1. Controller and scope
The data controller is Garbæk IT, CVR 21664480, Thybovej 13, 8620 Kjellerup, Denmark. Privacy contact: support@garbaek.it.
This policy covers locallifegame.com, the browser game, Windows app, Android game, Local Life: Move, account services, and associated support.
2. Data we process
Account and security data
Email address, internal user ID, password hash managed by the authentication service, confirmation and recovery records, session metadata, timestamps, security events, and technical logs such as IP address and user agent.
Game and save data
Characters, chosen names and appearance, approximate starting area, game progress, simulated finances, jobs, education, relationships, homes, vehicles, preferences, achievements, save history, support suggestions, and other state needed to provide the simulation and cloud saves.
Local Life: Move data
When you grant Android location permission and start an activity, Move processes route coordinates, timestamps, distance, duration, movement type, activity status, and related diagnostics. Route geometry and precise coordinates are private. If you explicitly enable public display, only the selected in-game display name and aggregate distance appear in the public leaderboard.
Optional Bluesky connection
If you connect Bluesky, we process the account identifiers and protected credentials needed to make posts you request. Only the summary shown before posting is sent; GPS trails and coordinates are not included.
Website and consented analytics
Basic server logs are used for delivery and security. If you allow analytics, we process page URL, referrer, campaign parameters, language, screen size, time zone, random session and visitor identifiers, browser/OS/device type, clicks, downloads, scroll depth, form lifecycle events without field values, and limited JavaScript error details. See the Cookie Policy.
3. Why we process data
- To create and secure accounts, authenticate users, save progress, provide game and Move features, and respond to support requests: performance of the user agreement.
- To prevent abuse, diagnose failures, protect infrastructure, maintain aggregate statistics, and improve reliability: our legitimate interests in operating and securing the Services.
- To use optional website analytics: your consent, which you may withdraw at any time.
- To send product newsletters: only separate marketing consent. Account creation is not marketing consent.
- To comply with legal obligations and valid authority requests where applicable.
4. Public and aggregate information
The website displays aggregate world statistics. These are designed not to expose account IDs, email addresses, saves, GPS geometry, or individual balances. Move leaderboard names are shown only after the player explicitly opts in; aggregate distances may still contribute to totals.
5. Recipients and service providers
Data is processed on infrastructure used by Garbæk IT for hosting, authentication, databases, email delivery, routing, backups, and security. Consented website analytics is sent to the configured service at abstracts.top. Data is sent to Bluesky only when you connect it and request a post. We disclose data when legally required or necessary to establish, exercise, or defend legal claims.
We do not sell personal data or use game saves or location trails for targeted advertising.
6. Storage and retention
Account and cloud-save data is generally retained while the account and alpha service remain active. Move activities remain until deleted, the account is deleted, or an alpha reset occurs. Security and operational logs are kept only as long as reasonably needed for security and troubleshooting. Backup copies rotate out through the operational backup cycle.
Alpha data may be reset or deleted as described in the Terms. A deletion request removes or anonymises active personal data unless retention is required by law, security needs, or the resolution of a dispute. Some information may remain temporarily in restricted backups until rotation.
7. Security
We use access controls, encrypted transport, hashed passwords, restricted service credentials, and separation between public statistics and private records. No system is perfectly secure, especially during alpha development. Use a unique password and protect recovery emails and devices.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent without affecting earlier lawful processing; and complain to a supervisory authority. In Denmark, the authority is Datatilsynet.
Use “Cookie settings” in the footer to change website analytics consent. Android permissions can be changed in system settings. Public Move naming and Bluesky sharing are controlled in their respective app features.
To exercise a data right, email support@garbaek.it. We may need to verify that you control the relevant account.
9. Children
Local Life is not directed to children under 13. If we learn that an under-13 child supplied personal data without valid authorisation, contact us so we can investigate and delete it where required.
10. Changes
We may update this policy when the Services or legal requirements change. Material changes will be highlighted on the website, in the Services, or by account email where appropriate.