POWDERLINE

1 · Who is responsible — Powderline is operated by Roman Princ, ID No. (IČO) 21782571, registered office Hluboká 4591/10, Mšeno nad Nisou, 466 04 Jablonec nad Nisou, Czech Republic, who is the data controller within the meaning of Regulation (EU) 2016/679 (the "GDPR"). For any privacy matter, including exercising your rights under section 8, write to powderlinegame@gmail.com or to the postal address above.

2 · The short version — the game is playable with no account and no tracking. We collect only what the features you choose to use require, we use no advertising or analytics services, we never sell or share personal data for marketing, and you can erase everything yourself in one click. The sections below list every category of data we touch.

3 · Playing without an account — game state and preferences (rider name, time of day, sound, graphics quality, your best run, a stashed invite code, and a same-day flag so a returning visit is not counted twice) are stored only in your browser's localStorage and never leave your device. We set no cookies and load no third-party scripts, fonts or trackers. The only data sent to us is a leaderboard post you explicitly choose to make: the rider name you typed, score, distance and a timestamp.

4 · Traffic statistics — we count page loads as three aggregate numbers per calendar day: total loads, first-loads-of-the-day and signed-in loads. These counters contain no IP address, no identifier and no per-visitor records of any kind — they cannot be linked to you, by us or anyone else. Whether you are a "first load of the day" is decided by a date flag in your own browser.

5 · With a rider account — to run the game and keep your progress (art. 6(1)(b) GDPR) we store: your e-mail address and password (login only; stored as a salted hash, never readable by us), rider name, coin balance, cosmetic loadout, best run, ride log (distance, score, coins, duration, top speed, timestamps), quest progress, wheel-spin and unlock history, your invite code and — if you joined through an invite link — which rider invited you. At sign-up we also record the time and version of the Terms and this policy you accepted (art. 7(1) — proof of acceptance). Your e-mail is never shown to other players and never used for marketing. Access to account data is limited to the operator, for running and moderating the game.

6 · 1v1 races — races connect the two players directly, peer-to-peer (WebRTC), so, like any direct connection, your IP address is visible to your opponent. During matchmaking your IP and a random peer id pass through third-party connection services: the PeerJS cloud signaling server, Google STUN servers and — only if a direct connection cannot be established — PeerJS TURN relays (EU/US, so your IP may briefly transit outside the EU). We store none of this, and it happens only while you race (art. 6(1)(b): providing the race you requested).

7 · Infrastructure — our database and login provider is Supabase, hosted in the EU (Frankfurt), acting as our processor under an art. 28 data-processing agreement. The game itself is served from an EU-hosted server whose web server keeps standard, short-lived access logs (IP address, time, requested URL, browser identification) for security and operations (art. 6(1)(f)); they are rotated away after about two weeks and are not combined with game data. Apart from these providers, data is disclosed only if the law requires it.

8 · Your rights — under arts. 15–21 GDPR you may request access to your data, a copy for porting, correction, erasure, restriction of processing, or object to processing based on legitimate interests, and you may withdraw any consent at any time without affecting past processing. Write to powderlinegame@gmail.com from the account's e-mail address; we respond within one month (art. 12(3)). You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or the supervisory authority of your own country.

9 · Retention & deletion — account data is kept until you delete the account, then erased immediately and permanently: profile, rides, quests, coins, skins, invite relations and leaderboard entries posted while signed in. Delete it yourself under ACCOUNT → DELETE ACCOUNT (it takes effect at once), or e-mail us. Anonymous leaderboard posts are not linked to you — e-mail us to have one removed. Aggregate daily counters (section 4) contain nothing personal and are kept for the game's statistics.

10 · Security — all traffic is encrypted in transit (TLS), passwords are stored only as salted hashes, and every database table is protected by row-level security so one player can never read another's data. We collect little precisely so that little can leak.

11 · What we don't do — no advertising or analytics SDKs, no fingerprinting, no profiling, no automated decision-making, no AI processing of your data, no selling or sharing of data for marketing. The "free spin" ad screen is an inert placeholder; if real ads ever ship, this policy will be updated and you will be asked first.

12 · Children — the game is playable without an account and collects no more data from children than from anyone else. Creating an account requires the age set out in the Terms. Parents or guardians can write to us at any time to have a child's account or posts removed.

13 · Changes — changes to this policy are announced here with a new effective date; material changes are additionally flagged in the game before they take effect.

Version 2 — effective 18 August 2026.

1 · Who we are & what this covers — Powderline is a free browser game operated by Roman Princ, ID No. (IČO) 21782571, registered office Hluboká 4591/10, Mšeno nad Nisou, 466 04 Jablonec nad Nisou, Czech Republic ("we"). These terms govern the game, rider accounts, leaderboards, quests, cosmetics and 1v1 races. Contact for anything in these terms: powderlinegame@gmail.com.

2 · Acceptance — by playing you accept these terms; if you do not agree, do not play. Creating an account requires explicit acceptance (the checkbox at sign-up); we record the time and the version of the terms you accepted.

3 · Eligibility & your account — you must be at least 15 years old to create an account, or have a parent's or guardian's permission (the game itself is playable without an account at any age). One account per person, registered with a real e-mail address you control. Keep your password to yourself — we will never ask for it — and tell us promptly if you believe your account has been compromised. You are responsible for activity on your account. You can delete it at any moment under ACCOUNT → DELETE ACCOUNT; deleting is as easy as signing up and takes effect immediately.

4 · The service — provided free of charge, as-is and as-available, with no warranty of availability, error-free operation or preservation of progress. Features, the economy, drop odds, difficulty and the game itself may be changed, rebalanced, suspended or discontinued at any time without compensation. Nothing in these terms limits your mandatory statutory rights.

5 · Fair play — you must not: cheat, exploit bugs for advantage, use bots, scripts or automation to play or to post scores; probe, overload or interfere with the service or its API; impersonate other people; use offensive, misleading or infringing rider names or leaderboard entries; or farm invite rewards with accounts you create or control yourself. Report exploitable bugs to us instead of using them.

6 · Enforcement — if these rules are broken we may, in proportion to the breach: remove leaderboard entries or rider names, revoke coins or items gained through abuse, and suspend or delete the account. Where practicable we will tell you what rule was broken. You can object to any measure at powderlinegame@gmail.com and we will review it.

7 · Coins & cosmetics — coins and cosmetic items are virtual content with no monetary value. They cannot be bought for money, sold, transferred between accounts or cashed out, and exist only as a licence to display them in the game, which ends with the account. Wheel odds are published in the shop, including the legendary pity timer; the economy may be rebalanced under section 4.

8 · Leaderboards & your content — by posting a run you grant us the right to display the rider name, score and distance you submitted, publicly and for as long as the entry stands. Entries that break section 5 may be removed. Anonymous entries can be removed on request (see the Privacy Policy).

9 · 1v1 races — races run peer-to-peer between the two players. We do not operate the connection infrastructure (PeerJS, STUN/TURN) and are not responsible for its availability, nor for your opponent's connection or conduct. Racing reveals your IP address to your opponent — see the Privacy Policy.

10 · Ownership — the game, its code and assets belong to their authors (see CREDITS.md). You receive a personal, non-exclusive, non-transferable licence to play the game in your browser — not to copy, resell, scrape or re-host it or its content.

11 · Liability — to the extent permitted by law, we are liable only for damage caused intentionally or by gross negligence, and not for loss of virtual items, progress or availability. Nothing in these terms excludes or limits liability that cannot legally be excluded or limited, including your mandatory rights as a consumer.

12 · Changes to these terms — we may amend these terms for legal, security or gameplay reasons. The current version, with its effective date, is always available here; material changes are flagged in the game in advance. Continued play after the effective date means acceptance — if you do not agree, stop playing and, if you have an account, delete it.

13 · Law & disputes — these terms are governed by the laws of the Czech Republic; if you are a consumer, the mandatory protections of your country of residence still apply. Please contact us first — most issues are solved by e-mail. Consumers in the EU may also use alternative dispute resolution before the Czech Trade Inspection Authority (coi.cz) or the European Commission's ODR platform (ec.europa.eu/consumers/odr).

Version 2 — effective 18 August 2026.