1. Controller
Owner: Oshura Domo (AtroPELLO Games), C./ Aragó 15 casa - 08401 Granollers (Spain).
For any privacy question or to exercise your rights: privacidad@atropello-games.es.
There is no data protection officer: given the size and nature of the processing, one is not required.
2. Your account and the data we process
Your atroPELLO Games account is a single account for the landing and all our games. To create it we ask for your email address, a nickname and a password; Amazon Cognito sends you the verification and recovery emails. You choose the nickname and other players will see it if you vote for a game or join a leaderboard: don't use your real name if you don't want it shown. You must be 14 or older to create an account.
You can also sign in with your Google account. In that case there is no atroPELLO Games password: Google identifies you on its own page and gives us your email address and your first name, which becomes your nickname and other players will see if you vote or join a leaderboard. If you don't want your name shown, create your account with an email and password. A Google account and an email-and-password account are separate accounts, even if they use the same email address.
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| AWS Cognito | ID Token, Access Token, username, email, alias |
Authenticate users and enable saves/sessions | Performance of a contract (Art. 6(1)(b) GDPR) |
| Sign in with Google (optional) | Your email address, if Google has verified it, your first name (which becomes your nickname) and your Google account identifier. They are updated every time you sign in with Google. With its basic permission, Google also shares your full name and profile picture: we don't store them. Google never gives us your password | Create your account and sign in without an atroPELLO Games password | Performance of a contract (6(1)(b)), when you choose "Continue with Google" |
atropello-session cookie |
Signed copy of the ID Token + alias | Share the session across AtroPELLO domains | Performance of a contract (6(1)(b)) |
atropello-refresh cookie |
Signed Refresh Token + user identifier | Renew the session during long play sessions | Performance of a contract (6(1)(b)) |
session.cookie.hmac.v1 |
Local HMAC key | Sign/verify the shared cookie | Legitimate interest (6(1)(f)) in keeping the session secure |
auth.return.state |
Allowed return URL + state token |
Complete secure redirects | Legitimate interest (6(1)(f)) in keeping the session secure |
game.logging.v1 |
Debugging preferences you turn on yourself | Remember them in your browser; they are never sent to any server | Performance of a contract (6(1)(b)): it is an option you ask for |
| Saved games (cloud saves API) | Identity + tokens while calling the API; each game's saves, linked to your account | Store and sync your saves across devices | Performance of a contract (6(1)(b)) |
| Piscis · signing in to the app | Email and password, only to sign in (the password never leaves the phone in clear text: SRP protocol); session tokens; the last email used. With "keep me signed in", the refresh token is stored encrypted on the phone (Android Keystore) for up to 30 days from its last use | Let you into the game without asking for your password every time | Performance of a contract (6(1)(b)) |
| Piscis · cloud saves | Your wallet (shells, pearls, level, purchases, achievements, Pecedex) and your tanks (fish with their species, colour and the name you give them, decoration, equipment, water); the names of your tanks; a random identifier of the installation so that another phone of yours doesn't overwrite your game; the date of each save | Save your game and continue it on another phone or on the web | Performance of a contract (6(1)(b)) |
| Piscis · profile | Nickname, shells, sign-up and last-access dates, number of sessions and app version | Keep your profile across devices and know whether your version is still compatible | Performance of a contract (6(1)(b)) |
| Piscis · monthly leaderboard (optional) | Nickname, points, level, rank and a snapshot of your tank (fish, rocks and plants, without the fish names); privately, your account identifier, the date and version of your consent and each day's score. The game computes your score for each day and sends that score and a snapshot of your tank; we do not read your saved game | Show a public leaderboard and let others see your tank | Your consent (6(1)(a)), given with JOIN (ENTRAR) and withdrawn with LEAVE (SALIR) |
| Piscis · APK downloaded from our website (not the Google Play version) |
When it opens, and at most every 6 hours, it checks piscis.atropello-games.es/android/version.json and, if
there is a new version, downloads the APK from there. The server logs the IP address and the requested version, like any
website
|
Tell you about new versions and install them | Performance of a contract (6(1)(b)) |
| Votes and reviews (each game's page) | Rating from 0 to 5, optional comment (up to 255 characters), your nickname and the date. They are published on the game's page; never your email | Show each game's average rating and reviews | Your consent (6(1)(a)) when voting (the form warns that they are published) |
| Technical logs (API and web) | IP address, time, requested path and result, in the AWS logs | Security, abuse and error detection | Legitimate interest (6(1)(f)) in keeping the service secure |
We do not collect personal analytics nor install third-party trackers. Game metrics are shared only with each studio.
What other players see
If you join the Piscis leaderboard, anyone, even without an account and from the web, can see your nickname, points, level and rank, and open your tank in read-only mode: a copy of the scene (fish, rocks and plants). The game computes your score for each day and sends that score and a snapshot of your tank; we do not read your saved game. Your fish names, your email, your account identifier and the rest of your game are not shown. If you leave the leaderboard, your row and your tank disappear immediately; if you were in the HALL OF FAME (SALÓN DE LA FAMA) for any month, your nickname becomes "ANÓNIMO".
If you vote for a game, your nickname, rating, comment and the date are shown on that game's page.
If you see an offensive nickname, write to us at info@atropello-games.es.
What stays on your phone
The app stores on your phone your settings (sound, graphics quality, lighting, last tank opened), a local copy of your wallet and your tanks so you can play offline, the last leaderboard you saw and, if you ticked "keep me signed in", your encrypted refresh token. None of this is sent to anyone or included in Android backups. It is deleted when you uninstall the app, when you sign out (the tokens) or when you delete your account.
3. Cookies & storage
atropello-session: 1-hour lifetime, domain.atropello-games.es,SameSite=None,Secure.atropello-refresh: 7-day lifetime, domain.atropello-games.es,SameSite=None,Secure; renews the session during long play sessions without signing in again.session.cookie.hmac.v1: derived key stored in localStorage.game.auth.session,auth.return.state: sessionStorage entries to avoid re-login after refresh.game.logging.v1: optional debugging preferences.
No third-party cookies, behavioral ads, or commercial profiling are used.
The Piscis app does not use cookies: the game is loaded from the APK itself and only uses the local storage
described above. The website piscis.atropello-games.es uses the same technical cookies as the landing
(atropello-session, atropello-refresh) so that you don't have to sign in again.
4. Legal bases
- Performance of a contract (Art. 6(1)(b) GDPR): creating and using your account, saving and syncing your games and your profile, telling you about new versions and remembering in your browser the preferences you turn on. Without this data the service does not work.
- Consent (6(1)(a)): joining the leaderboard and voting for or reviewing a game. You can withdraw it whenever you want (LEAVE the leaderboard; for votes, write to us) without affecting the rest of the game.
- Legitimate interest (6(1)(f)): keeping the session secure, keeping technical logs for 30 days to detect abuse and errors, and moderating nicknames and leaderboard content. Our interest is to offer a secure service; the impact on you is minimal because we only process what is strictly necessary.
- Legal obligation (6(1)(c)): handling your rights and requests from the authorities.
We do not make automated decisions with legal effects on you nor build profiles. Leaderboard points are computed by the game itself with its public table; we only add up your best days.
5. Retention
| Data | How long |
|---|---|
| Your account (email and nickname and, if you sign in with Google, your Google account identifier) | Until you delete it. If we ever delete unused accounts, it will be after 2 years without signing in, and we will email you beforehand |
| Session tokens | 1 hour; the web refresh token, 7 days, and the app's, 30 days from its last use; all of them are revoked when you sign out |
| Saved games, profile and local copies | Until you delete them or delete your account. The storage keeps no old versions: whatever is deleted disappears immediately |
| Leaderboard | The current and previous month's tables; the hall of fame, for as long as the game exists ("ANÓNIMO" if you leave or delete your account); your private record, 13 months without use or earlier if you ask |
| Votes and reviews | While the game stays on the board or until you ask for their erasure |
| Technical logs | 30 days |
| Requests you send us | 3 years, to prove that we handled them |
You may clear your browser's localStorage and sessionStorage anytime.
6. Processors and international transfers
We do not sell your data or disclose it to anyone. It is processed on our behalf, as processors, by
Amazon Web Services (Cognito for accounts; API Gateway and Lambda for the API; S3 for saves, votes and
leaderboards; CloudFront for the website; SES for the account emails and to receive the ones you send to
info@ and privacidad@, which it keeps for 30 days and forwards to the owner's mailbox), in the us-east-1 region (Virginia, USA). AWS is certified under the
EU-U.S. Data Privacy Framework, as part of the Amazon.com, Inc. certification (European Commission adequacy
decision of 10 July 2023), and its service terms include the Standard Contractual Clauses adopted by the European
Commission in June 2021.
If you install Piscis from Google Play, Google processes your installation data under its own policy; we do not receive any data about you from Google.
If you choose to sign in with Google, Google processes your Google account as an independent controller, under its own privacy policy, and knows that you use it to sign in to atroPELLO Games. We only receive what is described in section 2.
Each studio whose game we publish receives only aggregated metrics (downloads, active sessions, created slots), which never include emails or personal identifiers.
This relationship is governed by Spanish law and the courts of Barcelona.
7. Your rights
You can ask us for access to your data, to rectify it, erase it, restrict its processing, object, withdraw your consent and get a portable copy of your saved games. Write to privacidad@atropello-games.es from your account's email address (or tell us your nickname and approximate sign-up date) so we can check it's you. We answer within one month at most, free of charge. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
8. Delete your account and your data
- From the Piscis app: MENU › DELETE ACCOUNT (MENÚ › ELIMINAR CUENTA) brings you here.
- How to request it: write to privacidad@atropello-games.es from your account's email address, with the subject "Eliminar cuenta Piscis" (Delete Piscis account). You don't need the app. We will do it within one month at most and confirm it by email.
- What is deleted: your saved games, your profile, your leaderboard record and your votes and reviews, and then your atroPELLO Games account. Bear in mind that the account is the same for the landing and all our games: deleting it also deletes your saves in the other games. What is stored on your phone is deleted when you uninstall the app.
- If you signed in with Google: deleting your atroPELLO Games account doesn't affect your Google account. If you wish, also remove atroPELLO Games' access from your Google account (Security › Third-party connections).
- Delete only Piscis: if you want to keep your account, ask us to delete only your Piscis data (saved games, profile and leaderboard record) with the subject "Borrar mis datos de Piscis" (Delete my Piscis data).
- What remains afterwards: your nickname in the hall of fame becomes "ANÓNIMO"; technical logs are deleted after 30 days; your request is kept for 3 years to prove that we handled it.
9. Children
Piscis and the atroPELLO Games account are not directed at children under 14, the age from which, in Spain, people can consent to the processing of their own data (Art. 7 LOPDGDD). We do not ask for your date of birth or knowingly collect data from children under 14. If you are a parent or guardian and believe a child has created an account, write to us at privacidad@atropello-games.es and we will delete it.
10. Security
All communication is encrypted (HTTPS/TLS). The password never travels in clear text (in the app, thanks to the SRP protocol) and we don't store it: Cognito does, hashed. If you sign in with Google, there is no atroPELLO Games password: Google identifies you on its own page. On the phone, the refresh token is stored encrypted with the Android Keystore and the app is excluded from Android backups. Each account can only read and write its own saved games; the public leaderboard never exposes your email or your account identifier. When you sign out we revoke your tokens.
11. Changes
We will publish any change here with its date. If it affects how we process your data in Piscis, we will also let you know in the app or on its Google Play listing before it takes effect.