RuneClicker
Privacy Policy
This explains what we collect when you play RuneClicker, why, and what you can do about it. Short version: we collect what we need to run the game and keep it fair, nothing more, and we do not sell your data.
1 Who we are
The data controller for RuneClicker is KAROLIN ENK, organisation number 937 913 362, reachable at support@runeclicker.eu. For any privacy question or request, contact that address or reach us on Discord. Our registered postal address is at the foot of this page.
2 What we collect
When you sign in with Google we receive your email address and a Google account identifier; sign-in is handled through Supabase. We store your game data: skills, items, progress, character names, hiscores position, and clan membership. We store messages you send in game chat and clans, and, if you choose to link it, your Discord account. We process technical data, meaning your IP address, connection and error logs, and basic browser and device information, used to run the service and to prevent cheating and abuse.
When you create an account we ask for your month and year of birth. We use this only to apply protective default settings for players under 18 and to enforce age requirements for purchases. We store the month and year only, never a full date.
Purchases are handled by Tebex, our payment provider. Tebex processes your payment details; we never see your card information. We receive a confirmation of what you bought, tied to your account, so we can activate it.
3 Why we use it, and our legal basis
We use your data to run the game, meaning saving your progress, showing hiscores, and delivering membership and purchases; the legal basis is performance of our contract with you. We use it to keep the game fair and secure, meaning preventing cheating, spam, and abuse and protecting accounts; the legal basis is our legitimate interest in a fair, working game. We use it to comply with the law, for example keeping records we are legally required to keep; the legal basis is legal obligation. We use your month and year of birth to protect players under 18; the legal basis is legal obligation and our legitimate interest in protecting minors.
4 Who we share it with
We use a small set of providers to run RuneClicker. They only process data on our behalf, for these purposes:
| Provider | What for |
|---|---|
| Supabase | Account sign-in and the database that stores your saves |
| Tebex | Payments, as the merchant of record for all purchases |
| Sign-in (you choose to use it) | |
| Discord | Community, and the account link if you connect it |
| Hetzner | The servers the game runs on |
| DeepSeek | The AI language model behind our community helper bot on Discord |
About DeepSeek: our community helper bot on Discord answers player questions using a language model provided by DeepSeek. Messages that you address to the bot, and the bot's replies, are sent to DeepSeek for processing. We send only the message content that is needed to produce an answer. DeepSeek may process this data outside the European Economic Area, including in China. Do not share personal or sensitive information in messages to the bot. The bot identifies itself as an AI.
5 Cookies and local storage
We use your browser's storage to keep you signed in and to remember your settings, such as your chosen theme. We do not use third-party advertising or tracking cookies.
6 How long we keep your data
Your account and game progress are kept until you delete your account. We do not delete accounts for inactivity. When you delete your account, your personal data is deleted or anonymised without undue delay.
Other data is kept for fixed periods: server logs, including IP addresses, for 12 months; chat messages for 12 months; moderation records, including evidence attached to a report or sanction, for 24 months; support correspondence for 24 months. Payment records are held by Tebex as seller of record under their own retention rules and applicable accounting law.
7 Your rights
If you are in the EEA or the United Kingdom, you have the right to access the personal data we hold about you, to correct anything that is wrong, to have your data deleted, to receive a copy of your data to take elsewhere, to object to or restrict certain processing, and to withdraw consent where we relied on it. To use any of these rights, email support@runeclicker.eu. You also have the right to complain to your local data protection authority; in Norway that is Datatilsynet.
8 Children
RuneClicker is not aimed at children under 13, and we do not knowingly collect their data. If you are under the age of digital consent where you live, a parent or guardian should agree on your behalf. We use the month and year of birth registered on the account to apply protective default settings for players under 18. If you believe a child has given us data, contact us and we will remove it.
9 International transfers
Some of our providers, such as Supabase, Tebex, and Google, may process data on servers outside the EEA, including in the United States. Messages to our Discord helper bot are processed by DeepSeek, which may process data outside the EEA, including in China. Where data leaves the EEA, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses, to protect it.
10 Security and breaches
Access to player data is limited to the people and systems that need it to run the game, secrets are kept out of the source code, and the database enforces row level access rules. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Norwegian Data Protection Authority within 72 hours and inform affected players without undue delay.
11 Changes
We may update this policy as the game and our providers change. We will announce material changes in the game or on the website before they take effect. The version and date at the top show the current revision; earlier versions are available on request.
12 Contact
Privacy questions or requests: Discord or support@runeclicker.eu.