Privacy policy

Controller

The controller of Huikka's personal data is Patrick Korhonen, a private individual. Questions and requests about your data can be sent to contact@huikka.com.

In short

Huikka does not ask for your real name, your email address or your phone number, and it has no ads and no tracking. We handle only what the games and purchases need in order to work.

What we handle

Player id. On its first start the app creates a random id, by which the server recognises the games and purchases of your phone. The id does not show who you are, but because your games and purchases are linked to it, it is personal data.

Player name. The name you give the app is stored on your phone and sent to every game you join, so that the other players see it.

Game data. A game's state, its moves and its join code are stored on the server, so that every phone shows the same game.

Device id. When you create or start a game, or when the app checks which trials are used, it sends an id of your phone: on Android the phone's Android ID, on an iPhone a random id the app has created and stored on the phone itself. The server stores only a hash of it, from which the original cannot be worked out, and only when you use the free trial of a paid game.

Purchases. Payments are handled by the App Store or Google Play. Purchases are checked with the RevenueCat service, to which the app passes your player id, the details of your purchases (product, price, store and time) and basic device and app information, such as the operating system and the app version. Our server also remembers the purchases it last checked, so that the games you own keep working even if RevenueCat doesn't answer for a while.

Technical data. The server logs technical details of requests, such as the IP address and the time, and counts how often games are created and joined, to prevent misuse.

Error reports. When the app or the server meets an unexpected error, a report goes to the Sentry service: the error and where in the code it happened, the taps and server requests that led to it, the device model, the operating system, the app version and the player id. The report holds no player name, and no IP address is stored.

Data on your phone. The app stores your player name, your language choice, your sign-in and your latest game on your phone, so that you can get back to the game. They are removed when you delete the app. On an iPhone the device id stays in the phone's keychain even after the app is deleted.

Why, and on what basis

Games and purchases. We handle your player id, player name, game data and purchase data in order to provide the games and what you have bought. The legal basis is contract (Article 6(1)(b) of the EU General Data Protection Regulation). Without a player id and a player name the app cannot be used.

Preventing misuse, and security. We handle the device id hash, usage counts and logs so that the free trial cannot be used again and so that the service keeps running. The legal basis is our legitimate interest (Article 6(1)(f)).

Fixing faults. We handle error reports and update checks so that faults are found and fixes reach the phones. The legal basis is our legitimate interest (Article 6(1)(f)).

We do not use the data for advertising or profiling, and we do not sell it to anyone. Nor do we use it for automated decisions that have legal or similarly significant effects on you.

How long data is kept

Games are deleted from the server about a day after they ended or were abandoned, and with them the player names and moves.

Trial records, meaning the game type, the device id hash and the player id, are kept for as long as we sell games, because otherwise a trial could be used again.

The player id and the remembered purchases are kept until you ask us to delete them. Usage counters are removed within a few hours, and server logs are kept for a few days at most.

RevenueCat keeps purchase data for as long as we use its service, and Sentry deletes error reports after 30 days.

Who receives data

Supabase. Supabase Inc. runs the server and the database the games run on. The data is stored in the EU.

RevenueCat. RevenueCat Inc. checks purchases on our behalf and stores purchase data in the United States.

Expo. Expo (650 Industries Inc.) delivers the app's updates. When the app looks for an update, Expo's server receives the phone's IP address, a random identifier of the installation, the platform and the app version.

Sentry. Sentry (Functional Software Inc.) stores error reports in the EU, in Germany.

Apple and Google. The App Store and Google Play handle payments as controllers in their own right, under their own privacy policies.

We do not share data with anyone else unless the law requires it.

Transfers outside the EU

Supabase, RevenueCat, Expo and Sentry are US companies, so data may be handled in the United States. Supabase's and RevenueCat's transfers are based on the standard contractual clauses approved by the European Commission, Expo's on the EU-US Data Privacy Framework, and Sentry's on both.

The website

Our website huikka.com uses no cookies, no analytics and no tracking, and we ourselves store nothing about its visitors. The site is hosted by Cloudflare Inc., which handles your device's IP address and technical data about requests in order to deliver the pages and protect them from misuse. The legal basis is our legitimate interest (Article 6(1)(f)), and Cloudflare keeps the data only as long as is needed for this.

Cloudflare is a US company, so data may be handled in the United States. These transfers are based on the EU-US Data Privacy Framework and on the standard contractual clauses approved by the European Commission.

Your rights

You have the right to know what data about you we handle and to ask for it to be corrected or deleted. You may also object to handling based on our legitimate interest, ask for handling to be restricted, and receive the data you gave us in a machine-readable form.

Send your request from Contact in the About section of Settings. It starts a message to contact@huikka.com with your player id and the app version already in it. As we do not know who you are, the id is the only way to find your data. After a deletion we keep only the device id hashes of trial records, so that trials cannot be used again.

If you think your data is handled unlawfully, you may complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the data protection authority of the country where you live or work.

Minors

Huikka is meant for adults only, and we do not knowingly collect data about minors.

Changes

We update this policy when the way we handle data changes. The current version and the date it was updated can always be read in the app and on our website huikka.com.