Privacy

This policy explains what personal data Skravix collects, why, and what rights you have over it. It applies to everyone who visits or plays Skravix, whether as a guest or a registered member.

Who's responsible for your data

Skravix is currently operated by an individual developer rather than a registered company. For the purposes of data protection law, that operator is the "data controller" for the personal data described below — see Contact for how to reach them.

Account data

If you create an account, your e-mail address and a hashed password (never the password itself) are stored so you can log back in, along with your display name, bio, and chosen avatar. Guests can play without an account — their display name only exists for the current browser session and is never linked to an e-mail address.

Gameplay data

Match statistics, achievements, saved word packs, and friends are tied to your account so they carry over between games. This data exists only for members — guest gameplay isn't tracked beyond the room they're currently in.

Drawings & chat messages

Live drawing strokes and chat messages during a game are not stored once the round ends — they only ever pass through our servers in real time to reach other players in the same room. The one exception is Free Draw: a drawing you explicitly choose to share to the public gallery is stored and stays visible to other visitors until you unshare, replace, or delete it, along with any ratings or reports it receives.

Browser preferences

Things like your interface language and custom hotkey bindings are saved directly in your browser's local storage, not on our servers, and work the same for guests and members. Clearing your browser data resets them.

Cookies & advertising

Skravix shows ads served by Google AdSense to stay free to play. No ad is requested, and no advertising cookie is set, until you actively accept this on the consent banner shown on your first visit — declining (or not responding) keeps ads off entirely. If you accept, Google may use cookies and similar technology to serve and measure ads; see Google's own privacy policy for how they handle that data. You can withdraw consent at any time by clearing your browser's site data for Skravix.

Why we're allowed to process this data

Account and gameplay data is processed because it's necessary to provide the service you've signed up for (performance of a contract). Security and abuse-prevention measures rely on our legitimate interest in keeping Skravix working and safe. Advertising cookies are only ever set with your explicit, freely-given consent, which you can withdraw at any time.

Who we share data with

We don't sell your data. It's shared only with the outside services Skravix genuinely depends on to run: Microsoft Azure hosts our servers and databases, and Google AdSense serves ads once you've consented to them. Both act as data processors under our instructions, not as independent owners of your data. If Skravix later introduces paid features or third-party sign-in (for example linking a Discord account), this section will be updated before that data starts flowing anywhere new.

International data transfers

Skravix's servers run on Microsoft Azure, including in regions outside the European Economic Area. Where that's the case, Microsoft's own data protection terms and standard contractual clauses apply to keep your data protected to the same standard as within the EEA.

How long we keep your data

Account and gameplay data is kept for as long as your account exists. There's no self-service account deletion yet — until there is, contact us and we'll delete your account and associated personal data, typically within 30 days. Guest data isn't persisted beyond your browser session in the first place.

Your rights

Under data protection law (including the GDPR, if you're in the EU/EEA) you have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent at any time without affecting anything done before that. Contact us to exercise any of these — see the Contact page. If you're unhappy with how we've handled a request, you also have the right to lodge a complaint with your local data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).

Children's privacy

Skravix is a casual game meant for players of all ages — anyone can play as a guest without an account, which doesn't involve any personal data at all. Creating an account does involve personal data (an e-mail address), so it requires meeting the minimum age set out in our Terms of Service. We don't knowingly collect personal data from children below that age; if you believe a child has created an account, contact us and we'll remove it.

Security

Passwords are stored as salted hashes, never as plain text, and all traffic between your browser and our servers is encrypted (HTTPS). No system is perfectly secure, but we take reasonable, industry-standard measures to protect your data against unauthorized access.

Changes to this policy

We may update this policy as Skravix evolves — the date at the top always reflects the latest version. Meaningful changes affecting how your data is used will be highlighted here, not just silently applied.

Questions?

Reach out any time via our Contact page — we'll do our best to answer quickly.

Contact