1. Controller / Data Responsible
The controller responsible for the processing of personal data on this website and in our apps is:
OnvexaLabs (Manfred Uschan)
E-Mail: onvexalabs@gmail.com
For the full postal address, please refer to our Imprint / Impressum.
2. What Data We Collect
We aim to collect as little data as possible. The categories of data we may process include:
- Website visit data: IP address (anonymised), browser type, pages visited, time of access — collected automatically by our hosting provider (GitHub Pages / Fastly CDN).
- Analytics: If we run analytics, only aggregated, non-personal metrics are stored.
- Advertising data (mobile apps): Our Android apps use Google AdMob to display ads. AdMob may collect device identifiers (Advertising ID), IP address, and usage data to serve personalised or non-personalised ads, subject to your device's ad personalisation settings and your consent where required.
- Game data (browser games): Cracklash (cracklash.cc) may store an anonymous session identifier and gameplay statistics on its server to enable leaderboards and session continuity. No name, email, or payment data is required to play.
- Voluntary contact: If you e-mail us, we process your e-mail address and the content of your message to respond to you.
3. Legal Basis (GDPR)
We process personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):
- Art. 6(1)(f) GDPR — Legitimate interests: Website hosting, security, and fraud prevention.
- Art. 6(1)(a) GDPR — Consent: Personalised advertising through Google AdMob where applicable.
- Art. 6(1)(b) GDPR — Contract: Processing necessary to provide the game services you use.
4. Google AdMob & Advertising
Our mobile apps use Google AdMob, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). AdMob may use cookies, device identifiers, and similar technologies to display relevant advertisements.
Google's privacy policy: https://policies.google.com/privacy
You can opt out of personalised advertising at any time in your device's settings (Android: Settings → Google → Ads) or at google.com/settings/ads.
5. GitHub Pages Hosting
This website is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). GitHub may collect technical log data including IP addresses as part of its standard service. GitHub's privacy statement: GitHub Privacy Statement
6. Third-Party Links
Our website and apps may contain links to third-party websites (e.g. Google Play, cracklash.cc, linktr.ee). We have no control over and accept no responsibility for the content or privacy practices of those sites.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Server log data is typically deleted within 14 days.
8. Your Rights (GDPR)
If you are in the European Economic Area, you have the following rights:
- Access: You may request a copy of the personal data we hold about you.
- Rectification: You may ask us to correct inaccurate data.
- Erasure ("Right to be forgotten"): You may ask us to delete your personal data under certain conditions.
- Restriction: You may request that we limit processing of your data.
- Portability: You may request your data in a structured, machine-readable format.
- Objection: You may object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at onvexalabs@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. In Austria, this is the Datenschutzbehörde (dsb.gv.at).
9. Cookies
This website (onvexalabs-dev.github.io) does not use tracking cookies. Our games may use browser session storage for gameplay state only; this data is not transmitted to us or third parties.
Google AdMob in our mobile apps may use device-level identifiers. Please see Section 4 for details.
10. Children's Privacy
Our services are not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance of the revised policy.
12. Contact
For any privacy-related questions or requests:
onvexalabs@gmail.com