Privacy policy

Data controller

Xose de la Paz. Contact: xose@novadream.com.

What data is processed and why

Server logs. Like any web server, the hosting provider records the IP address, date and time, requested page and browser of each visit. They are used to keep the site secure and running, on the basis of legitimate interest (art. 6(1)(f) GDPR).

Usage statistics. If you accept in the cookie notice, the site uses Google Analytics 4 (property G-EVNGHMXDGH) to learn how many people visit, from which country and device, and which pages they view. Google truncates the IP address and does not store it; the data is aggregated and cannot identify you. The purpose is to improve the site and the legal basis is your consent (art. 6(1)(a) GDPR), which you can withdraw at any time in the cookies section. If you do not accept, Google Analytics is not loaded.

No profiling or automated decision-making takes place, and the data is not used for advertising.

Recipients and transfers

Server logs are processed by the hosting provider as a data processor. Statistics are processed by Google Ireland Limited, which may transfer them to Google LLC (United States) under the EU-US Data Privacy Framework and standard contractual clauses. Data is not shared with anyone else.

Retention

Server logs are kept for as long as the hosting provider sets, usually a few weeks. Google Analytics data is kept for at most 14 months; aggregated reports, with no personal data, are kept indefinitely.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to xose@novadream.com. Note that, since no identifying data is collected, in most cases a request cannot be linked to specific data. If you believe the processing is not lawful, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

Cookies

The site sets no first-party cookies. It only keeps your answer to the cookie notice in your browser's local storage (localStorage, key pnyk-consent) so it does not ask again; that value never leaves your browser and is needed to honour your choice.

If you accept statistics, Google Analytics sets these third-party cookies:

• _ga: tells visitors apart with a random identifier. Lasts 2 years.
• _ga_EVNGHMXDGH: keeps the session state. Lasts 2 years.

You can withdraw consent with the button below (the site will ask you again) and delete the cookies in your browser settings. See Google's privacy policy for more.

You can change your choice about Google Analytics at any time:

Change my choice

PNYK games

This policy also covers the PNYK games that do not have their own, with the same controller and on the same terms as pnyk.es:

• Horizon Panic (horizon.pnyk.es): Google Analytics G-TGWKQYPERX; high scores: the three initials you type, your points and the level reached.
• Gravity Panic (gravity.pnyk.es): Google Analytics G-LYX2E9WEE5; high scores: the three initials you type, your points and the level reached.
• Race Panic (race.pnyk.es): Google Analytics G-BQRP137KNX; high scores: the circuit, the initials you type, the total time and the best lap.
• Slot Panic (slot.pnyk.es): Google Analytics G-LWMERSV8WH; high scores: the circuit, the three-letter alias you choose, the best lap, its lane and its path (the “ghost”), and an encrypted fingerprint of your IP for the daily limit; content you publish: the circuits you publish in its gallery, with the three-letter alias you choose, their name (taken from fixed lists), a hash of a random key on your device so you can delete them, and an encrypted, non-reversible fingerprint of your IP for the daily limit, reports and play counts.
• Traffic Panic (traffic.pnyk.es): Google Analytics G-XNVE555PHP; high scores: the mode, the initials you type, your score (points, time or arrests), the level reached and the vehicle.
• Sonar Panic (sonar.pnyk.es): Google Analytics G-E4SYK83HPY; high scores: the three initials you type, the metres reached, the pings and the date.

High-score table. If you set a record, the data listed above is stored on the game’s server. No IP address or any other identifier is stored (except in Slot Panic, which keeps an encrypted fingerprint of the IP, from which it cannot be recovered, only to limit daily submissions), and the initials need not match your name. To delete a score, write to xose@novadream.com with the game, the initials and the approximate date.

Content you publish. In games that let you publish (Slot Panic circuits), the data listed above is stored on the game’s server to show it in its gallery, which is what you ask for when publishing. There is no account, email or password, and the IP fingerprint is a code encrypted with a secret key from which the IP cannot be recovered: it is only used to limit daily publications, let each person report once and count one play per person per day (legitimate interest in preventing abuse, Art. 6(1)(f) GDPR). Published content is kept until you delete it from the device you published it with, or it is taken down after reports. If you have lost that device, write to xose@novadream.com with the game, the alias, the circuit name and the approximate date.

Playing with two. In games that can be played with someone else, creating or joining a room connects your browser or the app to the PNYK room server (salas.pnyk.es), with the same hosting provider in Spain. While the game lasts, the server uses your IP address to keep the connection open and to limit attempts and rooms per person, but it does not store it on disk or in its own logs, and the other player does not see it: everything goes through the server. The room code only exists in its memory and is erased when the game ends or after ten minutes with nobody joining. What the two players send each other is the game itself, and it is not kept (legitimate interest in offering the two-player game you ask for when you create or join a room, art. 6(1)(f) GDPR).

Preferences. Each game keeps in your browser’s local storage (localStorage, not cookies) the language, sound setting, your local best results and your answer to the cookie notice (key pnyk-consent). That data never leaves your device.

Statistics. Only if you accept in the game’s cookie notice, Google Analytics 4 is loaded with the property listed above, just as on pnyk.es: _ga and _ga_* cookies, kept for at most 14 months, no advertising or profiling. If you reject, nothing from Google is loaded. You can change your choice at any time with the «Cookies» button in each game; the choice is separate for each domain.

Children

The site is not aimed at children and collects no data from them. The primary-school games linked here (Pequenauta) have their own policy and require no sign-up or data.

Links to other sites

The other PNYK projects live on their own domains and have their own privacy policies.

Changes

If the way data is processed changes, this page and the date at the top will be updated.