Privacy Policy

Who we are #

The controller of your personal data is Furtuna Stefan, a natural person (independent developer) from Romania, publishing games under the name StefidulceDev.

• General e-mail: contact@stefidulcedev.ro
• Data protection: privacy@stefidulcedev.ro

As an individual developer processing a limited amount of data, we are not required to appoint a Data Protection Officer (Art. 37 GDPR); all privacy questions go to the address above.

Scope of this policy #

This policy covers the website stefidulcedev.ro, e-mail correspondence with us and our general activity as a developer (for example, our developer pages in app stores). Each game has its own privacy policy, which describes exactly what data that game processes; you will find them in the document index.

The policy is based on the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), Romanian Law no. 190/2018 implementing the GDPR and Romanian Law no. 506/2004 (ePrivacy).

This website: no cookies, no tracking #

The website has no user accounts, no forms, no comments, no analytics, no advertising and no content loaded from third-party servers (all fonts, images and scripts are served from our own server). It sets no cookies. The only thing stored in your browser is your light/dark theme choice (theme in localStorage, not a cookie), and only if you press the theme button; it never leaves your browser.

Server logs #

When you visit any page, the web server automatically records technical data in its access logs:

• IP address;
• date and time of the request;
• requested address (URL) and HTTP status code;
• referring page (if your browser sends it);
• browser and operating system identifier (user agent).

Purpose: delivering the website, ensuring its security (for example detecting attacks or abuse) and fixing errors. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Retention: for a limited period set by the hosting provider’s log rotation, after which the logs are deleted automatically, unless a specific log is needed to investigate a security incident. Recipient: the hosting provider Hostico (Awesome Projects SRL), acting as our processor under Art. 28 GDPR. We do not use the logs to identify visitors or build profiles.

E-mail correspondence #

When you write to us, we process your e-mail address, your name (if you give it) and the content of your message, including any data you choose to share.

• Purpose: answering you, providing support, handling complaints and requests for the exercise of your rights.
• Legal basis: our legitimate interest in replying to messages (Art. 6(1)(f) GDPR); performance of a contract when the message concerns a game you use (Art. 6(1)(b)); a legal obligation when you exercise your GDPR rights or file a consumer complaint (Art. 6(1)(c)).
• Retention: only as long as needed to handle your message; correspondence about the exercise of GDPR rights is kept for 3 years to prove compliance.
• Recipient: our e-mail service provider, as processor.

App stores #

Our games are distributed through Google Play and, in future, Steam. When you download a game, leave a review or make a purchase, the store processes your data as an independent controller, under its own privacy policy (Google, Valve / Steam). The stores provide us mainly with aggregated statistics (installs, crashes, ratings) and, for purchases, the transaction data needed to deliver them. Public reviews and the replies we post to them are visible in the store.

Recipients and international transfers #

We do not sell or rent personal data. Data is disclosed only to the processors mentioned above and to public authorities when the law requires it. If a processor stores data outside the European Economic Area, the transfer relies on an adequacy decision of the European Commission (for example the EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses (Art. 46(2)(c) GDPR). The SDKs used in each game are listed in that game’s privacy policy.

Security #

The website is served exclusively over HTTPS (TLS), with a strict Content Security Policy and other security headers; access to the server and to e-mail accounts is protected with strong authentication. If a breach is likely to result in a risk to your rights, we notify the supervisory authority within 72 hours and, where required, the people affected.

Your rights #

You have the right of access, rectification, erasure, restriction, data portability, objection and the right to withdraw consent at any time. To exercise them, write to privacy@stefidulcedev.ro; we reply within 30 days. You can also lodge a complaint with ANSPDCP (https://www.dataprotection.ro/, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, România).

Children #

The website is a general information site and is not directed at children. How each game handles children’s data is explained in that game’s privacy policy.

Automated decisions #

We do not take decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR).

Changes #

We update this policy when our activity or the law changes. The version and dates at the top show the version in force and the changelog below lists every change.

Contact #

privacy@stefidulcedev.ro