PRIVACY

Ude Ude Game Hub · Ude Ude Game Studio · last updated 2026-10-23

Who's responsible

The Ude Ude Game Hub (play.udeude.com), its accounts and the studio's site (udeude.com) are run by Ude Ude Game Studio, in Croatia. That's who decides how your data is used. Write to privacy@udeude.com about anything on this page, in English, Croatian or German.

The short version

You can play without telling us anything: a guest has no name or email.
An account keeps what it needs to keep your progress, and nothing for advertising. No ads, no outside analytics, no tracking cookies.
You can download your data or delete your account yourself, at any time.

What we keep, why, and for how long

Your account: an account ID. If you sign in with Google or Discord, the basic profile that service shares (name, email address, avatar). If you sign in with an emailed code, your email address. Guests have an ID only. Other players never see your name or email: they see your callsign, and beside it your level and latest badges. Your settings (language and sound) are kept with it. We don't use passwords. Why: to sign you in and keep your progress. Basis: providing the service you asked for (GDPR Art. 6(1)(b)). Kept until you delete the account. A guest account nobody has used for 90 days is deleted.
Your progress: your callsign, XP, level and win/loss counts; your match history (when, mode, result, length, your opponent's callsign); the challenges you claimed and the badges you earned, with the XP they paid; and which of the hub's games you open and for how long, as daily totals per game (the hub sees only that a game is on screen, never what happens inside it). These make your account page and its "Your games" list. Why: to keep and show your progress. Basis: Art. 6(1)(b). Kept until you delete the account.
Friends (signed-up accounts only): the players you asked to be friends and the ones who asked you, whether they accepted, and since when. A request shows the other player your callsign; friends see each other's callsign, level and latest badges. Either of you can end a friendship, or withdraw a request, at any time. Why: to keep your friends list. Basis: Art. 6(1)(b). A friendship is kept until one of you ends it, a request until it's answered or withdrawn, and all of it goes with your account. Who you asked, and who declined you, is kept for a week, so requests can't be repeated without end.
Leaderboards (signed-up accounts only): The Holdout's boards show your callsign with the XP your checked matches paid, your wins and your matches, this week and of all time, to everyone signed in to the hub. You can switch this off on your account page (Settings), and you're off every board at once. Guests never appear. Why: so players can compare their results. Basis: our legitimate interest in leaderboards a player can leave (Art. 6(1)(f)). Worked out from your match history whenever a board is opened; nothing more is kept.
Your saves: what the hub's games keep in your account (for example The Reclamation's profile and saved games), with their sizes and times. Only you and that game use them. Our team sees their sizes and times and doesn't open their contents. Why: so your games continue on any device. Basis: Art. 6(1)(b). Kept until you or the game delete them, or you delete the account.
Your sign-up: the version of the Terms you accepted, the version of this policy you were shown, when, and that you confirmed you're 16 or older. Why: to know which Terms apply to you, and to be able to show it. Basis: Art. 6(1)(b), and our legitimate interest in proving it (Art. 6(1)(f)). Kept until you delete the account.
Your account's standing: a warning, suspension, ban or callsign reset if there ever is one (what, why, until when, and who on our team decided), notes our team writes about the account for moderation (for example about a report), and any memberships the account has, such as team access. Why: to enforce the Terms and keep play fair. Basis: Art. 6(1)(b), and our legitimate interest in a fair and safe hub (Art. 6(1)(f)). Deleted with the account.
Online matches: matches pass through our game server, which sees your callsign and the moves and keeps no record of the moves. It keeps a short record of each room: the callsigns, whether a player was signed in, when the match started and ended, disconnects and reconnects, and how it ended. No IP addresses. Why: to find problems and abuse. Basis: our legitimate interest in a working, fair game (Art. 6(1)(f)). Kept 30 days.
Security logs: our web server's standard access logs (IP address, time, page requested, browser). Our firewall blocks, for a while, addresses that attack the server. Why: to keep the sites and your account secure. Basis: our legitimate interest in security (Art. 6(1)(f)). Kept 14 days. They aren't used to follow you.
Visitor counts: from the access logs we count, per day, page loads, which pages, which site sent you, and phone or computer. Each visitor is counted with a code that changes every day and is thrown away when the day ends, so no one can be followed from one day to the next. Why: to know how the sites are used. Basis: Art. 6(1)(f). Only the day's totals are kept, for 90 days.
Who's here right now: while the hub is open, the page tells our game server every 30 seconds which screen it shows (for example the ARCADE realm, or a match), with a random number made for this page load (never stored on your device) and whether you're signed in. No name and no cookie. From the page's address, which isn't kept, our server also works out the country it's in, for the hub's live map: there each country with anyone on lights up, with how many only from 5 up. Why: to count how many people are here right now, and in which countries. Basis: Art. 6(1)(f). Kept 75 seconds.
Totals for the studio: from the daily play totals we work out, in totals only, how many players come each day, week and month, how many come back the next day and a week later, which games are played, and how many challenges are claimed. The totals name no one. Why: to know what to make better. Basis: Art. 6(1)(f).
Backups: every night we copy the account data to our own server, so a mistake can be undone. Why: to protect your progress. Basis: Art. 6(1)(f) and the security the law asks of us (Art. 32). Each copy is kept 14 days, so a deleted account is gone from the copies within 14 days.
Bug reports: what you write in a report from the hub, the kind you pick, an email if you give one for an answer, and what the hub attaches: your callsign, the screen you were on, the version, your browser, screen size and language (with "Report this", also the error's log). Each report is also emailed to our support inbox. Why: to fix what's broken and answer you. Basis: Art. 6(1)(b), and our legitimate interest in a working hub (Art. 6(1)(f)). Kept up to 12 months, and deleted with your account.
Notifications: what the hub tells you about your account (a decision of our team with its reason, a report of yours answered, a membership), kept with your account so the bell beside your callsign can show it. Read ones are deleted after 90 days, all of them after a year, and every one with your account. Why: to tell you what concerns your account. Basis: Art. 6(1)(b), and for our team's decisions the statement of reasons the DSA asks for (Art. 17).
Mail you send us (info@, support@, privacy@udeude.com). Why: to answer you. Basis: Art. 6(1)(b) or (f), depending on what you ask. Kept while we need it to help you, and deleted at the latest two years after the conversation ends.

Your callsign also stays in the match histories of the players you played against, as their record of their match, after you delete your account.

Who else handles it

Supabase stores the accounts and the game data, in Frankfurt, Germany. The company we have the contract with is Supabase Pte. Ltd. in Singapore.
Hetzner Online GmbH, Germany, runs our servers: the game server, the websites, the logs and the backups.
Resend, Inc., USA, emails the sign-in codes, and bug reports to our support inbox. It sees your email address and the message, and keeps them 30 days.
Cloudflare, Inc., USA: the sign-in screen loads Cloudflare Turnstile, which checks that a guest or email-code sign-in comes from a person. Cloudflare sees your IP address and details of your browser for that check, and also uses them to improve Turnstile, under its own responsibility (Turnstile's privacy policy ↗). Cloudflare also runs our domain's name servers. Nothing else in the hub loads Cloudflare.
Zoho Corporation B.V., the Netherlands, hosts our mailboxes.
Google and Discord: if you sign in with them, you go to their own site and back, and they're responsible for their part (Google ↗, Discord ↗).
Other players see your callsign, in matches and in their match history, with your level and latest badges beside it; signed-up players also see your place on the leaderboards (unless you switch it off), and your friends see you in their list.
Authorities, only when the law requires us to hand something over.

Supabase, Hetzner, Resend, Cloudflare and Zoho work for us under data processing agreements and use the data only to provide their service to us. We sell your data to no one.

Outside the EU

Resend and Cloudflare are in the USA and certified under the EU-U.S. Data Privacy Framework. Supabase's contracting company is in Singapore and is bound by the EU's standard contractual clauses (the data itself is stored in Frankfurt). Ask us for a copy of these safeguards at privacy@udeude.com.

In your browser

The hub keeps your sign-in session, the callsign you last typed and a few settings (like sound) in your browser's storage, so you stay signed in and your settings stick, and our games keep their settings and saves there too. These are strictly necessary for the hub to work, and signing out removes the session. During a check, Turnstile may set a short-lived cookie of its own. No tracking cookies, so there's no cookie banner.

Games from other sites

Some games in the hub come from their makers' pages on other sites, like PUNKEEER's games on itch.io. One loads inside the hub only when you open it, and while it runs, that site's own privacy policy and cookies apply (itch.io's privacy policy ↗).

Decisions made by a computer

Three checks run on their own: the callsign check refuses a callsign that contains a word on our list, Turnstile may refuse a sign-in that looks like a bot, and our firewall blocks an address that attacks the server for a while. Everything else, like warnings, suspensions and bans, is decided by a person. If a check stopped you by mistake, write to support@udeude.com and a person looks at it.

Age

Ude Ude accounts are for people 16 or older. Anyone can play as a guest: a guest's progress is saved under an ID with no name or email attached.

Do you have to give us anything?

No. You can play as a guest. An account needs one way to sign in (Google, Discord or an email address), because that's how it knows it's you.

Your rights

A copy of your data: your account page → Download my data gives you your account's data as a file you can take elsewhere. For a full copy, including our team's notes and the logs, write to us.
Delete your account and all of its data: your account page → Delete account. It's immediate and permanent.
Correct your data: change your callsign on your account page at any time, or write to us about anything else.
Limit what we do with your data while something is being sorted out.

Your right to object. You can object at any time to the things we do on the basis of our legitimate interests (Art. 6(1)(f): security, counts, moderation). We then stop, unless we have compelling reasons to carry on, such as stopping an attack.

Write to privacy@udeude.com. It's free, and we answer within a month. We may ask you to show the account is yours, for example by writing from its email address.

Complaints

If you think we handle your data wrongly, please tell us first. You can also complain to Croatia's data protection authority, the Agencija za zaštitu osobnih podataka (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, azop@azop.hr, +385 1 4609 000, azop.hr ↗, or to the authority where you live or work.

Changes

When this policy changes, the date at the top changes, and your account shows you the new version the next time you sign in.