Privacy Notice
Last updated: 27 September 2026
Stefan Velickovic is the data controller for personal data processed through Café Empire.
What we collect and why
- Account data (username, password hash), to create and secure your account (contract).
- Game data (saved games, leaderboard results), to provide the game and leaderboard (contract).
- Purchase records (order reference, status, payment provider customer id), to grant and manage your Student Edition or Full Game unlock (contract, legal obligation).
- Technical data (IP address, device/browser info, error logs), for security, fraud prevention and fixing bugs (legitimate interests).
- Support messages, to answer your questions (legitimate interests).
Who we share it with
- Hosting and infrastructure providers acting as our processors.
- Paddle.com, our Merchant of Record, for the sale of the product, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on adequacy decisions or Standard Contractual Clauses.
Retention
We keep account and game data while your account is active, and purchase records as long as tax law requires. Afterwards data is deleted or anonymised.
Your rights
You may request access, correction, deletion, restriction, portability, object to processing, and withdraw consent at any time. You can also complain to your data protection authority. We reply within one month. Contact: stefanvelickovic33@gmail.com.
Security
We use encryption in transit, access controls and per-account data isolation.
Cookies
Essential browser storage keeps you signed in and remembers your game settings. Optional analytics choices remain separate from advertising choices.
Google Ads signup measurement
We use Google Ads to measure confirmed new player accounts and optimize our ads for signups. Google receives browser and device information, page addresses, advertising click identifiers and conversion events. We do not send your email, player name or game data for customer matching or enable ad personalization.
In the EEA, UK, Switzerland and Canada, or when we cannot determine your country, advertising measurement is blocked until you accept. Canada is treated conservatively because our country lookup cannot identify Quebec. Elsewhere ordinary measurement may run without a banner, but we honor advertising refusals and Global Privacy Control. You can reject as easily as accept and withdraw at any time below or through Cookie preferences on the home page. Withdrawal stops future conversion reporting; events blocked before acceptance are not replayed.
Your browser stores a pseudonymous consent receipt, the time, country, notice version and choices. Later choices preserve earlier acceptance evidence. A signup measurement receipt references the choice without sharing that record with Google. These records remain on your device until you clear site storage. Email confirmation or Google sign-in completed in another browser may not be measured.
Google may process measurement data internationally. Read Google’s business data privacy information for its processing and safeguards.