Privacy Policy

Effective as of: November 2, 2026

This policy describes what personal data we process on the smokingcat.cz website, including the online game and the referee app, why we do so, how long we retain the data, and what rights you have.

Who Processes Your Data

The controller of personal data and the website operator is:
Vronsky Film s.r.o.
ID No.: 26456851
Registered office: Vlastina 34/888, 161 00 Prague 6
Registered in the Commercial Register maintained by the Municipal Court in Prague, file number C 83497/MSPH
Email: union@smokingcat.cz
Phone: +420 603 52 31 34

We have not appointed a Data Protection Officer because we are not required to do so by law.

Summary

  • We do not use advertising or tracking cookies on our website. We only use cookies that are necessary for the website to function.
  • We measure website traffic using a tool that does not use cookies and does not store IP addresses.
  • The online game does not require registration. A username is optional and does not have to be your real name.
  • We delete the server’s technical logs containing IP addresses after 60 days.

What Data Do We Process and Why

Server Logs

Each time you visit the website, the server records:

  • IP address,
  • the date and time of the request,
  • the URL of the page visited (including the game identifier for online games),
  • the URL of the page you came from,
  • browser and operating system information,
  • the outcome of the request and the time it took to process it.

The server also logs its errors, including the IP address and the URL.

  • Purpose: To ensure the website’s operation and security, and to resolve errors and outages.
  • Legal basis: the controller’s legitimate interest in maintaining a secure and functional website (Article 6(1)(f) of the GDPR).
  • Retention period: 60 days; after that, the records are automatically deleted.

Online Game

The game does not require registration. Before you start playing, you can choose a name, an avatar, and a flag. All three are optional, and your name does not have to be your real name.

  • Where are they stored: in your browser, so the game can offer them again next time, and on our server for your in-progress game, so you can return to it.
  • Purpose: To provide you with the game you requested.
  • Legal basis: performance of a contract, i.e., the provision of a service at your request (Article 6(1)(b) of the GDPR).
  • Retention period: 7 days on the server from the last move in an ongoing game. In your browser, until you delete the data.

Game Statistics

We store the progress and results of completed games: cards dealt and played, the results of individual hands, the game word, the selected difficulty level, and the game duration. The statistics do not include the player’s name, avatar, or flag, nor do they include any browser or device identifiers.

  • Purpose: To balance the difficulty of computer opponents and improve their performance.
  • Legal basis: the controller’s legitimate interest in ensuring a high-quality game (Article 6(1)(f) of the GDPR).
  • Retention period: for the duration of the game’s operation.

Each game has its own identifier, which appears in the web page’s URL. This identifier is not stored in the statistics. However, the server logs record the time the game started, and based on that, the game can be linked to an IP address for 60 days, which is how long the logs are retained. After this period expires, the statistics can no longer be assigned to a specific IP address.

Tournaments

For tournament players, we maintain and publish their nicknames, clubs, results and statistics, profile photos, optional profile information, and photos from tournaments. For some players, we also record their full names. We never publish full names; players appear on the website exclusively under their nicknames. Photos in the galleries may be tagged with a player’s nickname. We obtain this information from players, clubs, tournament organizers, referees, and photographers.

  • Purpose: to manage and publish tournament results.
  • Audience: the general public—the results, profiles, and photos are freely available on the website in both Czech and English.
  • Legal basis: For results and statistics, the controller’s legitimate interest in maintaining and publishing the results (Article 6(1)(f) of the GDPR). For photos and optional profile information, your consent (Article 6(1)(a) of the GDPR), which you may withdraw at any time by contacting us at the address above.
  • Retention period: Results and statistics are retained permanently as part of the competition archive. Photos and optional profile information are retained until consent is revoked.

Referee App

If you select your name in the player app at the table, we’ll associate a random identifier for your device with it so that no one else can take that name.

  • Purpose: To record the results of the tournaments.
  • Legal basis: the controller’s legitimate interest in the accurate recording of results (Article 6(1)(f) of the GDPR).
  • Retention period: until the name is released, but no longer than 7 days from the last use.

User Accounts

Only administrators, editors, organizers, and tournament referees have user accounts. Players and website visitors do not have accounts. We store the user’s name, email address, login credentials, and a record of changes made in each account.

  • Purpose: website administration, tournament management, and change tracking.
  • Legal basis: the controller’s legitimate interests (Article 6(1)(f) of the GDPR).
  • Retention period: for the duration of access to the administration interface.

Traffic Measurement

We measure website traffic using Simple Analytics. It does not use cookies, does not store IP addresses, and does not identify visitors. It collects only aggregate data: the page visited, the referring website, device and browser type, screen size, and approximate country.

  • Purpose: To provide an overview of website traffic.
  • Legal basis: the controller’s legitimate interests (Article 6(1)(f) of the GDPR).

Reporting Errors

When an error occurs in the app, we send a technical description of the error to Sentry: the error type, the location in the program where it occurred, and the browser type. Sentry does not receive names, form data, IP addresses, or game ids.

  • Purpose: To quickly identify and correct errors.
  • Legal basis: the controller’s legitimate interests (Article 6(1)(f) of the GDPR).
  • Retention period: 30 days.

Cookies and Browser Storage

We use only cookies and storage necessary for the website to function. Therefore, we do not need your consent to use them.

  • csrftoken—purpose: to protect forms from misuse; duration: 1 year or until the next login
  • django_language—purpose: selected language, duration: 1 year
  • sessionid—purpose: logging into the admin panel and accessing password-protected pages; duration: 30 days

The website stores the following in your browser’s storage (localStorage, sessionStorage):

  • game settings and technical specifications required for games to function properly, such as sound, display quality, or which game information you have already viewed,
  • the chosen name, image, and flag,
  • a link to the last game played,
  • your game statistics, which only you can see,
  • In the referee app, the device identifier and its settings.

Most of this data remains only in your browser. It is only sent to the server as described in the sections above: name, image, and flag when creating a game; a link to the game when returning to it; and device identification in the referee app. You can delete the data in your browser by clearing your browsing data.

Who We Share Data With

We do not sell personal data or disclose it for marketing purposes. We use the following data processors to operate our website:

  • Roští.cz, s.r.o. — Services: Web and database hosting; Data storage location: Czech Republic
  • Scaleway SAS—Services: encrypted backups; placement of data: France
  • Functional Software, Inc. (Sentry)—purpose: error reporting; Data storage location: European Union
  • Simple Analytics B.V. — Business: Web traffic measurement; Data storage location: the Netherlands
  • WEDOS Internet, a.s. — Activities: sending emails; Data storage location: Czech Republic
  • Website provider and the tools it uses—activities: website development and management; Data storage location: Czech Republic; for some tools, the U.S.

Another recipient is the machine translation service DeepL SE (Germany). When translating website content into other languages, we provide it with text from public pages, which may contain the names and nicknames of players listed in results and articles. With the exception of the website provider’s tools, all recipients store data within the European Union. Sentry is a U.S. company, but we do not share personal data with it.

Backups

We back up the database regularly. We store backups on the server for up to approximately 12 months. We store encrypted backups off-server for the long term, for up to 5 years. Backups are used only to restore the website after an outage. If we ever restore them, we will return the data to the state described in this policy.

Your Rights

You have the right to:

  • the right to access your personal data,
  • to rectification of inaccurate data,
  • to have data deleted,
  • to restrict processing,
  • the right to data portability for data we process on the basis of a contract,
  • withdraw consent at any time if the processing is based on consent; the processing does not cease to be lawful prior to such withdrawal,
  • file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

Right to Object: You may object at any time to processing based on our legitimate interest. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.

You can exercise your rights by contacting us at the address listed above. The online game does not have user accounts, so we cannot identify you based on game data alone. If you wish to exercise your rights regarding a specific game, please send us the game’s URL (starting with smokingcat.cz/play/) or your IP address and the approximate time you played. We can only locate the games this way for 60 days, which is how long server logs are retained. After that, we will no longer be able to associate them with you.

Automated Decision-Making

We do not make decisions about you by automated means, and we do not player profiles. When improving our computer opponents, we use only data from individual games; we do not profile players.

Children

The online game is freely accessible, and data processing in the game does not require consent. A username is optional. We recommend that children not use their real names.

In a nutshell for kids: You can play the games without registering. You don’t have to give your real name—and it’s better if you don’t.

Policy Changes

We may update this policy if the way we process data changes. You can always find the current version on this page.