no name, no e-mail, no account ID, no IP address, no cookie | To see where new players give up, so we can fix that part of the game | Art. 6(1)(f) GDPR — improving the game |
What others can see. Your hero names, rank, rating, country, club, chat messages and, while you are playing, your online status are visible to other players — this is how the leaderboard, challenges and chat work. Your e-mail address is never shown to anyone and is not stored in the game database: it stays with the sign-in service.
What we do not do. No advertising, no ad tracking, no third-party analytics tools, no sale of data, no profiling. There are no purchases in the game.
3. Data stored on your device
The game keeps a few settings in your browser's local storage: sound and music volume, effects level, which tutorial hints you have seen, which link you first came from, the day of your first visit and the minutes played so far (for the counts above) and which of the steps above were already counted (so each is counted once), and a sign-in token so you stay signed in. They never leave your device except as described above. You can clear them in your browser settings.
4. Service providers
We use these providers; they process data on our behalf under their data-processing terms:
- Google Firebase (Google Ireland Ltd. / Google LLC) — sign-in (Firebase Authentication), game database (Cloud Firestore; for chat and online status Firebase Realtime Database, region europe-west1, Belgium), game server (Cloud Functions, region europe-west1, Belgium), hosting of the public game site and delivery of reminder notices (Firebase Cloud Messaging).
- Google Fonts (Google Ireland Ltd.) — the game's fonts are loaded from Google's servers; your IP address is transmitted to Google for this.
- Cloudflare, Inc. — storage and delivery of the game's images, sounds and videos (R2).
- A US hosting provider — hosting of our development version of the game.
- flagcdn.com — country flag images next to player names.
Some of these providers are based in the USA. Transfers are covered by the EU–U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses.
5. How long we keep data
- Account, game data and chat messages — until you delete your account.
- Online status — only while you are in the game; it is deleted a few seconds after you leave.
- Reminder subscription — until you turn Reminders off or delete your account; a device that no longer accepts notices is removed automatically.
- Reports about chat messages — up to 12 months, to deal with abuse.
- Messages you send to the developer — kept while the game is being developed; after you delete your account they keep the text only, with no hero name and no link to your account.
- Records of past duels and tournament brackets keep the hero's name only (no e-mail, no account link to a person) and stay as part of the game history.
- Visit counts — kept as daily totals while the game is being developed.
- Hosting log files — as long as the providers keep them, typically up to 30 days.
6. Deleting your account
In the game: Options → Delete account, then type DELETE. This permanently deletes your heroes, names, gear, friends list, chat messages, club membership and reminder subscription, and your sign-in account; messages you sent to the developer keep their text but lose your hero name and the link to your account. Details and a way to ask by e-mail: How to delete your account.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Write to us at the address above. You also have the right to lodge a complaint with a supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (ldi.nrw.de).
8. Age
Fatum Ludi has an open chat with other players and is meant for players aged 16 and over.
9. Changes
If we change how we handle data — for example when purchases arrive with the full version — we will update this page and the date at the top.