Legal
PRIVACY
POLICY
We built Sokoban Online to be a simple, distraction-free game. That philosophy extends to data: we collect as little as possible, we do not sell anything, and we never share your information with advertisers.
Who We Are
Sokoban Online is an independent hobby project. We operate the website located at sokoban-online.example (and any subdomains). When this policy refers to "we", "us", or "our", it means the operator of that website.
For privacy enquiries, contact us at [email protected] or use the Contact page.
What Data We Collect
We distinguish between data collected automatically by the server and data you voluntarily provide via the contact form.
| Data Type | How Collected | Stored? | Level |
|---|---|---|---|
| IP address | Automatic — every HTTP request | Briefly in server access logs | Minimal |
| Browser & OS (User-Agent) | Automatic — every HTTP request | Briefly in server access logs | Minimal |
| Pages visited & timestamps | Automatic — server access logs | Up to 30 days, then deleted | Minimal |
| Game progress (level, moves) | In-memory JavaScript only | Never — lives only in your browser tab | None |
| Name, email, message | Contact form — if you choose to submit | Only until your enquiry is resolved | Minimal |
| Payment or financial data | Never collected | — | None |
| Advertising or tracking IDs | Never collected | — | None |
Why We Collect It
Server access logs (IP address, User-Agent, timestamps) exist solely for security and operational purposes — detecting abuse, diagnosing server errors, and understanding aggregate traffic levels. We do not use them to build profiles of individual users.
Contact form data (name, email, message) is used only to reply to your enquiry. We do not add you to any mailing list, and we do not share your contact details with anyone outside the project.
Our legal basis under GDPR is legitimate interests (server security and operating the service) for access logs, and contract performance / consent for contact form submissions.
Cookies & Local Storage
We do not set any cookies. The game runs entirely in your browser using JavaScript variables that live only for the duration of the browser session. When you close the tab, all game state is discarded.
We do not use localStorage, sessionStorage,
IndexedDB, or any other persistent browser storage mechanism.
We do not use tracking pixels, beacon requests, or fingerprinting scripts.
The only external request made by the page is to Google Fonts (fonts.googleapis.com) to load the Space Mono and Bebas Neue typefaces. Google's own privacy policy governs that request. If you prefer to block it, the page degrades gracefully to your browser's default monospace font.
Third Parties
We do not sell, rent, trade, or otherwise transfer your personal data to third parties. The only partial exception is:
Hosting provider — our server infrastructure is operated by a third-party hosting company. They process server access logs in the normal course of hosting. They are contractually bound not to use your data for any other purpose.
Google Fonts — loading the page causes your browser to make a request to Google's CDN. See Google's Privacy Policy for details.
We do not use Google Analytics, Facebook Pixel, Hotjar, Intercom, or any other third-party analytics or marketing tool.
Your Rights
Depending on where you live, you may have some or all of the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to stop processing your data while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Data Retention
Server access logs are automatically purged after 30 days.
Contact form messages are retained until your enquiry is fully resolved, after which they are deleted. If you request deletion earlier, we will action it within 7 days.
Game state (level progress, move count) is never stored anywhere outside your browser tab and vanishes the moment the tab is closed or refreshed.
Children's Privacy
Sokoban Online is a general-audience game. We do not knowingly collect personal data from children under 13 (or under 16 where applicable under local law). If you believe a child has submitted personal data to us via the contact form, please email [email protected] and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes we will add a prominent notice on the home page for at least 30 days.
Continued use of the site after a policy update constitutes acceptance of the revised policy. If you disagree with any change, please stop using the site and contact us to request deletion of your data.
Contact Us
For all privacy-related questions, requests, or complaints:
Email:
[email protected]
Response time: within 30 days (usually much faster)
You can also use our general Contact page and select "Other" as the topic.
Questions about this policy? We are happy to explain anything in plain English. Use the contact form and we will get back to you.
Contact Us