Privacy policy
Last updated: 15 October 2026
1. Controller
The controller of your personal data is Carles Climent Oltra, Tax ID 20496132G, Calle Cervantes, 3, Llocnou d'En Fenollet (Valencia), Spain. For any privacy matter: hola@strollverse.com.
2. What data we process, why and on what legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Email and password (the password is stored hashed; we cannot see it). If you sign in with Google: your email, your name and your Google identifier (never your Google password) | Creating your account, signing in and recovering access; important account notices | Contract (Art. 6(1)(b) GDPR) |
| @username, character name and look, sign-up date | Identifying you to other players in the game | Contract |
| Your save: character position on the map, inventory, in-game money, homes, businesses, investments, progress | Saving your game and applying the game rules (including cheat detection) | Contract and legitimate interest in fair play (Art. 6(1)(f)) |
| Presence: whether you are online and where your character is | Showing your character to other players on the map | Contract |
| Chat messages, clubhouse guestbook signatures and your public profile | Communication between players and moderation | Contract and legitimate interest in a safe environment |
| Friendships, trades, prize-draw entries, vouchers and map properties | Making those parts of the game work | Contract |
| VIP Pass status and subscription data provided by Paddle (customer ID, status, dates, country) | Activating and maintaining your VIP and handling enquiries | Contract and legal obligations |
| Date and version of the terms you accepted | Proving acceptance | Legal obligation and legitimate interest |
| Technical data: IP address, browser and server logs | Running the service, security and abuse prevention | Legitimate interest |
Location: the game does not request or use your device’s real location. The position stored and shown is your character’s position on the game map, which you choose.
We do not sell your data, show ads, build marketing profiles or make automated decisions with legal effects on you (automatic cheat detection only rejects impossible saves; any sanction is reviewed by a person).
3. What other players see
Your @username, your character and its position on the map, your public profile (level, collection, showcase), what you write in chat and in guestbooks, and whether you are VIP. Nobody sees your email address.
4. Who we share it with
Only with the providers we need to run the game, which process data on our behalf under a data processing agreement:
- Supabase (database and accounts): servers in Frankfurt (EU).
- Fly.io (game server): servers in Frankfurt (EU).
- Brevo (account emails such as confirmation or password recovery): France (EU).
- Cloudflare (domain and DNS).
Paddle (Paddle.com Market Limited, United Kingdom) is the Merchant of Record for purchases: it sells the VIP Pass on our behalf, takes payment and handles taxes and refunds. It processes your payment data as an independent controller under its privacy policy. We never see your card details.
Maps, routes and search. To draw the map, calculate routes and search for places, your browser requests data from public map services: OpenFreeMap (map), FOSSGIS and OSRM (routes) and the OpenStreetMap Foundation’s Nominatim (search). These services receive your IP address and what you search for or the coordinates of your character’s route, but no account data.
Sign in with Google. If you choose to sign in with your Google account, Google (Google Ireland Limited) confirms who you are and gives us your email and name. What Google does with your data is governed by its privacy policy. You can remove Strollverse's access at any time from your Google account.
We may also disclose data to authorities when required by law, and to professional advisers bound by confidentiality.
5. Transfers outside the EU
We store data in the EU. Some providers (such as Supabase, Fly.io, Cloudflare or Paddle) are US or UK companies and may access data from there for support. In that case the transfer is covered by a European Commission adequacy decision (the UK, or the EU-US Data Privacy Framework for participating companies) or by standard contractual clauses.
6. How long we keep it
- Account, save, friendships, trades, draws and profile: while you have an account. They are deleted when you delete it.
- Chat messages: 30 days, then automatically deleted.
- Server technical logs: a few days.
- Billing data: kept by Paddle for the periods required by tax law.
7. Your rights
You can request access to, rectification or erasure of your data, restriction of processing and data portability, and object to processing based on legitimate interest, by writing to hola@strollverse.com from your account email. You can delete your account yourself in ⚙️ Settings → Legal → “Delete my account”. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
8. Children
The game is for people aged 14 and over. If you are a parent or guardian and believe a child under 14 has created an account, write to us and we will delete it.
9. Security
We use encrypted connections (HTTPS), hashed passwords, database access restricted to the game server, and provider backups. No system is infallible: if a breach affected your data, we would notify you and the authority as required by law.
10. Cookies and local storage
See the Cookie policy.
11. Changes
If we make significant changes to this policy, we will notify you in the game or by email.