Privacy policy

Handball Boss (the Android app and this website) · version 2026-10-27

In short. You sign in with your Google account, so we know your e-mail address and Google profile name. Other players only see your manager name, your club's name and crest, and your results in the game. We do not sell data, show ads or track you outside the game. You can delete your account in the app or by e-mail (how to do it).

The Polish version of this policy is the binding one; this is a translation.

1. Controller

The controller of your personal data is Piotr Świst AI Solutions (NIP 8252216904, REGON 545373182), “we” below. For anything about your personal data, write to piotr@swistai.com.

2. What data we process

Account

When you sign in with Google, Google gives us your e-mail address, profile name (first and last name), profile picture address and Google account ID. We never learn your Google password.
We give you an internal account ID.

Game data

Manager name, club name and crest, the country you chose.
Your decisions in the game: lineups, tactics, training, transfers, ticket prices and other club settings.
When you were last active in the app — the game releases the club of a manager who has not opened it for a whole season.
Tutorial progress and in-game messages.

Consents

Your acceptance of the terms of service and this privacy policy (document version and time) and your confirmation that you are at least 16 years old.

Technical data

Game server logs: IP address, time and type of request, response code and app identifier. We use them for security (rate limits, abuse detection) and to fix bugs.
On your device the app stores your sign-in session, settings (theme, language) and a copy of recently loaded data so it works offline. This data does not leave your device.
When you write to us: your e-mail address and the message — we keep them until the matter is settled.
This website uses no cookies or analytics. The website host logs visitors' IP addresses.

We do not collect your location, contacts, photos, files or payment data. The game has no ads, payments or push notifications today — if we add them, we will update this policy first and ask for your consent to personalised ads and notifications.

3. Purposes and legal bases

Purpose	Data	Legal basis (GDPR)
Creating and running your account, playing the game	account, game data	Art. 6(1)(b) — performance of a contract (terms of service)
Showing your club and results to other players	manager name, club name and crest, results	Art. 6(1)(b)
Security, abuse prevention, backups, fixing bugs	technical data, account	Art. 6(1)(f) — legitimate interest
Proving that you gave your consents and confirmed your age	consent history	Art. 6(1)(c) and (f)
Answering messages and data requests	e-mail, message content	Art. 6(1)(c) and (f)

Providing data is voluntary, but you cannot play without a Google account and the consents.

4. Who has access to the data

Other players — see your manager name, club name and crest, lineup, results and statistics. They never see your e-mail or Google profile data.
Server provider — the game server (database and backups) is hosted by the VPS provider Mikrus (mikr.us) in a data centre in the European Union.
Cloudflare, Inc. — relays connections to the game server (encryption, protection against attacks).
Netlify, Inc. — hosts this website.
OVHcloud — handles our e-mail when you write to us (servers in the European Union).
Google — provides Google sign-in and distributes the app on Google Play as a separate controller, under the Google Privacy Policy.
Public authorities — only where the law requires it.

Service providers process data on our behalf and only as far as the game needs. We do not sell data or share it for advertising.

5. Transfers outside the EEA

Cloudflare, Netlify and Google may process data in the United States. Transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, where it does not apply, on standard contractual clauses approved by the Commission.

6. How long we keep data

Account and game data — as long as you have an account.
After you delete your account — you can change your mind for 7 days. Then your club returns to the pool of bot-run clubs and we delete your e-mail, Google profile data, manager name, sessions, devices and account messages. An anonymous account ID that cannot be linked to you remains.
Game world history (match results, tables, transfers) remains, but it belongs to the club, not to you.
Consent history — stays with the anonymous ID so that we can show consents were collected properly.
Database backups — are encrypted and rotated; the oldest is up to 6 months old. Deleted data disappears from backups after that time at the latest.
Server logs — are overwritten in cycles and are not used for profiling.

7. Your rights

You have the right to access your data and get a copy, to rectification (you can also change your manager name in the game), erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where we process data based on consent, you can withdraw it at any time — this does not affect the lawfulness of earlier processing.

Send requests to piotr@swistai.com from the address linked to your Google account. We will reply within one month. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or with the authority in your country.

8. Age

The game is for people aged 16 or over. We do not knowingly collect data from younger people — if we learn that an account belongs to someone under 16, we will delete it.

9. Security

Connections of the app and this website are encrypted (HTTPS). Each player can only access their own private data, and only the people who maintain the game can access the server and the database. Backups are encrypted.

10. Automated decisions

Match results, bot decisions and game events are drawn and calculated automatically under the rules of the game. We do not make automated decisions about you that have legal effects, and we do not profile you for marketing.

11. Changes to this policy

We will announce a new version of this policy in the app — the next time you open it, the game will ask you to accept it. Each version is dated at the top of this page.