1. Who we are
Ganduja Interactive OÜ is an independent game studio established in Estonia. For the processing described in this policy, Ganduja Interactive OÜ is the data controller. You can contact us at info@gandujagames.com.
2. Scope
This policy applies to gandujagames.com, Pillow Punk and communications sent to our support channels. Third-party storefronts and platforms process data under their own privacy notices.
3. Data we may process
- Support and correspondence: your email address, name, message, attachments and any technical details you choose to provide.
- Website security data: limited server logs such as IP address, browser type, timestamps and requested pages, where generated by our hosting provider for security and reliability.
- Game diagnostics: crash or troubleshooting information only when you choose to send it to us or when a clearly disclosed game feature provides it.
We do not receive or store your payment-card details. Purchases, refunds and payment processing are handled by the storefront through which you obtained the game. Pillow Punk does not require a separate Ganduja account.
4. Why we use data
We process personal data only when needed to:
- answer support requests and provide the services you request;
- diagnose bugs, protect our services and prevent abuse;
- maintain our website and improve product reliability; and
- comply with legal obligations and protect legal rights.
Our legal bases under the GDPR may include performance of a contract, legitimate interests, compliance with law and consent where consent is the appropriate basis.
5. Sharing and international transfers
We may share limited data with service providers that host our website, deliver email or help us operate and secure our products. We may also disclose information when required by law or to establish, exercise or defend legal claims. Where data is transferred outside the European Economic Area, we use an available lawful transfer mechanism and appropriate safeguards.
6. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including support, security, accounting and legal requirements. We then delete or anonymize it where reasonably possible.
7. Cookies and analytics
Our public website does not currently use advertising cookies or behavioral advertising trackers. Essential technologies may be used to deliver and secure the website. If we introduce optional analytics or similar technologies, we will update this notice and request consent where required.
8. Children
We do not knowingly collect personal data directly from children through a Ganduja account system. A parent or guardian should contact us if they believe a child has provided personal data to us so that we can review and, where appropriate, delete it.
9. Your rights
Depending on applicable law, you may have the right to access, correct, delete or restrict your personal data, object to processing, receive a portable copy and withdraw consent. You may also complain to your local data-protection authority, including the Estonian Data Protection Inspectorate where applicable.
10. Contact and changes
To exercise your rights or ask a privacy question, email info@gandujagames.com. We may update this policy as our products or legal obligations change. The date at the top identifies the latest version.