Privacy Policy
Effective date: 2026-08-29
Last updated: 2026-08-29
1. Who we are
Skitgubbe ("the App") is operated by Jonas Borggren, who is the data controller for the personal data described in this policy.
Contact: jonasborggren [at] gmail [dot] com
2. What we collect
We collect the following, and nothing else.
Account. Your email address, when you register or sign in with Google or Apple. Your password, stored only as a bcrypt hash — we never store the password itself. Accounts that sign in with Google or Apple have no password.
Profile. Display name, chosen avatar, a friend code we generate so other players can add you, and when you were last active.
Gameplay. Matches you take part in, including game state, results, placements and statistics. Achievements you have unlocked and rewards you have claimed.
Social. Friend relationships, pending friend requests, and notifications sent between you and other players.
Purchases. Receipts and purchase tokens from the App Store and Google Play, needed to verify a purchase and grant what you bought. Your in-game coin balance and which items you own.
Device (only if you enable notifications). A device identifier generated by the App, a push token from Firebase Cloud Messaging, your language setting, and which notifications you have turned on.
3. What we do not collect
We do not collect your location, contacts, photos, camera, microphone or calendar. We do not track you across other apps or websites, and the App never asks for permission to do so. We use no analytics or crash-reporting service.
The App writes a diagnostic log on your device so you can report problems. That log stays on your device and is never uploaded to us.
4. Why we process your data
Creating and maintaining your account, running matches and statistics, handling friends and notifications, and verifying purchases are all necessary to provide the game to you (performance of a contract).
Push notifications and advertising are based on your consent, which you can withdraw at any time. Keeping the service secure and free of abuse is based on our legitimate interest.
5. Advertising
The App shows advertisements through Google AdMob.
We only request non-personalised advertisements. These are chosen based on the content you are currently viewing, not on your behaviour over time or across other apps. Google may still process device identifiers and usage data to deliver an ad, cap how often you see it, and measure whether it worked.
Where required, you are asked for consent before any advertising is loaded, through Google's own consent form. You can change your choice from within the App.
Google's handling of this data is described at policies.google.com/technologies/partner-sites.
6. Who we share data with
We do not sell your personal data, and we do not share it for advertising purposes beyond what section 5 describes.
We use Google AdMob for advertising, Google Firebase Cloud Messaging to deliver push notifications, the Apple App Store and Google Play to verify purchases, and Fly.io to host our servers and database.
Google Play Games and Apple Game Center receive your achievements and win count, but only if you choose to link your account. The App never links you automatically, and nothing is sent to them until you do.
7. Where your data is stored
Your data is stored on servers in Europe. Where a processor transfers data outside the EU/EEA, that transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
8. How long we keep it
We keep your account data for as long as your account exists.
Deleting from inside the App takes effect immediately. Deleting through the website takes effect 30 days after you ask. The delay exists because the web form has only your email address and password to go on, and without it a leaked password would be enough for someone else to delete your account for good. You can cancel during those 30 days by emailing us.
When the deletion takes effect we delete your account, profile, friends, statistics, achievements, purchases and device registrations. This is not reversible. Matches still in progress are aborted, and coins or items you have bought are not refunded.
Records we are required to keep for accounting purposes, such as proof of a purchase, are retained for as long as the law requires. Accounts inactive for more than 2 years may be deleted.
9. Deleting your account
In the App: Settings → Delete account. You will be asked to type a confirmation phrase, and the deletion takes effect immediately.
On the web: spelaskitgubbe.se/radera — enter the email address and password registered to the account. The deletion takes effect 30 days later, and you can cancel it before then by emailing us.
If you sign in with Google or Apple your account has no password, so the web form cannot verify that it is you. Delete from inside the App instead, or email us from the address registered to your account.
10. Your rights
Under the GDPR you have the right to access your data, to have it corrected, to have it erased, to receive a copy in a portable format, to object to processing based on legitimate interest, and to restrict processing. Email us to exercise any of them.
If you believe we handle your data incorrectly, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, or with the supervisory authority in your own country.
11. Children
The App is not directed to children under 13. We do not knowingly collect personal data from children under that age. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
If we change this policy we will update the date above. Significant changes will be announced in the App before they take effect.
13. Contact
jonasborggren [at] gmail [dot] com
See also the terms of use.