Privacy Policy
Slime Kingdom is built to need as little about you as possible. You can play without an account, and we never sell your data.
Last updated: 15 October 2026
1. Who we are
Slime Kingdom (the “Game”) is operated by Vimay Group (“we”, “us”). Vimay Group is the data controller for personal data processed through the Game. Contact us about privacy at [email protected].
2. What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Guest player ID (random, not linked to your name, email or device identifiers) and a secret key stored as a one-way hash | To keep your scores and nickname yours without an account | Performance of our contract with you (providing the Game), Art. 6(1)(b) |
| Nickname you choose | Shown on leaderboards and in multiplayer | Contract, Art. 6(1)(b) |
| Game results: score, time, biome reached, mutations and skin used, daily-run date | Leaderboards, rankings and anti-cheat checks | Contract, Art. 6(1)(b) |
| Multiplayer inputs (movement and ability use) while you are in a match | Running the match; kept in memory only and discarded when it ends | Contract, Art. 6(1)(b) |
| Technical data: IP address, browser user agent, request times | Delivering the Game, security, preventing abuse and rate limiting. IP addresses are used in memory and are not written to our game database | Legitimate interests in keeping the Game secure and available, Art. 6(1)(f) |
| Error reports: error message, code location, game version, browser type | Finding and fixing bugs. Reports contain no player ID | Legitimate interests, Art. 6(1)(f) |
| Gameplay statistics (only if you allow them): session start and length, runs started and finished, mutations picked, screen size class, device type, browser family, country (from the network, not GPS), referring website and campaign tags | Understanding what is fun and what is too hard, so we can improve the Game | Your consent, Art. 6(1)(a). You can withdraw it at any time |
| Google Analytics (only if you allow statistics): pages and game screens viewed, gameplay events, approximate location, device and browser, through cookies set by Google | Measuring how many people play and where they come from | Your consent, Art. 6(1)(a). IP addresses are not stored by Google Analytics 4; ad features and Google signals are switched off |
| Emails you send us | Answering you | Legitimate interests, Art. 6(1)(f) |
We do not ask for your real name, email, phone number, address, photos or precise location, and we do not use your data for automated decisions with legal effects.
3. Advertising
The Game currently shows no third-party advertising. We may later show ads in menus and between runs, never during gameplay. If we do, we will update this policy first, ads will be non-personalised unless you consent to personalised ads, and you will be able to change that choice at any time under Privacy choices. Ads will never give gameplay advantages.
4. Storage on your device
The Game uses your browser’s local storage, not tracking cookies. See the Cookie and Storage Policy for the full list. Our network provider may set strictly necessary security cookies to protect the site from attacks.
5. Who we share data with
We do not sell or rent your personal data, and we do not “share” it for cross-context behavioural advertising as defined by California law. We use these service providers, who process data only on our instructions:
- Hetzner Online GmbH (Germany): server hosting. Data is stored in the European Union or, if we add servers in other regions for lower latency, in that region.
- Cloudflare, Inc. (United States): content delivery, DNS and protection against attacks. Cloudflare processes technical data such as IP addresses.
- Google Ireland Limited / Google LLC: Google Analytics, only if you allow statistics. Advertising features are switched off.
Leaderboards are public: your nickname, scores and run details can be seen by other players. We may disclose data if required by law or to protect the rights and safety of players and the Game.
6. International transfers
Where data is transferred outside the European Economic Area, the United Kingdom or Argentina, we rely on adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or the European Commission’s Standard Contractual Clauses.
7. How long we keep data
- Player ID, nickname and scores: until you delete them, or 24 months after your last game, whichever comes first.
- Gameplay statistics: up to 14 months, then only as anonymous totals.
- Error reports: 90 days.
- Server security logs: up to 30 days.
8. Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interests, and withdraw consent at any time. In the Game, open Settings → Privacy to:
- Download my data: everything linked to your player ID, as a file.
- Delete my data: removes your player ID, nickname, scores and statistics from our servers and clears the Game from your browser.
- Privacy choices: turn gameplay statistics on or off.
You can also write to [email protected]. We answer within one month. Because we do not know who you are, we may ask you to send the request from the Game so we can match it to your player ID.
European Economic Area and UK: you can complain to your local data protection authority, for example the Agencia Española de Protección de Datos (AEPD) in Spain.
Argentina: the AGENCY OF ACCESS TO PUBLIC INFORMATION, in its capacity as the Control Body of Law No. 25,326, has the power to hear complaints and claims from those whose rights are affected by non-compliance with the rules on personal data protection. You may exercise your right of access free of charge at intervals of not less than six months, unless you have a legitimate interest otherwise (Art. 14(3), Law 25,326).
California and other US states: you have the right to know, delete and correct personal information, and not to be discriminated against for using these rights. We do not sell or share personal information, and we honour Global Privacy Control signals as an opt-out of analytics.
9. Children
The Game is intended for players aged 13 and over and is not directed to children under 13. We do not knowingly collect personal data from children under 13. In some countries the age to consent to optional statistics is higher (up to 16 in the EU); younger players there should ask a parent before allowing statistics. If you believe a child has given us data, contact [email protected] and we will delete it.
10. Security
We use encrypted connections (HTTPS), store player keys only as hashes, limit access to production systems, and keep the data we hold to a minimum. No system is perfectly secure, but we will notify affected players and authorities of a breach where the law requires it.
11. Changes
We will post any changes here and update the date above. If a change is significant, for example before adding personalised ads or accounts, we will tell you in the Game.