Privacy Policy

Who is responsible

This site is operated by Beatskip Music Group, Herr Alfs Väg 3c, 239 33 Skanör, Sweden. Contact: varga@beatskipmusic.com. Under the GDPR we are the controller for the personal data described below.

What we collect, and why

When you submit a score to a leaderboard. We store the display name you type, your score, how long the run lasted, which character you picked, and the time of submission. That is the whole row: there is no account, no device identifier and no IP address in it, so the only personal data is whatever you type in the name field. The name is shown publicly on the leaderboard — please don’t use your real name. Legal basis: our legitimate interest in operating a leaderboard, which is the feature you chose to use.

When you opt in to email. We store your email address, the date you consented, and which version of the opt-in wording you agreed to — currently 2026-07-v1. We use it only to tell you about new VARGA releases and new games. The address is stored in our own database and also passed to Beatnex, which is where the mailing list lives — see the processors below. Legal basis: your consent. The box is never pre-ticked, and you can withdraw consent at any time using the unsubscribe link in any email or by contacting us.

Analytics, part one: always on. We use Vercel Web Analytics to count page views and a few product events — whether a run was started or finished, whether a score was submitted or shared. It is aggregate and cookieless: it writes nothing to your device, sets no identifier, does not follow you between sites and is not used for advertising. Because it stores nothing on your device it does not require consent. Legal basis: our legitimate interest in knowing whether the game is actually playable.

Analytics, part two: only if you agree. If you accept in the banner, we also load Google Analytics 4, which gives us more detail about how a run goes. GA4 sets cookies on your device (_ga and similar), so it requires your consent and it is not loaded at all until you give it — no script is fetched from Google and nothing is written to your device before you accept. Legal basis: your consent. We signal your choice to Google using Consent Mode v2, and we never grant the advertising categories: this site runs no ads, so ad storage, ad user data and ad personalisation stay denied whatever you choose.

Changing your mind. Choose Analytics choices in the footer of any page. Rejecting stops GA4, clears its cookies and reloads the page so nothing of it is left running. Rejecting is exactly as easy as accepting and always has been: one click, same button.

Our database holds no IP addresses at all — not raw, not hashed. The tables have no column for one. Our hosting and analytics providers process IP addresses transiently to serve and count requests, as any web host must, but none of it reaches us.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not use it to build a profile of you. We do not run advertising trackers on this site.

The game is also published on third-party platforms such as CrazyGames. When you play there, that platform’s own privacy policy applies to your visit, not this one.

Cookies

We set one cookie without asking: varga_consent, which records the answer you gave the banner. It is strictly necessary — it is what stops us asking again on every page, and it is the only way a refusal can be honoured — so it needs no consent of its own. It holds one word, granted or denied, and lasts six months.

If you accept, Google Analytics sets its own cookies (_ga and similar). If you decline, or simply never answer, none are set. We set no advertising or tracking cookies of any kind.

The game also keeps a few settings in your browser’s local storage — which character you last chose, your best score, whether you muted the sound. That never leaves your device and we cannot read it.

Who processes data for us

• Supabase — database hosting (EU region, Stockholm)
• Vercel — site hosting
• Vercel Web Analytics — aggregate, cookieless usage counts, served from this domain
• Google Analytics 4 — detailed usage analytics, only if you accept. Google Ireland Limited, with transfers to Google LLC under the EU–US Data Privacy Framework
• Fourthwall — the merch store, a separate service with its own privacy policy, acting as merchant of record for purchases
• Beatnex — where the mailing list lives. If you opt in, your email address is also passed to Beatnex so it sits with the list the newsletter is actually sent from. Nothing else about you goes with it: not your name, not your scores, not how you found us. The copy in our own database is the record that counts, and the signup succeeds whether or not Beatnex accepts it

How long we keep it

Leaderboard entries are kept for as long as the game is live. An all-time board is the point of it, so there is no period after which a score stops being the thing it was submitted to be. Ask us at the address above and we will delete yours.

Anti-replay records. Each submission carries a single-use token whose identifier we keep to stop the same run being submitted twice. These are pruned once the token can no longer be used — 30 minutes after it was issued. They contain no personal data.

Email addresses are kept until you unsubscribe. After that we keep the address for a short suppression period so a later import cannot re-add you, and then delete it.

Your rights

You have the right to access your data, correct it, have it deleted, restrict or object to processing, and receive a copy in a portable format. To exercise any of these, email varga@beatskipmusic.com. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY).

Children

The game is suitable for a general audience, but the email opt-in is not intended for children. Policy to be confirmed.

Changes

If this policy changes materially we will update the date above and, where the change affects how we use your email, tell you by email.