Privacy Policy

Effective date: 13 June 2026

This Privacy Policy explains how STARTUPOLY collects, uses, stores and protects personal data when you use the website, browser game, account features, multiplayer rooms and related services.

1. Controller

The data controller is:

IP Aleksei Ruban, Individual Entrepreneur Identification number: 345721800 Address: Georgia, Batumi City, Tbel Abuseridze Street, N 38, Flat N63 Email: alexeyrv1@gmail.com

2. Summary

You can use STARTUPOLY without creating an account. If you create an account, we collect the information needed to provide that account, such as your email address and profile name.

STARTUPOLY uses essential cookies and browser storage to keep the game working, remember your room/session/language choices and store your cookie preference. Optional analytics cookies are used only if you accept them.

We do not sell your personal data.

3. Data we collect

Depending on how you use STARTUPOLY, we may collect the following categories of data:

3.1 Account data

If you create or use an account, we may process:

• email address;
• profile/display name;
• password hash, if email/password login is enabled;
• connected login provider information, if Google login is enabled;
• account creation and update timestamps;
• basic game statistics, such as games played and games won.

We do not store your plain-text password.

3.2 Guest and local profile data

If you play without an account, the game may store some information locally in your browser, such as:

• profile name;
• player icon and color;
• language preference;
• local room/seat identifier;
• last room identifier;
• cookie consent choice.

This information is mainly stored in browser storage and is used to make the game work smoothly.

3.3 Multiplayer room and gameplay data

To run multiplayer rooms, we may process:

• room ID and room code;
• room type and room status;
• player names, icons, colors and seat IDs;
• game state, including board state, ownership, trades, auctions, bank contracts, loans, shares, cash, turns and similar gameplay information;
• room timestamps;
• chat messages or trade messages, if chat or messaging is used in the room.

Other players in the same room may see gameplay data, player names, icons, colors, trades and chat messages.

3.4 Technical data

When you use STARTUPOLY, our servers and hosting providers may process technical data such as:

• IP address;
• browser and device information;
• operating system;
• pages or endpoints requested;
• date and time of requests;
• error logs and security logs.

This data is used to operate, secure, debug and improve the service.

3.5 Cookies and analytics data

We use essential cookies and browser storage to provide the service. If you consent to optional analytics cookies, Google Analytics may collect usage data such as page views, approximate location, device/browser information and interaction events.

More details are available in the Cookie Policy.

4. How we use data

We use personal data to:

• provide the STARTUPOLY website and browser game;
• create and manage accounts;
• allow players to create, join and play multiplayer rooms;
• remember language, room, session and cookie choices;
• save profile and game statistics;
• operate, secure, debug and maintain the service;
• prevent abuse, cheating, fraud and technical attacks;
• understand aggregated usage and improve the game, if optional analytics are accepted;
• respond to user requests, support messages and legal requests;
• comply with legal obligations.

5. Legal bases for EEA/UK users

If you are in the EEA or UK, our legal bases may include:

• Performance of a contract: to provide the game, accounts, rooms and requested features.
• Legitimate interests: to secure, maintain, debug and improve the service, prevent abuse and keep the game functional, provided your rights do not override those interests.
• Consent: for optional analytics cookies and similar technologies where consent is required.
• Legal obligation: where processing is necessary to comply with applicable laws or lawful requests.

6. Cookies and browser storage

STARTUPOLY uses cookies and browser storage. Essential cookies and storage are required for the site to work properly. Optional analytics cookies are used only with consent.

Your cookie choice is stored for up to 30 days, after which you may be asked again. You can change your choice at any time via “Cookie settings” in the footer.

More details are available in the Cookie Policy.

7. Data sharing

We may share data with:

• hosting and infrastructure providers that host the website, database and server files;
• analytics providers, such as Google Analytics, only if analytics cookies are accepted;
• authentication providers, such as Google, if you choose to use those login methods;
• professional advisers, service providers or authorities where necessary for legal, security or compliance reasons;
• a successor entity if the service is transferred, merged, sold or reorganized.

We do not sell your personal data.

8. International transfers

We are based in Georgia, and our hosting, analytics, authentication and infrastructure providers may process data in other countries. These countries may have different data protection laws from your country. Where required by law, we use appropriate safeguards for international transfers.

9. Data retention

We keep personal data only as long as reasonably necessary for the purposes described in this Policy.

Typical retention periods:

• account data: while your account exists, unless a longer period is needed for legal, security or abuse-prevention reasons;
• session cookies: up to 30 days;
• cookie consent choice: up to 30 days;
• local browser storage: until you clear it, reset the game, or the site removes it;
• multiplayer rooms and room state: while needed to operate the room, and then for a reasonable period for maintenance, debugging, abuse prevention or storage management;
• analytics data: according to the analytics configuration and provider settings, preferably configured to the shortest practical period;
• server and security logs: for a reasonable period needed for security, debugging and legal purposes.

You may request deletion of your account or personal data by contacting alexeyrv1@gmail.com.

10. Security

We use reasonable technical and organizational measures to protect personal data. For example, passwords are stored as hashes rather than plain text, and session cookies should be configured with security protections such as HttpOnly, SameSite and Secure where available.

No internet service can be guaranteed to be completely secure. You use STARTUPOLY at your own risk.

11. Your rights

Depending on your location, you may have rights to:

• access your personal data;
• correct inaccurate personal data;
• delete your personal data;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• receive a copy of your data in a portable format;
• lodge a complaint with a data protection authority.

To exercise these rights, contact alexeyrv1@gmail.com. We may ask you to verify your identity before responding.

12. Children’s privacy

STARTUPOLY is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us and we will take reasonable steps to delete it where required by law.

13. Third-party links

STARTUPOLY may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their own privacy policies.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date. Continued use of STARTUPOLY after an update means you acknowledge the updated Policy.

15. Contact

For privacy questions or requests, contact: alexeyrv1@gmail.com.