← Basketballer

Privacy policy

Last updated: 30 October 2026 (version 2026-10-30)

Polityka prywatności po polsku

This is an English translation of the Polish privacy policy. The Polish version is the binding one: if the two differ, the Polish version prevails.

Below I describe what data I collect on the basketballer.pro website, in the Basketballer game (in the browser and in the Android and iPhone app) and on the “Basketballerzy” mailing list, why, and what your rights are. In short: for the mailing list I only need your e-mail address, website statistics with cookies (Google Analytics) run only if you agree to them, and the game keeps your career only on your device and counts statistics without your name, e-mail or player name. The app has no ads and no purchases and needs no account.

1. Data controller

The controller of your personal data is:
Krzysztof Niedbała
Łużycka 12 lok. 210
41-902 Bytom, Poland
E-mail: [email protected] (personal data and the mailing list), [email protected] (the game, bug reports)
Website: basketballer.pro, game: graj.basketballer.pro and the Basketballer app on Google Play and the App Store

For anything to do with the protection of your personal data, write to me at the e-mail address above. You can write in English.

2. What data I collect

The “Basketballerzy” mailing list (in the game: the “Echo Hali” subscription). I collect only your e-mail address, to send you news of the Basketballer game’s launch, important news about the game and the story of how it is made. Signing up needs confirmation: after you send the form you get a message with a link, and only clicking the link adds you to the list. The mailing system (Brevo) records the date and time of the sign-up and of the confirmation, and basic message statistics: whether a message was opened and whether a link in it was clicked.

Consent register. To be able to show that consent was given and to what exactly, with every sign-up I store: the e-mail address, the date and time, the exact wording of the consent in the version shown next to the form, the version of this policy, the place on the website where you signed up, the IP address, information about the browser (user agent) and the browser’s language. The register is append-only: nobody changes its entries.

E-mail contact. When you write to me, I process your e-mail address and the content of your message in order to reply.

Technical data. On every visit, the Cloudflare servers that run the website and the browser game process your IP address, browser data and the date and time of the request. Without this the website cannot be shown. The sign-up form is protected from bots by Cloudflare Turnstile, which analyses, among other things, the IP address and browser parameters. Turnstile is not used for tracking or advertising. The fonts used on the website are stored on the same server as the website, so you do not download them from third parties.

Website statistics without cookies. The basketballer.pro website and the browser game (graj.basketballer.pro) use Cloudflare Web Analytics; the app from Google Play and the App Store does not. This tool stores nothing on your device (no cookies and no identifiers) and does not recognise visitors. It collects the address of the page visited, the address of the page you came from, the type of browser and device, the country worked out from the IP address (the IP address itself is not stored) and page load times. I only see totals, e.g. how many page views there were on a given day.

Statistics with cookies: only with your consent. If you agree in the cookie window, the website starts Google Analytics 4, which stores cookies in your browser and collects information about the visit: the pages visited, approximate location (country, city), type of device and browser, where you came from and events, e.g. signing up for the mailing list. Without consent, Google Analytics does not load at all. The website uses no advertising cookies; if that changes, I will ask for your consent and update this policy. Your choice is stored in the browser’s storage.

I do not collect sensitive data and I do not make automated decisions about you that have legal or similarly significant effects. The mailing list is for people aged 16 or over. The game is covered in section 3, the app in section 3a.

3. The Basketballer game

This part covers the Basketballer game for phone and computer: in the browser at graj.basketballer.pro and as an app for Android (Google Play) and iPhone (App Store). It is the same game, so everything below applies to both; how the app differs from the browser game is described in section 3a.

Game data on your device. The game saves your career, settings (e.g. sound), achievements and your answer about statistics only on your device: in the browser game in the browser’s storage, in the app in the app’s storage. Without this the game could not work: once closed, the career would be lost. The game does not send this data to me or to anyone else (achievements in Game Center and Google Play Games are covered in section 3a). Share images are drawn on your device and go only where you send them; the same goes for the career file from the “Save the career to a file” button. You can delete the browser game’s data by clearing this site’s data in your browser settings; the career goes with it. How to delete the app’s data is described in section 3a.

Game statistics. To fix bugs and improve the game, the game sends statistics about how it is played to the PostHog tool: what happens in the career, games and training (e.g. contracts, results, ratings, actions played and skipped), which screens and buttons you use, your answer to the statistics question, game errors, the game version, technical data (device, system, screen size, language), the platform (browser, Android or iPhone) and the kind of version (browser game, test version or store version), and where you came to the browser game from (e.g. campaign tags in the address). The statistics do not include your name, e-mail address, IP address or anything you type in the game (e.g. the player’s name). The game does not record the screen or the session. I do not link the statistics to the “Basketballerzy” mailing list and do not use them for advertising.

Two answers to choose from. When you first start the game, it asks for consent. The two answers are equal and do not change how the game works. Until you answer, the game sends nothing to PostHog.

• “Yes” (consent). The game stores a random identifier on your device (in the browser’s storage or the app’s storage) and attaches it to the statistics. The identifier contains no name or other data about you; it lets me see whether players come back to the game and how it is played over the following days. This is pseudonymous data: on its own it does not show who you are.
• “No” (no consent). The game stores nothing on your device for statistics, and events are counted only in aggregate, without recognising the player. To count players within a single day, PostHog creates on its servers a hash of the IP address, browser data (in the app: the system’s built-in browser the game runs in) and a salt that changes daily; the hash cannot be turned back into that data, the salt is deleted after a day and the IP address is not stored.

You can change your answer at any time with the “Statistics” switch in the game’s menu. After switching to “No”, the game deletes the identifier from the device. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Consent to statistics with an identifier can be given by people aged 16 or over; younger players are asked to choose “No” or to talk to a parent.

Tool and storage location. The game statistics are stored by PostHog Inc. as a processor, on servers in the European Union (Frankfurt, Germany).

Bug reports and feedback. The “Report a bug” button in the game opens your e-mail program with a ready message to [email protected]. The game adds details that help find the bug: the game’s version and build number, the place in the game, the kind of device, the system and browser, whether the game runs inside an app’s window (e.g. Facebook’s), the screen size and the language. It does not add your name, the player’s name or career data. You see the whole message before sending it and can change it. I process a message you send like any other correspondence: to reply and fix the bug.

The Echo Hali subscription. In the browser game, the subscription button opens a window with the mailing list sign-up form, the same as on basketballer.pro: e-mail address, consent and Cloudflare Turnstile bot protection, whose script the game loads only when the window opens. The sign-up goes to the basketballer.pro server together with a tag of the place in the game it came from (e.g. the menu or the paper); the game passes on no other data, and the sign-up works as described in section 2. In the app the same button opens the form on basketballer.pro in your phone’s browser (section 3a).

3a. The Android and iPhone app

You download the Basketballer app from Google Play (Android) or the App Store (iPhone). It is the same game as on graj.basketballer.pro, packed into an app: the rules of section 3 apply to it too, with the differences described here. The app is free, has no ads and no in-app purchases, and needs no account. The game itself needs no internet; the network is used only for statistics, achievements in Game Center and Google Play Games, and links.

Permissions. The app uses the internet and vibration (which you can turn off in the game’s settings). It does not ask for access to your location, camera, microphone, contacts or photos. You load a career file through the system’s file picker and send images and files through the system’s share menu: the app sees only the file you choose.

Where the career is kept. In the app, the career, settings, achievements and your answer about statistics are saved in the app’s storage on the phone (in its private folder and settings, not in a browser), without involving my servers. You delete them by uninstalling the app, and on Android also with “Clear storage” / “Clear data” in the phone’s settings (Apps → Basketballer → Storage). On an iPhone, “Offload App” removes only the app and keeps its data. The browser game’s career and the app’s career are separate saves; you can move a career between them only with a file (“Save the career to a file” and “Load a career from a file” in the menu).

Google and Apple backups. Your phone may include the app’s data in its backup: on Android in the backup to your Google account (the app allows it only for the career and the app’s settings, including achievements, your answer about statistics and the statistics identifier, without temporary files), on an iPhone in an iCloud backup or a backup on a computer. Whether a backup is made depends on your phone’s and account’s settings. Google and Apple keep these backups under their own terms; I cannot see them and have no access to them. This is not a way of moving a career between phones.

Statistics in the app. They work exactly as in the browser game (section 3): the same question at first start, the same two answers, the same “Statistics” switch in the menu and the same PostHog on servers in the EU. Added to them is the platform (Android or iPhone) and the kind of version (test or store). After “Yes”, the random identifier is stored in the app’s storage, with an extra copy in its settings so that it is not lost when the cache is cleared; after switching to “No”, the app deletes both copies. The app does not use the phone’s advertising identifier (e.g. Google’s advertising ID or the iPhone’s IDFA) and does not track you across other apps or websites.

Achievements in Game Center and Google Play Games (optional). When this feature is available in your version of the app and you use Game Center (iPhone) or Google Play Games (Android) on your phone, the app connects to that service and sends it the achievements earned in the game, including those earned earlier on this phone. Apple or Google stores them on your account in their service, where you also see them on other devices. You sign in with Apple’s or Google’s service, and I do not receive your name, e-mail address or password. The app keeps the identifier of your account in that service only on the phone, so as not to send your achievements to someone else’s account; it does not go into the statistics or to me. If you do not use these services or sign out of them (in the phone’s settings or in the Google Play Games app), nothing is sent there and the game works the same. Apple and Google process this data as separate controllers under their own terms: Apple’s privacy policy, Google’s privacy policy.

Links, the Echo Hali subscription and “Buy me a coffee”. Links in the app (the privacy policy, the game’s social media profiles, the website) open in your phone’s browser, outside the app. The subscription button opens the sign-up form on basketballer.pro in that browser: the app does not collect or see the address you type there, and the sign-up works as described in section 2. There is no “Buy me a coffee” link in the app.

Bug reports. The “Report a bug” button works in the app just as in the browser (section 3): it opens your e-mail program with a ready message that you see and can change before sending.

The stores. Downloads, installation, updates and store reviews are handled by Google (Google Play) and Apple (App Store) under their own terms, as separate controllers of your data. I do not receive your name, e-mail address or account data from them. I see totals (e.g. of installs), crash and performance reports that the stores collect from people who allowed this in their phone’s settings, and reviews posted in the store, as anyone sees them, together with the name you show there.

Pre-release testing. You sign up for the closed test on Google Play by joining the Google discussion group for Basketballer testers. As the group’s manager I can see its members’ e-mail addresses and names; I use them only to run the test (access to the test version and messages about the test), I do not add them to the “Basketballerzy” mailing list and I do not link them to the game statistics. Other members of the group cannot see your address. The group is run by Google under its own terms; you can leave it at any time. If you test on an iPhone through TestFlight, Apple gives me the data needed for the test (e.g. your e-mail address if I invite you by e-mail) and the feedback and screenshots you send yourself through TestFlight, together with device data. Feedback sent by e-mail I process like any other correspondence.

4. Purpose and legal basis

“GDPR” is Regulation (EU) 2016/679; “Electronic Communications Law” is the Polish Prawo komunikacji elektronicznej.

Giving your e-mail address is voluntary, but without it I cannot add you to the list. Consent to analytics cookies is voluntary and does not affect using the website or signing up for the list. Consent to game statistics is voluntary and does not affect how the game works.

5. Recipients of data

Apple and Google in the app. Apple (App Store, Game Center, iCloud, TestFlight) and Google (Google Play, Google Play Games, Android backup, Google Groups) are not my processors: they process data as separate controllers, under the terms you accept when you open an account with them (section 3a). I pass them no data about you other than the achievements sent to Game Center or Google Play Games, if you use them.

I do not sell your data to third parties and do not share your e-mail address with others so that they can advertise their products to you. The only exception is described below: the transfer of the whole Basketballer project to a new owner.

If the project changes owner. I run Basketballer as a private individual. If I ever transfer the project to another entity, for example by selling it or contributing it to a company, your data will pass to the new owner together with the project, and the new owner will become its controller. The new owner may process your data only for the same purpose for which I collected it, that is, to inform you about the Basketballer game. You will be told about the change of controller by e-mail within one month of the data being transferred at the latest. Your rights do not change, including the right to withdraw consent at any time. If the new owner wants to use your data for another purpose, for example to promote their other games, they will have to ask you for separate consent.

The website contains links to external services (X, Facebook, Instagram, TikTok). After clicking, those services’ privacy rules apply. I run the game’s profiles there; the data of people who follow or comment on them is processed by those services under their own terms. For page statistics on Facebook I am a joint controller together with Meta.

Buy me a coffee. The “Postaw kawę” (“Buy me a coffee”) link (on the website and in the browser game, also “Stawiam kawę”; it is not in the app) leads to the buycoffee.to service (Coffee Media sp. z o.o., Wrocław, Poland): if you decide to support the game, payment data (card, BLIK, bank account) is processed by that service and its payment operators under their own terms, and I do not see it. The service does pass on to me the supporter’s first name, last name and e-mail address, the amount and the dedication, if you add one. I use them only to say thank you and to reply: I do not add them to the mailing list or link them to the game statistics.

6. Transfers outside the EEA

Brevo and Zenbox store data in the European Union. Cloudflare, Inc. and Google LLC are based in the USA and also process data outside the European Economic Area; data reaches Google only if you agree to analytics cookies. Transfers to the USA are based on the European Commission’s decision of 10 July 2023 on the adequate level of protection under the EU-U.S. Data Privacy Framework (you can check the list of participants at dataprivacyframework.gov), and additionally on standard contractual clauses (SCCs) in the agreements with the providers.

Game statistics, including those from the app, are stored by PostHog in the European Union; if PostHog Inc. or its sub-processors outside the EEA have access to them (e.g. for technical support), this is based on standard contractual clauses in the data processing agreement.

You will find more in the providers’ privacy policies: Brevo, Cloudflare, Google, PostHog.

7. How long data is kept

• Mailing list: until you unsubscribe, and if the project changes owner, as described in section 5. After you unsubscribe, the address stays in Brevo only as blocked from sending (so that no further message reaches you), together with the dates of signing up and unsubscribing, for no longer than 3 years. At your request I will delete it completely sooner.
• Consent register: while you are on the list, and after you unsubscribe until the limitation period for claims expires, no longer than 6 years.
• E-mail correspondence: for as long as needed to deal with the matter, then no longer than 2 years.
• Google Analytics 4: cookies up to 2 years, data in Google Analytics up to 14 months.
• Your choice in the cookie window: in the browser’s storage, until you change it or clear the browser’s data.
• Cloudflare Turnstile and server logs: for a short time set by the provider, as needed for verification and security.
• Cloudflare Web Analytics: aggregate data only, without cookies; for the retention period set by the provider.
• Game statistics (PostHog): up to 12 months.
• Statistics identifier in the game: in the browser’s storage, until you change your answer to “No” or clear the browser’s data; in the app (in the app’s storage and the copy in its settings), until you change your answer to “No”, clear the app’s data or uninstall it.
• Career, settings, achievements and your answer about statistics: on your device (in the browser’s or the app’s storage), until you delete them or uninstall the app. Google and Apple backups (section 3a) are kept by those companies according to your account settings.
• Game Center or Google Play Games account identifier: only on the phone, in the app’s storage, until you clear the app’s data or uninstall it.
• Addresses in the testers’ group: for the duration of the app’s tests (including tests of its later versions) or until you leave the group; when testing ends, I will delete the group together with its member list.

8. Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on my legitimate interest (Art. 21). You can withdraw consent at any time; this does not affect the lawfulness of processing before the withdrawal.

How to withdraw consent: mailing list: the unsubscribe link in the footer of every message or an e-mail to [email protected]; website statistics: the “Ciasteczka” (cookies) link in the website footer; game statistics: the “Statistics” switch in the game’s menu (also in the app). You delete the app’s data on your phone yourself, as described in section 3a.

Game statistics contain neither your name nor your e-mail address, so I usually cannot tell which of them concern you (Art. 11 GDPR). If you want to exercise your rights regarding this data, write to [email protected]; we will work out together how to identify your data.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or with the supervisory authority of the EU country where you live or work.

9. Changes to this policy

If I change this policy, the new version will appear on this page with a new date. I will write to subscribers about significant changes concerning the mailing list.