Krownik

Privacy PolicyLast updated: 26 July 2026

This Privacy Policy explains how Alex Cortés ("we", "us", the "operator") collects, uses and protects your personal data when you use Krownik (the "app" or the "service"), a free-to-play social football game for groups of friends. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law.

1. Who we are (Data Controller)The data controller responsible for your personal data is Alex Cortés, Calle Voluntaria Entrega 7, Vitoria, 01010, Spain. For any privacy question or to exercise your rights, contact us at [email protected].

2. Data we collectWe collect only the data we need to run the game:

•Account data — your email address, which you use to sign in through a one-time "magic link" (we do not store passwords), plus the display name and profile details you choose.

•Gameplay data — the leagues you join or create, the games you take part in, your answers and results, points, leaderboard positions, daily rewards, boosts and power-ups, check-ins, and your virtual coin balance and in-game transactions.

•Purchase data — records of in-app purchases you make (the product identifier, platform transaction identifier and timestamp). Payment is processed by Apple or Google; we never receive or store your card or bank details.

•Device and notification data — a Firebase Cloud Messaging (FCM) push token so we can send you notifications, together with your device model, operating-system version, app version and language.

•Advertising data — an advertising identifier and ad-interaction data processed by Google AdMob (in the mobile app) and Google AdSense (on the web). On iOS this only occurs after you allow tracking through the App Tracking Transparency prompt.

•Diagnostics data — crash reports, error logs and performance data (via Sentry) that may include device state and your IP address, used to keep the app stable.

•Usage and log data — your IP address, access timestamps and technical logs generated when you use the service.

The app plays bundled sound effects but does not record audio from your microphone, and it does not collect your contacts, photos or precise location.

3. How we use your data and our legal basesWe process your data for the following purposes and on the following GDPR legal bases:

•To provide and operate the game — creating your account, running your leagues, scoring your play and maintaining leaderboards (Article 6(1)(b) — performance of a contract).

•To authenticate you via magic-link email and keep your account secure (Article 6(1)(b) and 6(1)(f) — legitimate interest in security).

•To send service notifications about your leagues and matches (Article 6(1)(b)); optional promotional notifications are sent only with your consent (Article 6(1)(a)).

•To process in-app purchases and prevent fraud or transaction replay (Article 6(1)(b) and 6(1)(c) — legal obligation).

•To display advertising — personalised ads only with your consent (Article 6(1)(a)); non-personalised ads on our legitimate interest in funding a free service (Article 6(1)(f)).

•For diagnostics, security and anti-cheat enforcement (Article 6(1)(f) — legitimate interest in a safe, fair, working service).

•To comply with our legal and tax obligations (Article 6(1)(c)).

4. Advertising and trackingKrownik is funded in part by advertising served by Google AdMob (mobile) and Google AdSense (web). These services may use identifiers to measure and, with your consent, personalise ads.

•On iOS, we ask for your permission via Apple's App Tracking Transparency prompt before any cross-app tracking; if you decline, you will still see ads, but non-personalised ones.

•On Android, you can reset or delete your advertising ID and opt out of ad personalisation in your device settings.

•You can review and control Google's use of data at https://policies.google.com/technologies/ads and adjust ad settings at https://adssettings.google.com.

5. Who we share data withWe do not sell your personal data. We share it only with service providers ("processors") that help us run the app, each bound to protect it:

•Google (Firebase Cloud Messaging) — push-notification delivery.

•Google (AdMob and AdSense) — advertising.

•Apple App Store and Google Play — in-app purchase processing.

•Sentry — crash and error reporting.

•Our hosting and infrastructure providers — to store data and run the service.

We may also disclose data where required by law, to protect our rights, or in connection with a business transfer.

6. International data transfersSome of our providers (such as Google) may process data outside the European Economic Area. Where they do, the transfer is protected by an adequacy decision or by the European Commission's Standard Contractual Clauses.

7. How long we keep your dataWe keep your account and gameplay data for as long as your account is active. If you delete your account, we erase or anonymise your personal data within a reasonable period, except where we must retain certain records (for example, purchase records) to meet legal, tax or accounting obligations.

8. How we protect your dataWe use appropriate technical and organisational measures — including encryption in transit, passwordless authentication and access controls — to protect your data. No system is perfectly secure, but we work to keep your information safe.

9. Your rightsUnder the GDPR you have the right to:

•access the personal data we hold about you;

•rectify inaccurate or incomplete data;

•erase your data ("right to be forgotten");

•restrict or object to our processing;

•data portability — receive your data in a structured, machine-readable format;

•withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, email us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

10. Account deletionYou can delete your Krownik account and its associated personal data at any time. To request deletion, email us at [email protected] from the address linked to your account (or otherwise clearly identifying it), with the subject "Account deletion".We will verify your request and then erase or anonymise your personal data — including your profile, gameplay history, league memberships and virtual coin balance — and confirm once done, normally within 30 days. Some records may be retained where the law requires it (for example, purchase records for tax and accounting purposes), as described in section 7. Deleting your account is permanent and cannot be undone.

11. ChildrenKrownik is not intended for children under 14. We do not knowingly collect data from anyone under 14. If you believe a child has provided us with personal data, contact us and we will delete it. Users under 18 should use the service and make any purchases only with the consent of a parent or guardian.

12. Cookies and local storageOn the web, we use essential browser storage to keep you signed in and remember your language preference. Advertising providers may set their own cookies as described in section 4. The mobile app does not use cookies but stores similar data locally on your device.

13. Changes to this policyWe may update this Privacy Policy from time to time. We will post the new version here and update the "Last updated" date; significant changes will be notified in the app.

14. ContactQuestions about this policy or your data? Contact Alex Cortés at [email protected], or by post at Calle Voluntaria Entrega 7, Vitoria, 01010, Spain.