Privacy Policy

Last updated: June 2026

PIW-PIW is a free browser game provided by FFFFFF LTD, a company registered in Cyprus ("we", "us"). The game website is piwpiw.io. The game requires no registration or account. This policy explains what data we process, why, and your rights.

1. Data We Process

1.1 Created automatically on your device

Anonymous identifier (uid) — a random string in browser localStorage, not linked to your identity. Used to count unique players.
Nickname — you enter it yourself for the leaderboard. It may contain personal data only if you choose to type it; a real name is not required.
Interface language and cookie-consent choice — stored in localStorage (not cookies, not tracking).

1.2 Gameplay statistics (our server)

Game mode, score, reached stage, win/loss, event time, game version, language.
Tied to the anonymous uid and nickname — not to your identity.

1.3 IP address

Used only transiently in server memory for spam/brute-force protection (rate-limiting). The raw IP address is not stored in our database or logs.
Only a salted, periodically rotating hash of the IP (irreversible, used for anti-cheat / multi-account protection) and a country code (for coarse "where players are from" analytics) are stored. The IP cannot be recovered from them.

1.4 With your consent — Google Analytics

If you click "Accept" in the cookie banner, Google Analytics 4 is enabled: anonymized IP, device/browser type, approximate location, page views and game events (game start, game over). Only then are _ga / _ga_* cookies set.
If you reject, GA runs in cookieless mode (no cookies or identifiers) or does not load.

2. Legal Bases (GDPR Art. 6)

Contract (6(1)(b)): running the game, leaderboards, network rooms.
Legitimate interest (6(1)(f)): security, anti-cheat, anti-spam, rate-limiting, coarse geo statistics.
Consent (6(1)(a)): Google Analytics. You can withdraw consent anytime (Section 6).

3. Data Sharing

Google (Google Analytics) — only with your consent.
Authorities — only when legally required.

We do not sell your data and do not share it with advertising networks.

4. Retention

Gameplay statistics are kept while the game operates (anonymous data). The link "IP hash ↔ IP" is automatically forgotten as the salt rotates. You may request deletion of your nickname and records — contact us with your uid (see below).

5. Children

The game requires no account and does not knowingly collect children's personal data. If you believe a child provided personal data (e.g. in a nickname), contact us and we will remove it.

6. Your Rights and Cookie Management

Withdraw analytics consent: clear site data in your browser — the cookie banner reappears and you can choose "Reject".
Access / deletion: contact us with your uid (visible in browser site data).
Complaint: you may lodge a complaint with your data protection authority.
GA opt-out: Google Analytics Opt-out add-on.

7. Changes

We may update this policy. The current version is always on this page with the update date.

8. Contact

Data controller: FFFFFF LTD, Cyprus
Email: hello@ffffff.io