Privacy Policy

Last Updated: June 2026

1. Data Controller

Fibonex
Austria
Postal address: to be added before public commercial launch
Email: hello@fibonex.app

2. Data We Collect

2.1 Essential Server Logs

When you visit this website or the game, our servers and hosting infrastructure may create technical logs that are necessary to operate and protect the service.

• IP address
• Date and time of the request
• Requested URL, response status, and transferred data volume
• User agent and referrer, if sent by your browser

The legal basis is our legitimate interest in secure, stable operation of the service under Art. 6(1)(f) GDPR. These logs are not used for advertising profiles.

2.2 Optional Website Analytics

If you choose "Accept Analytics" on the website, we store one minimal analytics event for the visit.

• Page URL and referrer
• Browser user agent
• Browser language
• Viewport size
• IP address as part of the request received by our server

We do not use browser fingerprinting, canvas/WebGL/audio probes, plugin scans, advertising trackers, third-party analytics scripts, or IP geolocation services. If you decline analytics, the browser sends no analytics request.

The legal basis for optional analytics is your consent under Art. 6(1)(a) GDPR and, where access to information on your device is relevant, your consent under Section 165(3) TKG 2021.

2.3 Game, Account, and Online World Data

When you use the online game features on play.fibonex.app, we process the data needed to provide those features.

• Username, email address, password hash, session tokens, and password reset records
• Online worlds, placed buildings, blueprint shortcodes, invites, moderation and audit events
• Messages and commands sent to the server for multiplayer gameplay
• Purchase, license, customer email, and activation status data if you use paid or cross-save features

The legal basis is contract performance under Art. 6(1)(b) GDPR and our legitimate interest in preventing abuse, protecting shared worlds, and operating the service under Art. 6(1)(f) GDPR.

2.4 Local Browser Storage

The browser game stores some data locally on your device, for example offline sandbox saves, blueprint libraries, language selection, login session tokens, and the website analytics consent choice. Offline saves and local blueprints stay on your device unless you actively share them.

3. Legal Basis for Processing (GDPR)

Depending on the feature, we rely on:

• Art. 6(1)(a) GDPR: optional website analytics after consent
• Art. 6(1)(b) GDPR: account, login, online world, and gameplay services requested by you
• Art. 6(1)(f) GDPR: security logs, abuse prevention, moderation, debugging, and service reliability

4. How We Use Your Data

• Providing the website, browser game, online accounts, and multiplayer worlds
• Protecting the service against abuse, spam, and attacks
• Maintaining saves, sessions, password resets, invites, and moderation tools
• Understanding basic website usage if you consent to analytics
• Responding to support and privacy requests

5. Data Retention

Website analytics and routine security logs are kept for up to 90 days unless longer retention is necessary to investigate abuse, security incidents, or legal claims. Account and online world data is kept while your account or world is active, or as long as required for backups, abuse prevention, legal obligations, or dispute resolution.

6. Your Rights (GDPR)

Under GDPR Articles 15-22, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact: hello@fibonex.app

7. Cookies, Local Storage, and Consent

We use localStorage to remember your privacy choice. This is necessary so the banner does not appear on every page view. You can change your choice through the "Privacy Settings" button in the footer or by deleting site data in your browser.

The game may use IndexedDB and localStorage for offline saves, blueprint libraries, language settings, and local session data. These are necessary or requested by you for the game experience.

8. Third-Party Services

We do not use Google Analytics, third-party advertising trackers, browser fingerprinting providers, external IP geolocation, or externally hosted web fonts on the public website or game app. The Roboto Mono font is served locally from Fibonex under the SIL Open Font License 1.1. We may use service providers for hosting, infrastructure, email delivery, payment processing, or support if those services become necessary. Those providers only receive data required for their role.

• Hosting and infrastructure providers
• Email delivery providers for account and password reset messages, once configured
• Payment and licensing providers, such as Lemon Squeezy, if you buy or activate a paid license
• Authorities or legal advisers where required by law or necessary for legal claims

9. International Data Transfers

If a provider processes personal data outside the EU/EEA, we use appropriate safeguards such as EU adequacy decisions or Standard Contractual Clauses where required.

10. Security

We implement industry-standard security measures including encryption, secure connections (HTTPS), and access controls.

11. Updates to This Policy

We may update this policy periodically. Material changes will be notified via email or website notice.

12. Supervisory Authority

You have the right to lodge a complaint with a data protection authority. In Austria, the competent authority is the Austrian Data Protection Authority (Datenschutzbehoerde), Barichgasse 40-42, 1030 Vienna, Austria, https://www.dsb.gv.at/.

13. Contact Us

For privacy inquiries:
Email: hello@fibonex.app

14. Health and Safety Warning

Some individuals may experience adverse physical effects when playing video games, including but not limited to dizziness, nausea, eye strain, headaches, fatigue, motion sickness, or seizures triggered by visual stimuli such as flashing lights or patterns.

If you or any player experiences symptoms such as dizziness, altered vision, eye or muscle twitching, loss of awareness, disorientation, involuntary movements, or convulsions, stop playing immediately and consult a qualified medical professional before resuming play.

To reduce the risk of discomfort or injury:

• Play in a well-lit environment
• Sit at a reasonable distance from the screen
• Take regular breaks
• Avoid playing when tired, stressed, or unwell

Parents or guardians should supervise children and ensure appropriate breaks are taken.

This software is provided for entertainment and educational purposes only and is not a medical device. The developer makes no medical claims regarding the safety or health effects of gameplay.