Idunian
EN
← Back to the front page

Privacy Policy — Idunian Liberators (English)

Updated: 20 July 2026 · Controller: Roitto Design Works, Jukka Roitto, Business ID 3600460-1, Finland · Privacy contact: idunian@roittodesignworks.com

In short: Idunian Liberators is a nutrition-education game for children. It shows no ads and uses no analytics, tracking or advertising identifiers. Single-player runs entirely on the device. Online multiplayer is the only part that sends anything off the device.

Data handled. Settings, progress, achievements and your nickname are stored only on your device. In optional online multiplayer, a game room stores in Google Firebase (Firestore):

For Google Play Data Safety this is declared as "User IDs" — collected, not shared, temporary, required for multiplayer functionality. It is not linked to a person and is never used for advertising or profiling.

Nicknames cannot be typed in. The game generates them from a fixed word list, so a child cannot accidentally share a real name and the game contains no user-generated content.

Legal basis. Processing in online multiplayer relies on Article 6(1)(b) GDPR: it is necessary to provide the service the user themselves requests by joining a game room. Without an anonymous identifier and the relaying of game state, multiplayer cannot function. Single-player involves no server-side processing at all.

Retention. A game room is deleted immediately when the player who created it leaves or the game is closed — in normal use nothing remains on the server after the game.

If a room is abandoned — for example if the connection drops mid-game — it is removed automatically by Firestore's TTL policy. The room is marked to expire 12 hours after the last action, and Google deletes marked data within 24 hours of that expiry. In practice deletion usually happens soon after the expiry time, but we guarantee it within 36 hours of the last action.

We do not collect: name, email, phone, location, contacts, photos, advertising ID, device identifiers, crash reports, or behavioural analytics.

Third parties: Google Firebase (Firestore + anonymous Authentication) as the multiplayer backend, hosted in the EU (europe-north1). See policies.google.com/privacy. No ad networks, analytics providers or social plugins are used.

Children: Intended also for primary-school children and for early childhood education, pre-primary, school and club use. We collect no identifiable personal data and never use data for advertising or profiling; the anonymous identifier and generated nickname are chosen so that a child cannot reveal themselves (GDPR provisions on children, COPPA).

Your rights. Under the GDPR you have the right of access to your data and the rights to rectification, erasure, restriction of processing, data portability and objection.

However, we cannot identify you from the data we hold. We process only a random anonymous identifier that is not linked to a name, email or device, and we keep no person-linked register. Under Article 11 GDPR we are therefore unable to fulfil those rights by looking up data by person, and we are not required to obtain additional information solely in order to identify you. You can still exercise your rights in practice: uninstalling the app removes on-device data, and multiplayer data expires by itself within the period described above.

Right to complain. If you believe the processing of your personal data infringes the GDPR, you may lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi). You may also complain to the supervisory authority of your own country of residence.

Language versions. This privacy policy was originally written in Finnish. The other language versions were translated with the help of AI. If the versions differ, the Finnish text is the one that prevails.

Contact: idunian@roittodesignworks.com.