Privacy Policy

Last Updated: August 23, 2026

Welcome to qTime ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how it is used, how we safeguard it, and your legal rights under the General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

qTime (https://qtime.social) is a logic puzzle web application and Progressive Web App (PWA) operated by Jakub Garcarzyk, based in Poland. For any data protection inquiries, please contact:

📧 petler.dev@gmail.com

2. What Information We Collect

We collect only the minimal data required to provide a smooth, persistent game experience and manage subscriptions:

A. Guest Sessions (Playing Without an Account)

• Anonymous Session Data: When playing as a guest, temporary anonymous tokens and browser storage keys are used to preserve active game state, focus energy (battery), and daily streak on your current device.
• Local Device Storage: We utilize standard browser localStorage and sessionStorage to store client-side UI preferences, game layouts, and cached challenge states.

B. Registered Player Accounts & Subscriptions

• Account Credentials: Email address and securely salted/hashed passwords managed via our Appwrite backend. Plain-text passwords are never visible or accessible to us.
• Player Profile: Your chosen player nickname/username and selected avatar identifier.
• Subscription & Billing Metadata: Active subscription tier (monthly/annual), billing type (recurring/one-time), expiration/renewal timestamps, auto-renewal preferences, and your unique Stripe Customer Identifier.
• Consent Logs: Versioned records and timestamps of your accepted Terms of Service, Privacy Policy, and optional marketing communication preferences.

C. Payment & Transaction Processing (Stripe)

• Payment Processing: When you purchase qTime Pro, transactions are processed directly by our payment processor, Stripe Payments Europe, Ltd. (an independently certified PCI-DSS Level 1 service provider).
• Financial Data We Do NOT Collect: We never collect, process, or store raw credit card numbers, debit card details, expiration dates, or CVV/CVC security codes on our servers.
• Transaction Records We Maintain: We store minimal transaction metadata (transaction ID, purchase date, amount paid, currency, invoice ID, and payment status) strictly necessary to activate your Pro privileges, generate VAT receipts, and comply with statutory accounting laws.

D. Gameplay & Statistics Data

• Game Performance: Solved puzzles across all games (Sudoku, Mahjong, Memory, Mastermind, Maze), completion times, and daily challenge streak counts.
• Virtual Economy: Accumulated points balance, points spent on hints or streak restores, and focus energy (battery) statuses.
• Verification Tokens: Server-issued tokens used to authenticate puzzle completions without exposing pre-computed solutions to the client.

E. Analytics & Telemetry

• Cookieless Analytics: We use Umami, an open-source, privacy-preserving analytics platform. It measures aggregated metrics (e.g., page views, button clicks, country of origin, browser/device type) without tracking individual identities or placing cross-site advertising cookies.

3. Legal Bases for Processing (GDPR Art. 6)

We process your data strictly under valid legal bases:

• Performance of a Contract / Service (Art. 6(1)(b) GDPR): Operating your user account, managing your qTime Pro subscription, syncing points and streaks across devices, and delivering game services.
• Legal Obligation (Art. 6(1)(c) GDPR): Retaining invoice and transaction records for the duration required by applicable Polish and European tax, accounting, and VAT regulations.
• Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring platform security, preventing payment fraud, mitigating automated bot abuse, and maintaining fair play.
• Consent (Art. 6(1)(a) GDPR): Optional marketing or product updates, which you can opt into during registration and revoke at any time in your Profile settings.

4. Data Storage and Security

Account and game records are stored securely on European-compliant cloud infrastructure (Appwrite). All client-server communications are encrypted in transit via Transport Layer Security (TLS/HTTPS). Authentication tokens are managed via secure cookie/header mechanisms.

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you possess extensive data rights, with self-service tools built directly into qTime:

• Right of Access & Data Portability: You can download a complete copy of your personal data, subscription details, payment history, streak history, and preferences in JSON format at any time directly from the Profile page.
• Right to Erasure ("Right to be Forgotten"): You can permanently delete your account and all associated gameplay records with immediate effect via the "Delete Account" button on the Profile page. Deletion automatically cancels any active Stripe subscription.
• Right to Rectification: You can update your player name, avatar, password, and payment methods (via Stripe Customer Portal) at any time.
• Right to Withdraw Consent: You can toggle marketing preferences on or off instantly with one click.
• Right to Lodge a Complaint: You have the right to contact your local supervisory authority or the Polish Data Protection Authority (Prezes Urzędu Ochrony Danych Osobowych — PUODO, uodo.gov.pl).

6. Cookies & Tracking Technologies

qTime adheres to a zero-invasive-tracking policy:

• Essential Storage: We use minimal essential cookies and browser storage strictly required to keep you logged in and retain game progress.
• No Third-Party Advertising Trackers: We do not sell your personal data or utilize behavioral tracking cookies across third-party networks.

7. Children's Privacy

qTime provides brain training puzzles suitable for general audiences. We do not knowingly collect personal data from children under the age of 13 (or under 16 where required by local law). If you believe a child has submitted personal information, please contact us for swift removal.

8. Changes to this Privacy Policy

We may update this Privacy Policy to reflect new games, platform enhancements, or legal standards. The date of the most recent revision will always be displayed at the top of this page.

9. Contact

If you have questions, feedback, or requests regarding this Privacy Policy, please reach out to support@qtime.social.