Privacy Policy
Last updated: 26 October 2026
This translation is for convenience. The English version applies.
The short version
- We only keep what we need to run your account and the game, and to keep everyone safe.
- We never sell your data. The website shows ads from Google: nothing about you is used for them unless you say OK.
- Never put your real name, address, school, phone number or photos anywhere in the game.
- Your player page (your Tiz, level, scores and what you write about yourself) can be seen by anyone.
- What you write in the Room chat and the Global chat is kept for 90 days, so our moderators can check what happened and keep players safe. If someone reports a chat, a moderator can read the last few messages of both players.
- Under 13 (under 16 in the Netherlands)? Ask a parent or guardian before you make an account.
- We only email you about your account: to activate it, when you ask for a new password, and when you change your email. No newsletters, no adverts.
- You can ask us for a copy of your data, or to delete your account, at any time.
1. Who we are
Muniz Online (the game at munizonline.com and this website) is run by Muniz Online, Gotthardstrasse 44, CZM10944, 8002 Zürich, Switzerland ("we", "us"). We decide how your personal data is used, so we are the controller under the UK GDPR, the EU GDPR and the Swiss Federal Act on Data Protection (FADP).
Write to us about anything in this policy at [email protected].
This policy covers the game, this website and everything you do with your Muniz Online account.
2. Children
Muniz Online is played by children, teenagers and adults, so we have written this policy to be read by everyone, and we follow the UK Information Commissioner's Age Appropriate Design Code.
- In the UK and Switzerland, a child under 13 should only make an account with a parent's or guardian's permission.
- In the Netherlands, a child under 16 should only make an account with a parent's or guardian's permission (Dutch GDPR Implementation Act, article 5).
- If a parent tells us their child made an account without permission, we close it and delete its data (see Parents).
- We never ask for a real name, a home address, a phone number, a photo or a date of birth, and we don't track where you are.
- We don't show adverts and we don't build profiles of players for advertising or to sell anything.
3. What we keep
Your account
- Your username and your email address (used only to activate your account, to help you get back into it and to answer you), and whether you have confirmed that the email is yours. If you change your username, the ones you had before and the dates you changed them are kept with your account (the moderators can see them) until it is closed.
- Your password, which we never store as it is: only a scrambled version (a bcrypt hash) that can't be turned back into your password.
- When your account was made, and the character and first outfit you chose.
Your game
- Your Tiz: its look, clothes and items, credits and gems, level and XP, pets, home and furniture, quests.
- Your scores and rankings: the minigames, Bacteria, Four Clovers, Chess, Shifumiz, Wild Wade, Munidark's Swamp, MaZo.
- Friends and friend requests, votes for the King of the Week and popularity, trades, weddings.
- Items bought in the Store with credits or gems, and your wishlist, trade list and favourites.
- Your player page: your motto, "about me", interests, page colour and face.
Chat and messages
- What you write in the Room chat goes to the players in your room, in the Global chat to every player in the game, and a private message to the player you send it to. A child-safety filter stops unsafe words, and players can't send links.
- Private messages are kept on our server for 90 days (a year when you or the player you wrote with is a Premium member), so that you and the player you wrote to can read them again and answer - in the game or on the website's Messages page. They are not encrypted, and the Muniz team can read them when it is needed to keep players safe or to look into a report. Do not share any private information in them. A message the filter stopped is never kept.
- What you write in the Room chat and the Global chat is kept on our server for 90 days, with the room it was written in and when, so that our moderators can review conversations in the game, look into a report and keep players safe. A line the filter stopped is kept too (nobody else saw it), as it is often what a moderator needs to see. Only our moderators and the game's Creators can read them, and each look is noted. After 90 days they are deleted, and they are erased at once when your account is closed. Commands (such as /home) are not kept.
- When the child-safety filter stops something you wrote - a chat line, a private message, a name, a sign, a forum post, a News comment or a message on the website - what you typed is kept with the mute it gave, for 90 days, so that our moderators can see why the filter stopped it and let harmless words through. Only our moderators and the game's Creators can read it. After 90 days it is deleted (the mute itself is kept as other mutes are), and it is erased at once when your account is closed.
- The last 10 lines each player typed are kept in the server's memory (not in the database), so that a report can include them. They are gone when the server restarts.
- The Global chat's last 20 lines are kept in the server's memory too, and shown to players when they sign in. They are gone when the server restarts, and a moderator's mute or ban takes that player's lines out of it.
- Chat lines, including private messages, are also written to the server's technical log with the players' usernames. That log is replaced once it reaches a set size, usually within days.
- When a player reports another, both players' last 10 chat lines are saved with the report, so a moderator can see what happened.
- Support tickets: when you ask the Muniz team for help (the Support page, or Settings in the game), we keep what you write - what it is about, its subject and your messages - and the team's answers, with when each was written. On the website you may add pictures (screenshots) to a ticket: we keep a new copy of each one, made by our server, without the information a camera or phone puts in a picture (such as where it was taken). Only the Muniz team can read a ticket and see its pictures: the moderators, and our Creators alone for a ticket about a purchase or your account. A ticket's pictures are deleted when it is closed; the ticket itself a year after it was closed, and both at once when your account is closed.
- Comments under a News post: a signed-in player can write one. It shows on the News page for everyone, with the player's username, their Tiz wearing the face they chose, and the date and time. The same child-safety filter applies (no unsafe words, no links, no phone numbers or e-mail addresses), and our Creators can hide a comment. Any signed-in player can report a comment: the report holds the comment's words, the reporter's name and the reason, and is kept like other reports (a year after a moderator has dealt with it). A comment is deleted when its player's account is closed.
- The Forums: a signed-in player can start a thread or reply to one. Only signed-in players can read the Forums. A post shows with the player's username, their Tiz wearing the face they chose, and the date and time. The same child-safety filter applies (no unsafe words, no links, no phone numbers or e-mail addresses), and our moderators can hide a post or a whole thread, or lock a thread so it takes no more replies. Any signed-in player can report a post: the report holds the post's words, the reporter's name and the reason, and is kept like other reports (a year after a moderator has dealt with it). When a player's account is closed, their posts are deleted and the titles of the threads they started are replaced; the replies other players wrote in those threads stay. You can change or delete your own posts: the post then says it was changed, and what it said before - or the post you deleted - stays visible to our staff only, with a note of the change in the staff's log, until your account is closed. A thread can have a poll: the player who starts the thread writes its question and its options (under the same filter), and every signed-in player can give one vote in it. We keep which option each player voted for, so that a player has only one vote and can move it; other players see how many votes each option has, never who gave them. When a player's account is closed, their votes are deleted, and so is the poll of a thread they started.
- The Trading Post (in the Forums): a signed-in player can post a listing - the item they want and the credits or items they give for it - and other signed-in players can answer it with an offer. A listing shows its player's username and Tiz to every signed-in player; an offer is seen only by the two players it is between. When both agree, the credits and items change hands in their accounts. The game's trading rules apply (your account's age, never two players of the same household - checked with the IP address your account last played from). Listings and offers are deleted when their player's account is closed.
Safety and moderation
- Reports you make or that are made about you, and warnings, mutes and bans (with their reason and length). A ban can be on an internet address (IP address).
Security and technical data
- Your IP address and the name of your browser each time you sign in on the website or log into the game (a record of each sign-in is kept for 90 days; the last address you played from is kept with your account), and the address an account was made from - we allow two accounts per address.
- How your browser drew the game each time you log into it: with full graphics (WebGL), or in the simpler mode a browser without WebGL gets (canvas). Only one of those two words is kept, with the record of that sign-in, so that we can count how many players get the simpler mode. The game asks your device for nothing more for this count: no graphics card name, no other detail.
- A random id for your browser (the
muniz_devicecookie - we keep only a scrambled version) and which browsers have signed into your account, so that during an attack on your account only your own browsers get in - and so that our admins can see when accounts share a browser or a network and pass credits or items between them (one person farming with extra accounts). They see the accounts' names, never the id itself. When an account is banned, the browsers it signed in from are banned with it for as long as the ban lasts: meanwhile no account can sign in, or be made, from them. - Wrong-password attempts (for the address, the browser and the username) for 30 minutes, to stop people guessing passwords.
- Temporary automatic blocks of an internet address that floods the game or sends messages the game can't send (bots).
- How long you are in the game each day, and in which rooms (a room of the island by its name; a home only as "your own home" or "another player's home", never whose). Each day is kept for 90 days; one total of your time in the game is kept with your account. Only our Creators can see it.
- Technical logs of sign-ins, errors and moderation, with usernames and IP addresses. When the game itself runs into an error on your device, it tells our server what went wrong and where in the game's code, the room you were in, how long you had been there, how many players were in it, the game's version and whether it drew with full graphics or in its simpler mode - nothing else about your device. It goes into these logs.
- When a room of the game is slow for you - it takes 3 seconds or more to open, or stutters just after - the game tells our server: the room, how long it took, how many players were in it, whether you play on a phone or a computer, your browser and its version, your device's system (for example Android 14), your phone's model when your browser gives it (for example SM-S911B), your graphics setting and your connection's type (4G, 3G...). For the slowest moment it adds what the game was busy with: how long its code, its drawing and its own steps (building the room, adding pictures) took, and which of the game's own program files ran longest - nothing about what you typed, said or looked at. The same goes for the game's start when it takes 8 seconds or more from opening the page to your first room: how long each step took (the page itself, signing in, the first room) and how much the game downloaded. It is kept for 30 days so that our Creators can see which rooms are slow, and on which devices, and make them faster; it is erased at once when your account is closed.
- When an internet address downloads a file of our website or of the game that no visitor ever needs - a trap only tools that copy a whole site fetch - we keep that address, the name of the browser or tool it gave and when, for 30 days, so that our Creators can see who copies the site or the game. Someone visiting or playing normally never fetches it.
Buying credits (Stripe)
If you buy a pack of credits, the payment is taken by Stripe (Stripe Payments UK Ltd; Stripe Payments Europe Ltd for buyers in the EU). Pressing "Pay by card" on the Get credits page takes you to Stripe's own page: nothing of Stripe's loads on our website. Stripe asks for your email and your card there, and receives your IP address and details of your browser and device. None of that reaches us: we are only told whether the payment went through, and later if it was refunded or disputed. See Stripe's privacy policy.
What we keep of a payment: which account bought which pack, the price, the date, and Stripe's reference numbers for the order and the payment. If a payment is refunded or disputed, Stripe tells us, and we keep that with the record. We do not keep the payer's name, email, address or card. This record is kept after an account closes, for as long as tax and accounting law requires (6 years in the UK); by then it names nobody, only the closed account's number.
PayPal, before. Packs bought earlier through PayPal (PayPal UK Ltd; PayPal (Europe) S.à r.l. et Cie, S.C.A. for buyers in the EU) are kept the same way, with PayPal's reference numbers, and PayPal still tells us if one of those payments is refunded or disputed. PayPal's script no longer loads on our website. See PayPal's privacy statement.
Premium (Stripe)
Premium, the monthly subscription, is paid on Stripe's own page in the same way: Stripe asks for your email and your card there, and none of that reaches us. For a subscription Stripe keeps your card, under its own privacy policy, to take each month's payment until the subscription ends.
What we keep of Premium: whether your account is Premium, when it began, the end of the month paid and whether it renews, with Stripe's reference numbers for the subscription and for you as its customer; the perks you chose (your name's font, colours and letters, your speech bubble, your card's frame, your Mazo Clover's effect); and what you took in Victor's VIP Store. These are part of your account: they are erased at once when your account is closed. And of each month paid, and each payment of months paid ahead: the price, the date, what it gave your account, and Stripe's reference numbers. Like the record of credits you bought, that is kept after your account closes, for as long as tax and accounting law requires (6 years in the UK); by then it names nobody, only the closed account's number.
When you close your account while your Premium still renews, we cancel the subscription at Stripe first, so no further payment is taken.
hCaptcha
On the sign-in and sign-up forms, on the Support page when you add pictures to a ticket, and on the Messages page when you send a first message to a player who is not your friend, hCaptcha (Intuition Machines, Inc., USA) checks that you are a person and not a robot. To do that it collects information about your device and browser and your IP address. See hCaptcha's privacy policy.
The VPN check (proxycheck.io)
When you sign in or press Play - and when the game reconnects from a new address - the IP address you use is checked with proxycheck.io to see whether it belongs to a VPN or a proxy: accounts can't be signed in to or played through one, so that banned players can't come back. Apple's iCloud Private Relay is fine. Only your IP address is sent - nothing else about you - and we ask proxycheck.io not to log or keep it. See proxycheck.io's privacy policy.
If you need a VPN, you can ask our team to let your account play with it (the "Playing with a VPN" page). We keep what you wrote, the name of the VPN service your address belongs to (never the address itself), and the team's answer.
Emails (Brevo)
We only send emails about your account: the welcome email with the link that activates a new account, the link to pick a new password when you ask for one, when you change your email, a link to the new address to confirm it and a note to the old one, and a receipt when you buy credits. They are sent for us by Brevo (Sendinblue SAS, Paris, France). To send an email, Brevo receives your email address, your username and the text of the email, and keeps a record that it was sent and whether it arrived. Our emails carry no adverts, and we don't use your address for newsletters or marketing. See Brevo's privacy policy.
The link in an email works once and for a short time (24 hours to activate an account or confirm a new email, 60 minutes for a new password). We keep only a scrambled version of it, deleted when it is used or out of date.
Ads (Google AdSense)
The website (not the game) shows adverts from Google AdSense - Google Ireland Limited for visitors in Europe, Google LLC in the United States. They help pay for the servers. Google's script loads with each page of the website and, as with any website, Google receives your IP address, details of your browser and device, and which page you are on.
- Until you choose, and if you say "No thanks": Google's Consent Mode is set to "denied". No advertising cookies are stored or read, and any ads shown are not chosen using anything about you.
- If you say "OK" in the "Ads and cookies" box: Google may store and read cookies and similar ids in your browser, and use what it knows about your visits to this and other websites to choose and measure ads.
Our legal reason is your consent (UK: PECR regulation 6 and UK GDPR article 6(1)(a); the Netherlands: Telecommunications Act article 11.7a and GDPR article 6(1)(a); Switzerland: the FADP). You can change your mind at any time: Ad choices, also at the bottom of every page.
We never give Google your username, your email address, your chat or anything else from your account. Google decides for itself how it uses what its script collects: see how Google uses information from sites that use its services and your Google ad settings.
What we don't collect
No real names, addresses, phone numbers, photos, dates of birth, payment details or location. No analytics or social media trackers.
4. Why we use it, and our legal reasons
| What for | Legal reason (UK GDPR / GDPR article 6) |
|---|---|
| Running your account and the game: activating your account and getting you back into it by email, signing in, saving your Tiz and progress, chat, friends, trades, the Store, rankings and your player page | Providing the service you asked for (contract, 6(1)(b)) |
| Keeping players safe: the chat filter, reports, moderation, bans | Our legitimate interests and those of all players, above all children (6(1)(f)); our duties under online safety law (6(1)(c)) |
| Security: stopping password guessing, bots, cheating and ban dodging; keeping the game running | Legitimate interests (6(1)(f)) |
| Knowing how the game is used - how long players are in it and which rooms they use - to look after the island, improve it and look into problems | Legitimate interests (6(1)(f)) |
| Answering you, and requests from authorities the law obliges us to answer | Legitimate interests (6(1)(f)); legal obligation (6(1)(c)) |
| Anything else we might one day ask your permission for (for example a newsletter) | Your consent (6(1)(a)) - which you can withdraw at any time |
Where we rely on legitimate interests, we have weighed them against your rights, taking extra care because many players are children. In Switzerland we process personal data in line with the principles of the FADP (lawfulness, good faith, proportionality, purpose limitation and accuracy).
Some decisions are automatic: the chat filter, the wrong-password limit and the temporary blocks of addresses that flood the game. None of them has legal effects on you; if you think one got it wrong, write to us and a person will look at it.
5. Who can see your data
- Anyone visiting the website: your player page - username, Tiz, whether you're online, level and XP, popularity, MaZo, weeks as King, member number and date you joined, who you're married to, your scores and places, your motto, "about me" and interests, your trade list and your wishlist. The list of players and the rankings show your username and Tiz too.
- Other players in the game: your username, your Tiz, what you write in the Room chat (the players in your room) and in the Global chat (every player in the game); your private messages go only to the player you send them to.
- Anyone visiting the News page: the comments you wrote there - your username, your Tiz and its face, the date and time, and your words.
- Signed-in players reading the Forums: the threads and posts you wrote there - your username, your Tiz and its face, the date and time, and your words - and the polls you added to your threads. A poll shows how many votes each option has; nobody is shown which option you voted for. A post shows how many players like it; nobody is shown which posts you liked.
- Signed-in players looking at an item: that you own it - your username is in the list of the players who own that item. The list shows usernames only, not how many of it you have.
- Our moderators and staff: what they need to look after the game - reports with their chat lines, the Room and Global chat lines kept for 90 days, bans and mutes, and account details. The sign-in records and IP addresses can be seen only by the game's Creators (the people who run it), to deal with rule-breaking such as getting round a ban or running several accounts; each look is noted.
- Companies that work for us, only to run the service and under contract: our hosting and content delivery providers, hCaptcha, proxycheck.io (the VPN check), and Brevo (Sendinblue SAS, Paris, France), which sends our emails.
- Authorities, when the law requires it, or when a child is in danger.
We never sell or rent your data, and we never give anything from your account to advertisers. Google's ad script on the website collects what is described under Ads in section 3 by itself.
6. Data sent abroad
Our servers are hosted in Switzerland. Brevo, which sends our emails, is based in France, in the European Union. hCaptcha and Google are based in the United States. proxycheck.io answers the VPN check from servers in the United Kingdom, the European Union, Canada and Singapore, and is asked to keep nothing. When your data goes to a country that the UK, the EU or Switzerland does not consider to protect personal data well enough, we use the safeguards the law provides: the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses (recognised by the Swiss Federal Data Protection and Information Commissioner, with the Swiss changes), or a recognised framework such as the EU-US, UK-US and Swiss-US Data Privacy Framework where the company is certified. Write to us for a copy of these safeguards.
7. How long we keep it
| Data | Kept for |
|---|---|
| Your account and game data | While your account exists. When you close it (My Account, Settings) it is erased at once; when you ask us to by email, within 30 days. |
| Your part in other players' records (trades, games you played together, the King of the Week's history) | The record stays for the other player, with your name and account removed, when your account is closed. |
| A new account that is never activated (the link in the welcome email never pressed) | 7 days, then the account is removed. |
| The links we email you | 24 hours (activating an account, confirming a new email - the new address is kept with its link for that long) or 60 minutes (a new password); deleted as soon as they are used. |
| Your player page | Until you change it or your account is closed. |
| The record of credits you bought (the pack, the price, the date, PayPal's or Stripe's reference numbers) | 6 years after the payment, also after your account is closed (tax and accounting law). It then names nobody: only the closed account's number. |
| The record of each Premium month paid, and of months paid ahead (the price, the date, what it gave, Stripe's reference numbers) | 6 years after the payment, also after your account is closed (tax and accounting law). It then names nobody: only the closed account's number. |
| Your Premium subscription (whether it renews, the end of the month paid, Stripe's reference numbers), the perks you chose and what you took in Victor's VIP Store | While your account exists. When it is closed they are erased at once - a subscription that still renews is cancelled at Stripe first, so no further payment is taken. |
| Private messages (the ones you wrote and the ones written to you) | 90 days, then deleted - a year while you or the other player is a Premium member. When your account is closed they are deleted at once - also from the other player's conversations. |
| Your comments under News posts | Until your account is closed (a Creator can hide one sooner). |
| Your posts and thread titles in the Forums | Players stop seeing a post or a thread when you delete it (a moderator can hide one sooner). Our staff can still see what you deleted (and can put it back), and the earlier wording of a post you changed, until your account is closed - so that nobody can say something against the rules and then remove it. A thread other players have replied in can no longer be deleted by you: you can still change your own words in it. |
| Your likes on Forum posts | Until you take a like back, or your account is closed. |
| Your votes in the Forums' polls, and the polls of the threads you started | Until your account is closed. You can move your vote while the thread is open; a poll can't be changed once it is posted. |
| Your Trading Post listings and offers | Until your account is closed. A listing ends by itself after 14 days. |
| Being signed in on the website | Until you close your browser, or 30 days with "Stay signed in" (or until you sign out). |
| The record of each sign-in (when, from which IP address, with which browser and, for the game, whether it drew with full graphics or in its simpler mode) | 90 days, then deleted; erased at once when your account is closed. |
| Your time in the game by day and by room | 90 days for each day, then deleted; the total of your time is kept while your account exists. Both are erased at once when your account is closed. |
| Your browser's id | 1 year. |
| Which browsers have signed into your account | While your account exists. |
| A browser banned with a banned account (its scrambled id only) | As long as that ban lasts, then deleted. |
| Wrong-password attempts | 30 minutes. |
| What you write in the Room chat and the Global chat (with the room and when) | 90 days, then deleted; erased at once when your account is closed. |
| What you typed when the chat filter stopped it (kept with the mute) | 90 days, then deleted; erased at once when your account is closed. |
| Chat lines in the server's memory | Until the server restarts (the last 10 lines per player at most). |
| The reports of rooms, and of game starts, that were slow for you (the room, the times, what the start downloaded, your device, browser and connection as above) | 30 days, then deleted; erased at once when your account is closed. |
| Your requests to play with a VPN (what you wrote, the VPN service's name, the answer) and whether you may | While your account exists. |
| The result of the VPN check of an address you used | 12 hours, in our server's memory only (proxycheck.io is asked to keep nothing). |
| An address that downloaded the website's or the game's trap file (with the name of its browser or tool) | 30 days after it was last seen, then deleted. |
| Technical logs (including chat lines) | Replaced once they reach a set size, usually within days. |
| Automatic address blocks | 10 minutes the first time, up to 7 days for repeated abuse; lifted by themselves. A block counts towards a longer one for 30 days. |
| Reports | 1 year after a moderator has dealt with them, then deleted. |
| Support tickets (what you wrote and the team's answers) | 1 year after the ticket was closed, then deleted. When your account is closed they are deleted at once. |
| Pictures added to a support ticket | Deleted when the ticket is closed, and at once when your account is closed. |
| Bans and mutes | 1 year after they end (so repeated rule-breaking can be seen), then deleted. |
| A closed account's bans, mutes and the address it was made from | 1 year after the account is closed, so that bans and the three-accounts-per-address rule can't be dodged, then deleted. |
8. Cookies and storage on your device
For what the site and the game need to work and to stay secure we don't ask for consent (UK PECR regulation 6(4); Dutch Telecommunications Act article 11.7a(3)(b)). Advertising cookies are different: Google's are only used if you say OK in the "Ads and cookies" box. There are no analytics cookies.
| Name | What it does | How long |
|---|---|---|
muniz_session | Keeps you signed in on the website. | Until you close your browser, or 30 days with "Stay signed in" |
muniz_device | A random id for your browser, for security (wrong-password limits, recognising your own browsers, spotting extra accounts used to farm credits or items). | 1 year |
muniz_vpn_appeal | Only after a sign-in was refused because of a VPN: it lets this browser send that account's request to play with a VPN. | 1 hour |
muniz_oauth | Only while you sign in with Discord: it makes sure the browser that comes back from Discord is the one that left. It is removed when you come back. | 10 minutes at most |
muniz_pending | Only when you sign in with Discord and have no account yet: it keeps that sign-in waiting while you create your Tiz, and is removed when the account is made. | 30 minutes at most |
muniz_activate | After you make an account, or try to sign in before activating it: it lets this browser ask for the activation email again. | 24 hours at most |
muniz_ban | Only when signing in with Discord is refused because of a ban: it carries the reason to the page that shows it, which removes it. | 2 minutes at most |
| hCaptcha's cookies | Set by hCaptcha on the sign-in and sign-up forms and, when it is asked there, on the Support and Messages pages, to tell people from robots. | See hCaptcha's policy |
Your ad choice (muniz_ads_consent) | Your answer in the "Ads and cookies" box (OK or No thanks), saved in your browser (not a cookie; never sent to us). | Until you clear it |
| Google's advertising cookies | Only if you said OK: set by Google AdSense to choose and measure ads. | See Google's policy |
Game settings and the game's own notes (muniz_settings and a few other muniz_ entries) | Your sound and graphics settings; your choices in the minigames and board games (auto-fire, shapes, your last wager...); which tips the game has already shown you; the King of the Week's picture for the loading screen; and, for one visit only, the room and spot you were in, to put you back there after a lost connection. Saved in your browser (not a cookie; never sent to us). | Until you clear it (the room and spot: until the tab is closed) |
9. Your rights
You can ask us, free of charge:
- for a copy of the personal data we keep about you, and how we use it (UK GDPR / GDPR article 15; FADP article 25);
- to correct anything that is wrong (article 16; FADP article 32);
- to delete your data and close your account (article 17) - you can also do this yourself, at once, in My Account, Settings, "Close my account";
- to limit how we use it, or to object to how we use it on the basis of legitimate interests (articles 18 and 21);
- for your data in a form you can take elsewhere (article 20; FADP article 28);
- to withdraw a consent you gave;
- for a person to look again at an automatic decision.
Write to [email protected] from the email address of your account, or say your username. We may ask you to prove it's your account. We answer within one month (30 days in Switzerland); if a request is complicated we may take up to two months more and will tell you why.
Children can ask for these things themselves. A parent or guardian can ask for a young child - see Parents.
10. Complaints
Please talk to us first at [email protected]. You can also complain to the data protection authority where you live:
- UK: the Information Commissioner's Office (ICO) - ico.org.uk, 0303 123 1113.
- Netherlands: the Autoriteit Persoonsgegevens - autoriteitpersoonsgegevens.nl.
- Switzerland: the Federal Data Protection and Information Commissioner (FDPIC) - edoeb.admin.ch.
11. Keeping your data safe
- Passwords are stored only as bcrypt hashes; sign-in tokens and browser ids only as SHA-256 hashes.
- The site and the game use encrypted connections (HTTPS).
- Wrong-password limits, hCaptcha and automatic blocks stop people breaking into accounts.
- Only the staff who need it can see account and moderation data.
- If a data breach puts you at risk, we tell you and the authorities as the law requires.
Help us: use a password you don't use anywhere else, and never give it to anyone. The Muniz Online team will never ask for your password.
12. Changes to this policy
When we change this policy we update the date at the top. If a change matters to how we use your data, we tell players in the game or on the website before it applies.
Questions?
Write to [email protected]. Parents can find more on the Parents page.