Last updated: 30 September 2026

Privacy policy

Who runs this website

This website and the game Age of Bandits are run by a private individual, (the operator), who is the controller of your personal data. You can reach the operator through the contact form.

The game and online play

When you play online, the game server processes the nickname you choose (other players can see it – don't use your real name), a random player tag (e.g. #1234), your character's position and actions, and your points. The server uses your IP address only in memory while you play (for example, so that a kicked player can't rejoin a room) and doesn't save it anywhere. The game has no chat – players talk on our Discord, where Discord's own terms and privacy policy apply.

The game server runs on the operator's own device. The connection to it passes through the network of Cloudflare, Inc. (USA), which processes your IP address and technical connection data in the process. Data may be transferred to the USA under the EU–US Data Privacy Framework.

So that we can see how the game is played, the server stores statistics: your latest nicknames, player tag, time of first and last connection, playing time, number of rounds and points; if you don't play for 12 months, we delete you from the statistics. The list of the last 60 rounds (nicknames and points) is continuously overwritten. Logins, disconnections and connection errors (with nickname, player tag and browser type, but no IP address) are written to the server log, which is deleted after 30 days.

Legal basis: providing the game you want to play (Art. 6(1)(b) GDPR) and our legitimate interest in a secure, working game (Art. 6(1)(f) GDPR). The game uses no cookies or analytics tools. It keeps your settings, nickname, player tag and the data needed to rejoin a running game only in your browser.

Contact form

When you send us a message, we process your email address, your message and, if you add one, a photo. We use them only to reply to you. The message is delivered to the operator by email and is not stored on the website. The photo is re-saved before sending, which removes hidden data such as the location where it was taken.

Legal basis: our legitimate interest in answering your message (Art. 6(1)(f) GDPR). We delete messages no later than 12 months after the conversation ends.

Google Analytics

We use Google Analytics (Google Ireland Ltd.) to count visits and see which pages people read – but only if you agree in the cookie banner. Google Analytics stores cookies (_ga, _ga_*) in your browser for up to 13 months. Data may be transferred to Google in the USA under the EU–US Data Privacy Framework.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in the cookie settings.

Other data

To keep the website secure, the hosting provider automatically records technical data (IP address, time, requested page) in server logs. Your settings on this website (your cookie choice, the language you pick and whether you closed the language banner) are stored only in your own browser; the language you pick is kept in the aob-jazyk cookie for one year so that the website opens in that language next time.

Your rights

You have the right to access, correct or delete your data, to restrict or object to its processing and to withdraw your consent. Just write to us through the contact form. You can also lodge a complaint with a data protection authority, for example the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).