Who processes your data
Grad Država (graddrzava.com) is built and run by Antonio Bubnić, as a private individual and a free hobby project — not a registered company. For any question about this policy, or a request to see or delete your data, reach out at antonio.bubnic.ets@gmail.com.
What data we collect
- Player name
- You type it in Settings. It's stored in your browser (localStorage) and sent to any room you join, so other players can see you by name. It doesn't have to be your real name.
- Google sign-in (optional)
-
If you sign in, we receive your email and name from your Google account (scope
openid email profile), solely to pre-fill your player name. The game, rooms, and scoring work identically without signing in — Google login is never required. - Suggestion / feedback message
- If you send a suggestion from Settings, we store the suggestion text, the name you're playing under at that time, the time sent, and — if you're signed in with Google — your email, so we can reply if needed.
- Camera (QR scanner)
- When joining a room, the camera is used only to read a QR code locally in your browser. Nothing is uploaded or stored — the decoding happens instantly, on your device.
- Match data
- Room name, room code, answers, and scores are tied to the room, not to you personally, and are deleted automatically once the match expires (12 hours of inactivity).
- Technical visit data
- The site uses Vercel Web Analytics and Vercel Speed Insights — both are cookieless and only measure aggregated, anonymized metrics (visit counts, load speed, country, device type) with no persistent identifier that would track you across other sites. More in the cookie policy.
Why, and on what legal basis
- Consent — signing in with Google or sending a suggestion means you consent to that data being processed for the purpose stated next to it.
- Legitimate interest — player name, room code, and answers are processed because the game cannot technically function without them (someone has to see who wrote what).
Who your data is shared with
Data is never sold or shared for marketing. It's only processed by the infrastructure providers the game relies on:
- Supabase — database and authentication.
- Google — only if you choose to sign in with a Google account.
- Vercel — site hosting, plus the Analytics/Speed Insights above.
How long we keep data
Rooms and their contents are deleted automatically after 12 hours of inactivity. Your player name and settings stay in your browser until you clear them yourself (browser settings → clear site data). Suggestions remain stored until manually deleted on request — there's no automatic expiry since they serve as lasting feedback about the game.
Your rights
Under the GDPR, you have the right to:
- request access to the data we hold about you,
- request its correction or deletion,
- withdraw consent (e.g. stop signing in with Google),
- lodge a complaint with your local data protection authority.
Since there's no admin dashboard that automates this, all requests are handled manually by the owner — email antonio.bubnic.ets@gmail.com and we'll respond within a reasonable time.
Security
The connection to the site and database runs exclusively over HTTPS. Access to database data is restricted with row-level security policies — no one outside the server can read other players' suggestions or private room data beyond what the game itself displays.
Changes to this policy
If how data is processed changes, the date at the top of this page will be updated. For bigger changes (e.g. a new type of data being collected) we'll try to surface that inside the app as well.