Privacy and cookies

Effective date: October 5, 2026 1. Scope and controller This Policy explains how Collaps.io, operated by the operator of collaps-io.com (the "Operator"), handles information when you access the website and multiplayer Game. Privacy requests may be sent to support@collaps-io.com. 2. Information processed Gameplay data: nickname, selected color, current and highest mass, score, gameplay events, inventory state, connection status, and leaderboard position. Technical data: IP address, approximate location inferred from IP, timestamps, origin, browser/device characteristics, network messages, rate-limit events, security events, and server diagnostics. Device storage: browser game settings, language, progress, cached resources and privacy preferences described in section 5. Advertising and measurement data: after acceptance, Adsterra, Google AdSense, and providers loaded through Google Tag Manager may process IP address, cookie or similar identifiers, device/browser data, page activity, ad impressions, interactions, fraud signals, and approximate location under their own policies. 3. Information not requested The current Game has no user accounts and does not request payment details, government identifiers, precise location, contacts, microphone, camera, or health data. Do not place personal or sensitive information in a nickname. 4. Purposes and legal grounds We process data to provide real-time multiplayer gameplay, calculate scores, publish the leaderboard, maintain security, prevent abuse, diagnose failures, improve performance, comply with law, measure audiences, and fund the free service with ads. Depending on the jurisdiction, processing is based on performance of the requested service, legitimate interests in security and operation, legal obligations, and your recorded acceptance for advertising/measurement technologies. 5. Advertising, analytics, cookies and choices The Godot web game stores settings, language, personal progress and cached game resources locally, including in browser IndexedDB. We store your optional advertising and measurement choices as collaps_privacy_v3 in local storage. The Google AdSense bootstrap loads Google Privacy & messaging before a decision, with ad requests paused. Optional measurement and ad requests remain blocked until a relevant permission is available. Legal pages do not load this tag. You can reject optional technologies and still play. Privacy choices can be reopened from every site page. Withdrawing an existing permission reloads the page to stop future optional scripts; it cannot erase information already processed by third parties. Browser storage can be cleared in your browser settings. We use Google Privacy & messaging as the certified CMP for European regulations. Where Google confirms these regulations do not apply, the site offers separate optional advertising and measurement choices. If consent status cannot be determined, optional requests remain blocked. Adsterra ads may appear outside gameplay when advertising is permitted, and Google Tag Manager may load when measurement is permitted. Adsterra privacy: https://adsterra.com/privacy-policy-managed Adsterra cookies: https://adsterra.com/cookies/ Google privacy: https://policies.google.com/privacy 6. Sharing and processors Information may be processed by infrastructure and service providers needed to run the Game, including DigitalOcean hosting, database/cache software hosted for the Operator, Adsterra advertising, Google AdSense, Google Tag Manager and services configured through it, security vendors, professional advisers, and authorities when legally required. We do not directly sell player registration data. Advertising partners may independently process or disclose advertising identifiers as described in their policies. 7. International transfers Providers and ad recipients may process information internationally. Those locations may have different privacy protections. Where required, the Operator and relevant providers must use an approved transfer mechanism or other lawful safeguard. 8. Retention Live connection and gameplay state is generally temporary. Rotating operational logs are retained only as technically necessary for reliability and security. Highest-mass leaderboard records and their nicknames may remain until removed, replaced, no longer needed, or a valid deletion request is completed. Browser preferences remain until you clear site data. Third parties set their own retention periods. 9. Security The Operator uses HTTPS, network and packet limits, isolated services, access controls, container restrictions, and minimization measures. No Internet system is completely secure. You are responsible for keeping your browser and device updated and for avoiding suspicious ad destinations. 10. Your rights Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and may challenge solely automated decisions where relevant. A request should include enough information to locate the nickname/score and verify that you are the affected person; additional data will not be requested unless necessary. Withdrawal does not invalidate earlier lawful processing. Users may also complain to their local data protection supervisory authority. 11. Children The Game is not directed to children under 13 and the Operator does not knowingly collect their personal data. A parent or guardian who believes a child submitted information should request removal. 12. Changes and contact Updates will carry a new effective date and material changes may require renewed acceptance. Questions, rights requests, ad complaints, and deletion requests may be sent to support@collaps-io.com. The Operator must keep that channel operational.