Privacy Policy
1. Who we are
Full business name, registration number, address, country, and the privacy@catholicworld.eu contact — a sole proprietorship registered in Poland is the controller.
2. What this policy covers
catholicworld.eu, CatholicNews and CatholicGames under one account; excludes payment providers' own sites.
3. Information we collect
Four groups: what you give us (email, password, nickname), what using the product creates (progress, results, times), technical data (IP address, browser), and what providers tell us (payment status, delivery). We do not collect card details.
4. Why we use it and on what legal basis
A table mapping every purpose to its legal basis and retention period, in plain language.
5. Cookies and local storage
The three consent layers and how to change your choice, with the full cookie table.
6. Playing without an account
What is stored in a guest's browser, what player_token is, when it is created, and that clearing your browser clears your progress.
7. Leaderboard
The leaderboard needs no account and is anonymous; your nickname is public; we never store an IP address against a leaderboard entry, only a hash used for abuse prevention and deleted after 7 days; time is measured by the server.
8. Newsletter
Double opt-in confirmation, open and click measurement, one-click unsubscribe, and the 90-day inactivity rule.
9. Analytics and advertising
PostHog, Meta and TikTok — none load before consent, how to withdraw it, and how we honour the Global Privacy Control signal.
10. Who we share data with
A table of providers with role and country. We do not sell your data.
11. International transfers
Some providers, including the database behind the whole service, process data in the United States, on the basis of standard contractual clauses or the Data Privacy Framework.
12. How long we keep data
Retention periods by data type — including accounting records for 5 years, IP addresses for 7 days, consent records for 3 years, leaderboard entries for 12 months.
13. Your rights
The rights available to you, how to exercise them, a 30-day response time, and how to complain to the Polish data protection authority.
14. Your US privacy rights
Rights for California and other US residents, including a Do Not Sell or Share My Personal Information link.
15. Children
The minimum age for an account, what happens if we learn an account belongs to a child, and where to report it.
16. Security
A general description of safeguards — encrypted connections, hashed passwords, restricted access — and the security@catholicworld.eu contact for reporting issues.
17. Automated decision-making
We do not make decisions with legal effect automatically; flagging a result as suspicious always ends in a human decision.
18. AI in our content
Editions are prepared by AI agents, every edition is approved and signed by a person, and generated images are labelled as such.
19. Changes to this policy
How we announce changes: email for material changes, the consent banner for changes to consent scope, and an archive of past versions.
20. Contact
privacy@catholicworld.eu, our postal address, and response time.