← Back to the game

Privacy Notice

Last updated: 11 September 2026

This notice explains how Jakob Tunebro handles personal data in connection with The Stereotype: State Line. Jakob Tunebro is the data controller for the personal data described here and decides why and how it is processed.

What we collect and why

  • Account data (email address, sign-in identifier, authentication tokens) — to create your account, sign you in and link your purchases to you. Legal basis: performance of our contract with you.
  • Entitlement data (which unlocks you own, purchase and refund events, device identifier for device-based unlocks) — to give you access to the content you paid for. Legal basis: performance of our contract.
  • Support messages you send us — to answer your question. Legal basis: legitimate interests in supporting our customers.
  • Technical data (IP address, browser and device information, error logs) — for security, fraud prevention and fixing faults. Legal basis: legitimate interests in keeping the service secure and working.

Game progress (players, scores, board position) is stored locally in your browser and is not sent to us unless you explicitly save it to your account. Payment card details are collected and processed by Paddle, not by us.

Who we share data with

  • Paddle, our Merchant of Record, for the sale of the product, payment processing, invoicing, tax compliance and refunds.
  • Service providers and subprocessors — hosting, database, authentication and error-monitoring providers acting on our instructions.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where we are required to disclose by law.

We do not sell your personal data.

International transfers

Some providers process data outside the UK/EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

Retention

We keep account and entitlement data for as long as your account exists and for up to seven years after your last purchase where tax and accounting law requires it. Support messages are kept for up to two years, and technical logs for up to twelve months. After that, data is deleted or anonymised.

Your rights

Under the GDPR and equivalent laws you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. We respond within one month. You can also complain to your local supervisory authority — in Sweden, the Integritetsskyddsmyndigheten (IMY).

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database security, to protect your data.

Cookies and local storage

We use essential browser local storage to keep you signed in, to remember your sound, currency and entitlement state, and to save your game in progress. You can clear this data at any time in your browser settings, though doing so will sign you out and remove locally saved games.

Advertising in the free game

The free version of the game is funded by advertising served by Google AdSense. The Full Game unlock removes all advertising, and no ad code is loaded at all for Full Game owners.

  • What Google may use — cookies, similar local identifiers and device or browser information (including your approximate location from your IP address) to select and measure ads and to limit how often you see the same ad.
  • Your choice — we ask before any advertising code is loaded, using Google Consent Mode v2 with all advertising signals set to “denied” by default. If you allow it, ads may be personalised. If you decline, you will still see ads, but only non-personalised ones requested with personalisation switched off.
  • Changing your mind — use the “Ad choices” link in the footer of any page to withdraw or change your consent at any time. Consent is stored in your browser, so it is per device.
  • Legal basis — consent for advertising cookies and personalisation (GDPR/UK GDPR and the ePrivacy rules); for residents of California and other US states, declining also acts as an opt-out of the sharing of personal information for cross-context behavioural advertising. We do not sell personal data.

You can review and adjust Google’s own settings, or opt out of personalised advertising entirely, at myadcenter.google.com, adssettings.google.com and youronlinechoices.eu. Google’s own handling of this data is described in the Google privacy & terms notice for partner sites.

Contact

For privacy questions or to exercise your rights, contact Jakob Tunebro. Billing-related data held by Paddle can be addressed through paddle.net.