Privacy policy

Last updated: October 21, 2026

1. Data controller

The controller of your personal data is the creator of the game The Paper World.

2. Newsletter

When you sign up for the newsletter, we store:

• your email address,
• the language version of the site you used (PL or EN),
• the date and time you signed up.

We use them only to send you news about The Paper World (demo, release, important updates). The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by signing up. Providing your address is voluntary, but without it we cannot send you the newsletter.

We keep your data until you unsubscribe. Every email contains an unsubscribe link; once you use it, your address is deleted from our database immediately.

3. Cookies and analytics

The site uses Google Tag Manager and Google Analytics to see how many people visit it and which sections they find interesting. Analytics cookies (e.g. _ga, _ga_*) are setonly after you click “Accept” in the banner (Art. 6(1)(a) GDPR). Without consent, Google Analytics does not set cookies.

We remember your choice in your browser’s storage (localStorage, key cookie-consent) so we don’t ask on every visit. You can change or withdraw your consent at any time via “Cookie settings” in the site footer.

4. Hosting and technical data

The site and the subscriber database run on Cloudflare, Inc. infrastructure. On every visit, Cloudflare processes technical data (IP address, browser type) to deliver the site and protect it from attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in operating the site securely.

5. Recipients and transfers outside the EEA

Your data may be processed on our behalf by:

• Cloudflare, Inc. (hosting, database, spam protection),
• Google Ireland Ltd. / Google LLC (Google Tag Manager, Google Analytics – only with your consent).

Both companies may process data in the USA. Transfers are based on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission. We do not sell or share your data with anyone else.

6. Your rights

You have the right to:

• access your data and receive a copy,
• rectify your data,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time (this does not affect the lawfulness of earlier processing).

You also have the right to lodge a complaint with the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country.

7. Profiling

We do not make automated decisions about you or profile you within the meaning of the GDPR.