Privacy Policy
As of 4 October 2026 · Wrecklanders: Idle Island (test phase) · The German version is legally binding: Datenschutzerklärung
Wrecklanders: Idle Island is a free browser game in a non-commercial test phase. There are no ads, no third-party trackers and no sign-up with name or e-mail. This page explains which data is still processed, where it is stored and how you can delete it.
1. Controller
Simon Streblow
Quintenzstraße 1
77723 Gengenbach
Germany
E-mail: simonstreblow@googlemail.com
2. What we store
| Data | Where | Purpose / legal basis | How long |
|---|---|---|---|
| Game progress, settings (sound, statistics yes/no, language), a friend's invite code | Your browser's local storage | So the game works (§ 25(2) TDDDG, Art. 6(1)(b) GDPR) | Until you delete it |
| Anonymous player account (random ID, no name, no e-mail), cloud save, island name, invite code, friendships, help between friends | Supabase (data centre in Frankfurt am Main, Germany) | Saving progress, playing on several devices, friend features (Art. 6(1)(b) GDPR) | Until you choose “Delete all my data” |
| Your browser's push address, scheduled reminders | Supabase; delivered via your browser's push service (e.g. Apple, Google, Mozilla) | Only if you allow notifications (Art. 6(1)(a) GDPR) | Until you turn them off in the browser or delete everything; sent reminders after 2 days |
| Game statistics: session length, era reached, features used, rescues, sharing, friends joined | Supabase | Only with your consent, to improve the game (Art. 6(1)(a) GDPR). You can switch it off any time under ⚙️ Settings | 13 months |
| Source channel: once, the name of the link you first came from (e.g. “whatsapp-status”, “reddit”, “invite”). No tracking, nothing on your device, only this one name on your anonymous account | Supabase | Counting which channels bring players, so we know where it is worth presenting the game (Art. 6(1)(f) GDPR, legitimate interest) | Until you choose “Delete all my data” |
| Feedback you send from inside the game (text, mood, era reached, phone or computer) | Supabase | Improving the game, because you send it to us (Art. 6(1)(a) GDPR) | Until you choose “Delete all my data”, at most 13 months |
| Error reports (error message, code location, page, phone or computer, game version). No account and no IP address | Supabase | Finding and fixing bugs (Art. 6(1)(f) GDPR) | 90 days |
3. Hosting
The website is delivered by Vercel Inc. (USA). When you open it, Vercel processes technically necessary connection data such as your IP address to deliver the page (Art. 6(1)(f) GDPR). Vercel is certified under the EU-US Data Privacy Framework. The database and server functions run at Supabase Inc. in the Frankfurt am Main data centre (AWS eu-central-1), i.e. inside the EU.
Visitor counts and load times (Vercel Web Analytics, Speed Insights): We count page views and measure how fast the page loads. No cookies are set and nothing is stored on your device. Visitors are only told apart by an anonymous daily hash that is discarded after 24 hours; there is no tracking across other websites. Recorded are the page, referring page, country, browser and device type, and load times. The legal basis is our legitimate interest in a working, fast website (Art. 6(1)(f) GDPR).
Fonts and images are loaded from our own server, not from Google or other third parties.
4. Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection, and you can withdraw any consent at any time. The fastest way is inside the game under “Collect → Settings & data”: switch off statistics or choose “Delete all my data”. This deletes your account and all related data on the server, as well as the save on this device. You can also complain to a data protection supervisory authority.
5. Children
The game is meant for players aged 12 and up. Game statistics can only be switched on with consent. Players under 16: please only with your parents' permission.
6. Processors
Supabase and Vercel process data on our behalf, based on their standard data processing agreements under Art. 28 GDPR.
7. Changes
If new features are added (for example ads), we will update this policy beforehand and ask for your consent where required.