Privacy Policy

This page explains what data Pastizzi Clicker collects and why.

1. Data controller

Maksim Bachurin is the controller of personal data processed for Pastizzi Clicker. Contact: workbachurin@gmail.com.

2. Age requirement

The game is for users aged 13 or older. We do not knowingly collect personal data from children under 13. If we learn that a user is under 13, we may delete the account and related data.

3. Data we collect

• Google sign-in data: Google user ID, display name, email address and profile avatar.
• Game data: score, balance, upgrades, click power, auto-baker rate, leaderboard position, daily bonus status and timestamps.
• Pastizzi Drop data: QR token, claim quantity, claim status, redemption status, redemption timestamp and related drop information.
• Support/admin data: support messages, admin replies and admin notes where needed.
• Security data: request metadata, rate-limit signals, anti-cheat state and other technical information needed to keep the game fair and secure.
• Consent data: age confirmation, legal acceptance and cookie/ad consent choices.

4. Data we do not collect for regular players

We do not ask regular players for phone numbers, WhatsApp, Instagram, postal addresses, payment details, government ID or full date of birth. The admin QR scanner may request camera permission only for admins or authorised scanners.

5. Why we use data

We use data to create accounts, save progress, run leaderboards, operate Pastizzi Drops, generate and scan QR codes, prevent cheating, secure the game, respond to support, show required notices, and comply with legal obligations.

6. Legal bases

• Contract/performance of the service: account login, gameplay, score saving, upgrades, leaderboard and QR claims.
• Legitimate interests: security, anti-cheat, abuse prevention, bug fixing, fair play and support.
• Consent: optional advertising cookies, personalised ads where enabled, non-essential analytics if added later, and cookie preferences where required.
• Legal obligation: compliance, disputes and required legal requests where applicable.

7. Public leaderboard

Your display name, avatar, score and ranking may be visible to other users. Do not use a display name or avatar that reveals private information or violates the Terms.

8. Pastizzi Drops and partners

A participating local partner may receive only the information reasonably needed to validate or fulfil a Pastizzi Drop claim, such as confirmation that a QR claim is valid and the number of pastizzi to provide. We do not share your email address with the partner unless needed for a specific support, safety or dispute reason.

9. Cookies, AdSense and consent

We use necessary cookies and local storage for login, security, gameplay and consent choices. We may use Google AdSense to show ads during transitions between tabs. Google and its partners may process data for ad serving, measurement, fraud prevention and, where consented, personalised advertising.

For users in the EEA, the UK and Switzerland, AdSense must be connected through a Google-certified consent management platform where required. Non-essential advertising cookies should not be loaded before valid consent.

10. Who we share data with

We may share data with service providers needed to run the game, including Google Sign-In, Google AdSense, hosting providers, database providers, consent management providers, authorised admins, participating local partners for pickup validation, and legal/professional advisers where required. We do not sell personal data.

11. Retention and deletion

Account data is kept while your account exists. If you delete your account, we delete your live account data, score, upgrades, claims and active QR codes. Some technical backups may remain until overwritten if backups are used.

12. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Contact workbachurin@gmail.com. You may also complain to the Malta Information and Data Protection Commissioner.

13. Security

We use reasonable technical measures such as server-side scoring, rate limits, replay protection, QR validation, admin access controls and security headers. No online service is completely secure.

14. Contact

For privacy questions, data requests, deletion requests or complaints, contact workbachurin@gmail.com.