1. Data controller and contact details

The website provider is the data controller for personal data processed on this site. The provider’s name and postal address are listed in the Imprint. For privacy questions or requests, email [email protected].

2. Data we process

When you use the site, it may process technical request data, page-visit data after you consent to analytics, local game settings, and information that you choose to send by email.

The site has no registration or user accounts. The game does not ask for your name, date of birth, payment details or other profile information.

3. Local game saves

The site uses browser localStorage to save progress. It may contain your language, music and sound settings, optional-cookie choice, current game, move history, results and tutorial status.

This data remains on your device. It is not sent to the game server or synced between browsers or devices. Clearing the site data permanently removes the saved progress.

4. Cookies

Game settings and progress are stored in localStorage. Optional cookies are used only for analytics. Google Analytics may set _ga to distinguish visitors and _ga_<ID> to keep session state. The standard expiry for each is two years; browser limits may shorten it.

Analytics cookies are set only after you consent. Every page and game feature continues to work if you decline. You can change your choice through the Privacy settings link in the site footer or delete cookies in your browser settings.

5. Google Analytics

The site uses Google Analytics. It loads only after you consent to optional cookies. No analytics requests are sent before consent.

Google Analytics may receive the random identifier from the _ga cookie, browser, operating system, device and screen details, approximate location, pages viewed, session information and standard interaction events when enabled in the service settings.

We do not add your name or email address as Analytics identifiers, or send support messages, saved layouts or move history to Analytics. Standard page-view data may include the page URL, so do not put personal information in a URL. Google uses the IP address when receiving a request to derive approximate location and protect the service. According to the Google Analytics 4 documentation, the service does not log or store the full IP address.

The Google products and services data-sharing setting is disabled in our GA4 account. Google provides the analytics service under its data processing terms. Learn more: Google Privacy Policy

6. Hosting logs

When the site loads, its server in the EU processes data needed to deliver pages and files. This may include the IP address, request date and time, page address, browser information, server response code and error records.

The site’s access and error logs are stored on that server. We use them to operate the site, find technical problems, prevent abuse and maintain security. The hosting provider does not retain separate copies of these logs.

7. Email enquiries

If you write to [email protected], we process the sender address, message contents, attachments and technical email metadata. The mailbox is hosted on the same EU server as the website. We use your message to reply, investigate a bug, consider a suggestion or handle a personal-data request.

Sending an email is voluntary, but we need a reply address to respond. Do not send passwords, payment details or other confidential information that is not needed to handle your enquiry.

8. Purposes and legal bases

We process technical request data to deliver and secure the site, and ordinary email enquiries to answer your request, based on our legitimate interests (Article 6(1)(f) GDPR). We process information needed to handle privacy requests or other legal duties under Article 6(1)(c) GDPR.

Google Analytics is used only with your consent (Article 6(1)(a) GDPR), which you may withdraw at any time. Analytics cookies also require consent under Section 25(1) TDDDG. Browser storage for your game and privacy choice provides features you request under Section 25(2) TDDDG.

9. Data sharing

We do not sell personal data. The EU hosting provider may process technical data needed to deliver the website and host the mailbox. Google processes analytics data when you consent. Data may also be disclosed to public authorities when required by law.

The website and mailbox are hosted in the EU. Google may process analytics data outside the European Economic Area under the data transfer terms that apply to Google Analytics. Third-party sites linked from Jade Garden operate under their own privacy policies.

10. Retention periods

Game progress, settings and your analytics choice remain in the browser until you delete them or your browser removes site data. Our GA4 property retains user-level and event-level data for two months; aggregated reports may remain available longer.

Email enquiries are deleted within 12 months after the last exchange, unless a legal duty or a specific dispute requires longer retention. Site access and error logs rotate daily; up to ten rotated log files are retained on our server.

11. Your rights

Depending on applicable law, you may request information about your data, ask for correction or deletion, restrict or object to processing, request portability, or withdraw consent to analytics. To exercise these rights, email [email protected].

If we have reasonable doubts about the identity of the person making a request, we may ask for information needed to confirm it. You may lodge a complaint with a data protection supervisory authority, particularly in the EU country where you live, work or believe a violation occurred.

12. Children

The site is not designed to collect children’s personal data. The game has no accounts, communication between players or purchases. A parent or legal guardian may email [email protected] to request deletion of information that a child sent by email.

13. Data security

Technical and organisational measures appropriate to the nature of the data and possible risks are used to protect the site and processed information. No method of storing or transmitting information online can guarantee absolute security.

14. Changes to this policy

Last updated: 22 September 2026. This policy may change when site features, external services or legal requirements change. The current version is published on this page.

If a new type of processing requires consent, the site will ask for it separately. Using the site does not amount to consent to optional analytics.