Who is responsible
NoChill.Games is operated by Yannick Freij, who is responsible for the processing described here. For privacy questions or requests, email contact@nochill.games.
Playing and using an account
You can play supported solo games without creating an account. Games may save progress, sound settings, controls and other preferences on your device. An account lets us store your player name, email address, profile settings, game progress, achievements, inventory, wallet and records needed to keep these features working across visits.
Our authentication provider, Supabase, handles sign-in, verification and password recovery. When a Google or Apple sign-in option is available and you choose it, we receive the account information that provider shares for authentication. We do not receive your Google or Apple password.
Friend requests, multiplayer rooms, messages and uploaded images are processed when you use those features. Your player name, avatar and the information you choose to share may be visible to other players. Messages can be reviewed to investigate reports or abuse. Avoid sharing private information in messages or images.
Essential storage and security
We use necessary cookies and device storage to maintain secure sign-in, complete authentication, remember privacy choices and save gameplay or settings you request. These functions keep working when you decline optional analytics.
The servers delivering the site receive technical connection information such as your IP address, requested address and browser headers. Hosting and security providers may process this information to deliver pages, prevent abuse and diagnose failures. Necessary rate limits can use short-lived security identifiers. These are not used as visitor profiles in our basic traffic report.
Basic traffic counts
We count requests for public pages on our own server to understand how much the site is used. These counters store a date, a public page or page category and a total. They do not store IP addresses, visitor or account IDs, browser details, referring addresses or query strings. They do not place analytics cookies, read device storage or connect visits across time. Game-guide requests are grouped into one category.
These totals are page requests, not a count of individual people. Reloads can increase the total; known automated requests and prefetches are excluded where recognised. The counts remain active when the cookie popup is hidden or optional analytics is declined. They are not sent to Google Analytics.
Optional analytics and your choices
If you allow analytics through our cookie popup or Privacy settings in the footer, we measure visits, active playtime, game starts and outcomes, and technical problems. Random browser and session identifiers help us recognise return visits. For signed-in players, a pseudonymous account reference may connect activity to account use. We do not add names, email addresses, messages, uploaded images, invite codes or raw error text to these event records.
When connected and enabled, Google Analytics 4 receives selected page and game events after you allow analytics. Google can process connection information, including your IP address, as part of receiving those requests. Advertising storage, Google signals and advertising personalisation are disabled in our integration. Read how Google uses information from sites that use its services.
You can allow or decline optional analytics and change your choice using Privacy settings in the footer. Declining does not restrict gameplay. Hiding the popup does not grant permission. If you withdraw permission, new optional analytics stops and we attempt to remove our analytics identifiers and Google Analytics cookies from this browser. This does not erase data already collected; you can contact us about deletion.
Google reporting connection for the administrator
The site administrator can separately authorise read-only access to the site's Google Analytics and Search Console properties. We use this access to show traffic, game-event and search-performance reports in the private administration dashboard. This authorisation is not requested from players.
We store the chosen property identifiers, cached reports and encrypted OAuth credentials and refresh tokens on the server. Access to these reports and exports is restricted to authorised administration. This Google data is used to operate and improve NoChill.Games; it is not sold, used for advertising profiles, or used to train general-purpose AI models.
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. The administrator can revoke the connection in their Google Account's third-party connection settings. Revoking access stops future access but does not automatically erase cached reports; contact us to request deletion of the stored connection data and reports.
Why we process information
We process account, game and communication information to provide the features you request. We rely on consent for optional analytics and on our legitimate interests in delivering, securing and improving the service for necessary operational processing, taking account of your rights. We retain records when required by law, for example for a completed payment or a legal claim. Basic traffic counters contain aggregate totals rather than visitor records.
Service providers and payments
Our service providers include OpenAI Sites and its hosting infrastructure, including Cloudflare, for website hosting and storage; Supabase for account authentication; and Google when analytics or the administrator reporting connection is used. These providers process information needed to deliver their services. If a paid feature is available, the payment provider shown at checkout processes payment details. NoChill stores the order status and transaction references needed to deliver purchases and handle refunds; we do not store full payment-card details.
Providers may process information outside the European Economic Area. Where required, transfers must use an applicable adequacy decision or contractual safeguards, such as the European Commission's standard contractual clauses. Contact us for information about safeguards relevant to your data. We may also disclose information where necessary to comply with a legal obligation, protect users or address a legal claim.
How long information is kept
- Your analytics choice is remembered for up to 180 days. Our optional random browser identifier is renewed for up to 180 days; a visit becomes a new session after 30 minutes of inactivity.
- Detailed analytics events are scheduled for deletion after 90 days. Fine-grained playtime events are scheduled for deletion after one day, with totals retained. Pseudonymous visit, level and retention records are scheduled for deletion after approximately 26 months. Cleanup runs in batches, so deletion may not be immediate.
- Aggregate daily totals and cached search reports are retained for historical comparisons. Private exports remain until deleted by the administrator.
- Account, progress and communication records are kept for as long as needed to provide the features, address reports and meet legal obligations. You can request deletion by email. Some transaction, security or dispute records may need to be retained after an account is closed.
Your rights
Depending on the processing and applicable law, you may ask to access, correct, delete or receive a copy of your personal data, restrict its use, or object to processing based on legitimate interests. You can withdraw optional analytics consent at any time. Email contact@nochill.games; we may need to verify your identity before acting. We normally respond within one month and will explain if a lawful extension is needed.
You can complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens or the Belgian Data Protection Authority.
Younger players
Children deserve extra care online. Where the law requires a parent or guardian to authorise an account, a purchase or consent-based processing, that permission is needed. We do not request optional analytics as a condition of playing. A parent or guardian can contact us about a child's data or an account created without the permission required by local law.
Changes to this policy
We will update this page when our features or data practices change. The date at the top shows the latest update. If a change requires new consent, an earlier choice will not be treated as permission for the new purpose.