Privacy policy

As of 7 October 2026

kolonie.app is a free browser game. There is no sign-up and no account. This page says which personal data is processed when you visit it and play, why, for how long, and what your rights are.

1. Who is responsible

Aaron Scheuerlein
Gustav-Adolf-Straße 114a
13086 Berlin, Germany
Email: aaron.wetzli (at) gmail.com

2. Hosting and server logs

kolonie.app runs on a server operated by the person named above; no hosting provider is involved. With every request, the web server records:

your IP address,
date and time, the page or file requested, the answer's status and size,
the referring page and your browser's user agent.

This is needed to deliver the site and to recognise and fend off attacks and misuse (legal basis: Art. 6(1)(f) GDPR, legitimate interest in a secure, working site). The logs are deleted automatically after 14 days.

3. Playing the game

Your colony's name and what you do in the game (position, pushes) go to the game server and to the other players in your dish. They are held in memory only for as long as you are connected.
Your IP address is used in memory to limit how many connections and requests one address can make (misuse protection). It is not written to disk by the game server.
Play statistics: to see how the first minutes of a game go, the server counts per day, without any IP address or identifier: how many pages connected, how many started a game, how long these sessions lasted, how many colonies were lost and how the first one ended, and how many players started again after that. Whether the game runs inside an app's built-in browser (Instagram, Facebook, TikTok) is read from your browser's user agent for this count and not stored. Only the day totals are kept, the session lengths for 14 days, the totals for up to 400 days.
Hall of Fame: if a run is among the best ten, its name, mass and date are stored and shown publicly on the start page, until they are pushed out by better runs or the list is reset. Please don't use your real name if you don't want it shown.
Daily challenge: when you complete it, your colony's name, the number of pushes and the time are stored for that day and, if among the best ten, shown publicly on the start page. To keep only your best attempt, the server stores a salted hash of your browser's streak id (see 4), never the id itself. The list is deleted at midnight, Berlin time.
Invite links: the page receives a random link code when it connects. If you share it, the name you typed is kept with it, together with the dish you are in, in memory only and for at most 24 hours. Whoever opens the link sees that name, on the page and in the link preview of the app it was shared through, and joins your dish; while you both play, each of you sees the other marked as a friend. The server counts per day, without any identifier, how many links were shared and opened and how many friends joined through one.

Legal basis: Art. 6(1)(b) GDPR (providing the game you asked for) and Art. 6(1)(f) GDPR (misuse protection; for the play statistics, our interest in improving the game).

4. Stored in your browser

The game keeps a few settings in your browser's local storage. They never leave your device except where noted, and you can delete them at any time in your browser.

kolonie.muted: whether sound is off,
kolonie.best2: your best mass so far, shown on the end card (never sent),
kolonie.consent: your choice in the cookie banner,
kolonie.streak: a random id that holds your daily streak if you play without a wallet address (sent to the server, which keeps your streak days under it, and your best daily challenge attempt under a salted hash of it, see 3; the Wallet button hands it to the kolonie wallet, see 7),
kolonie.skins: your skin unlock code, if you bought one (sent to the server when you upload or wear a picture),
kolonie.btc: the game address of your kolonie wallet, if you opened the game from the wallet (sent to the server for the faucet, see 6).

These are strictly necessary for the functions you use and need no consent (§ 25(2) TDDDG).

5. Skins (optional)

If you unlock skins, the server stores the transaction id of your payment, an unlock code and the picture you upload. Your picture is shown to everyone playing with you. Payments are made in BTCX; transactions on that blockchain are public and permanent, which is outside our control.

If a picture is reported, the server stores a salted hash of the reporting IP address (not the address itself), so one address counts only once. Reports are cleared when the picture has been reviewed.

Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for reports. Unlocks and pictures are kept as long as the service exists; ask us to delete yours at any time.

6. Faucet (optional)

If you enter a BTCX address to earn the faucet reward, the server stores that address and a salted hash of your network (IPv4 address or IPv6 /64), never the raw IP address. This is kept for good, so each address and network is paid only once. The payment itself is a public blockchain transaction. Legal basis: Art. 6(1)(b) and (f) GDPR.

7. kolonie wallet (optional, non-custodial)

The wallet at wallet.kolonie.app runs entirely in your browser. Its 24 words, any passphrase and all private keys are created and used only on your device; they are never sent to us or stored by us, and we cannot recover them. The browser keeps the wallet's public keys (from which your addresses follow) and the date of your last backup check in its storage (IndexedDB) for wallet.kolonie.app, and, if you opened it with the game's Wallet button, your browser's streak id (see 4), which the button passes in the part of the link after “#” (never sent to a server with the page request). Nothing else is stored, and the wallet page loads no analytics, advertising or other third-party code.

To show the faucet and the daily streak, the wallet asks our server for the rules, the latest payouts (amount, time and transaction, no addresses), and the streak and payments of its game address and of that streak id; with both, the streak days of that id move to the game address. Collecting a streak prize sends the streak id and the game address. Legal basis: Art. 6(1)(b) GDPR.

To count how many wallets are in use, our server keeps a salted hash of each game address with the last day the wallet was open, for 30 days, and per day only the number of wallets. No IP address is stored with it. Legal basis: Art. 6(1)(f) GDPR (knowing how much the wallet is used).

To show your balance and history, the wallet asks a BTCX Electrum server about your addresses (as hashes of their scripts), and sends transactions you sign. These requests go through our server to our own Electrum server on the same machine, or, if it is unavailable, to the public server electrs.bitcoin-po.cx run by the BTCX developers. That server sees our server's IP address, not yours. Our server relays the requests in memory only: it does not log or keep them, your IP address or which addresses belong together, and the web server keeps no access log for the wallet. Your IP address is held in memory only while you are connected, to limit requests per address. Legal basis: Art. 6(1)(b) GDPR (providing the wallet you use) and Art. 6(1)(f) GDPR (protecting the service from abuse).

8. Google Analytics (only with your consent)

If you allow analytics, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It sets cookies and sends usage data (pages visited, device and browser details, rough location derived from a shortened IP address) to Google, which may also process it in the USA. Google is certified under the EU–US Data Privacy Framework. The data is kept for at most 14 months.

Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Nothing is loaded from Google before you consent. Google's privacy policy.

9. Advertising

Ads are shown only if you allow advertising. They come from Google AdSense (Google Ireland Limited, as above). Google uses cookies and similar technologies to show ads, measure them and, depending on your settings with Google, personalise them; data may be processed in the USA (Data Privacy Framework). Legal basis: your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can control personalised ads at adssettings.google.com.

10. Changing your mind

You can change or withdraw your consent at any time with the Cookie settings button at the bottom of the start page. Withdrawing does not affect what was processed before.

11. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21). Write to the address in section 1. You may also complain to a data protection supervisory authority, in particular the one where you live, or the one responsible for us: the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Since there are no accounts, we can usually only find data about you if you tell us something to look for, such as your colony's name, skin transaction id or BTCX address.