Privacy Policy
This document was originally drafted in Polish, which is the governing version. It has also been translated into English, German, and Spanish for informational purposes only. In the event of any discrepancy between the Polish version and any translated version, the Polish version shall prevail and be binding.
1. General Information
1.1. This policy applies to the website operating at the following address: www.bloominy.com.
1.2. The website operator and the personal data controller is Tymoteusz DrzaĹ Cyber Consulting, NIP: 6452583115, REGON: 526552844.
1.3. The Controller's email contact address: tymekdrzal.zajkomp@gmail.com
1.4. The Controller is the controller of personal data provided voluntarily on the Website.
1.5. The Website uses personal data for the following purposes:
- To fulfill ordered services (Premium Subscription).
- To present offers or information.
1.6. The Website collects information about users in the following ways:
- through data voluntarily entered into forms (registration, content of created Games),
- by storing cookies on end-user devices.
2. Selected data protection methods used by the Administrator
2.1. Login pages and areas where personal data is entered are protected at the transmission layer by an SSL certificate.
2.2. User passwords are stored in hashed formâthe hashing function is one-way, which prevents the original password from being reconstructed.
2.3. The Administrator periodically changes its access passwords to administrative systems.
2.4. The Administrator ensures that the software used to process personal data is regularly updated.
3. Infrastructure and Hosting
3.1. The website is hosted on the Administrator's own serverâinfrastructure physically owned by the Administrator, without the involvement of an external hosting provider.
3.2. Due to the absence of an external hosting provider, the Administrator directly manages the server's technical logs (including addresses of requested resources, query times, error information, IP addresses, and browser information) to ensure the reliability and security of the Website.
4. Your Rights and Additional Information on How Your Data Is Used
4.1. The Administrator may transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the Administrator's obligations. This applies to the following groups of recipients:
- payment processors (Stripe),
- mail service providers (transactional email provider, used exclusively to send messages related to your Account, e.g., password resets),
- public authorities, upon their authorized request.
4.2. Your personal data is processed no longer than is necessary to achieve the purposes for which it was collected, and in accordance with separate regulations (e.g., accounting regulations regarding payment-related data).
4.3. You have the right to request from the Controller:
- access to your personal data,
- correction of your personal data,
- deletion of your personal data,
- restriction of processing,
- data portability.
4.4. The Controller does not make automated decisions regarding you that produce legal effects, nor does it profile you for marketing purposesâthe Website does not use marketing techniques that require such processing.
4.5. You have the right to file a complaint regarding the Controller's actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
4.6. Providing personal data is voluntary but necessary to use certain features of the Website (e.g., creating an Account or purchasing a Premium Subscription).
4.7. Your personal data may be transferred outside the European Economic Area in connection with the Controller's use of the payment processor Stripe, whose infrastructure is global in nature. Such transfers are based on appropriate legal safeguards, including the Standard Contractual Clauses approved by the European Commission.
5. Information in Forms
5.1. The Service collects information voluntarily provided by the user in the registration form (email address) and in the Game creation form (content entered by the User).
5.2. The data provided in the form is processed for the purpose specified by the formâe.g., creating and managing an Account, processing a Premium Subscription, or making the created Game available.
6. Administrator Logs
Information about user behavior on the Website may be logged for the purposes of administering the Website, performing technical diagnostics, and ensuring its proper operation.
7. Marketing Techniques
The Website does not use marketing techniques that require separate user consent (such as Google Analytics, conversion pixels, remarketing, or profiling). If this changes, this policy will be updated prior to the implementation of such techniques.
8. Information About Cookies
8.1. The Website uses cookiesâsmall text files stored on the User's device.
8.2. The Website Administrator is the entity that places cookies and accesses them.
8.3. The Website uses only the following cookies:
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| session_token | Maintaining the User's logged-in session | 30 days | Essential |
| locale | Remembering the selected interface language | 1 year | Functional |
| cookie_notice_dismissed | Remembering that the cookie notice banner has been dismissed | 1 year | Functional |
8.4. The Website does not use third-party cookies for analytical or advertising purposes, nor to track activity outside the Website.
8.5. Payments are processed by Stripe via its hosted payment pageâany cookies set during the payment process are managed by Stripe on its own domain, outside the Administrator's control.
9. Managing Cookies
9.1. Users may independently change their cookie settings in their web browser, including blocking or deleting cookies.
9.2. Restricting the use of cookies necessary for authentication processes (e.g., session_token) may prevent the use of Website features that require logging in.