Privacy
What we collect, why, on what legal basis, who handles it, where it goes, and how to refuse or withdraw consent for analytics.
Measurement happens only if you agree
When you first arrive, you are asked whether we may measure how the site is used. Nothing that measures you runs before you answer, and declining is a single click that costs you no functionality.
The lawful basis for analytics and for the advertising measurement pixel is your consent, and nothing else. You may withdraw it at any time from the link in the footer, which reopens the same choice. Withdrawing stops future measurement; it does not retroactively erase what was already collected.
The parts of the site that are not measurement — buying the game, contacting us, reading the rules — need no consent and are unaffected by your answer.
Your answer to the measurement question is stored by this site in your browser's local storage rather than as a cookie. It is kept until you clear your browser data or change the answer, and it records nothing but the word granted or declined.
An opaque identifier for your basket is stored by this site in your browser's session storage rather than as a cookie. It is kept only until you close the tab, and it records no product details, quantities, email address or delivery address.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Analytics and site usage measurement | Up to 2 years |
| _fbp | Meta | Advertising measurement and analytics | Up to 3 months |
| Cloudflare security cookies | Cloudflare | Security, traffic management and protection against malicious traffic | Varies |
| plepic_destination | Plepic Games | Remembers the destination you asked us to show the price for, so the figure you see is the one for that country | Up to 1 year |
Google Analytics and Meta cookies are used only with your consent. Cloudflare security cookies are strictly necessary for the operation and security of the site and do not require consent.
The destination cookie is set only when you change the destination yourself, and it holds nothing but the two-letter code of the country you chose. It records nothing about you and is not used for measurement or advertising.
Who else handles your data
These are the companies that handle data when you use this site, and this is all of them.
Cloudflare serves this site's DNS, terminates its encryption, and provides the challenge that protects the contact and newsletter forms from automated abuse. It therefore processes your IP address and request metadata for every page you load. This is not optional: it is how the site is delivered at all.
Stripe processes payments. When you pay, your card details go to Stripe directly and we never receive them. Stripe holds the payment record.
Google Analytics measures how the site is used, only after you consent, and never on our test environment.
If you consent, this site sends Meta an advertising measurement signal so we can see whether our advertising works. Meta also uses what it receives for its own purposes, under its own responsibility; for the collection and sending of this data, we and Meta are joint controllers. Nothing is sent before you consent.
Brevo delivers the newsletter and holds the address you gave us for it, until you unsubscribe.
Order and contact email is sent through our own mail server. It is not handed to a bulk email provider.
Google, Meta, Stripe and Cloudflare are US companies, and using them means some data is processed in the United States. Each participates in the EU–US Data Privacy Framework, and standard contractual clauses apply where it does not cover a transfer.
We do not sell data. Apart from the advertising measurement you can refuse above, no company named here may use your data for its own advertising, and there is no third party on this site that is not named above.
Your data, and how to reach us about it
The legal bases: fulfilling your order and answering your messages is performance of a contract; keeping order records for seven years is a legal obligation under Estonian accounting law; delivering and defending the site is our legitimate interest; measurement and the newsletter run on your consent alone.
When you order, we hold what an order needs: your name, delivery address, email address, what you bought and what you paid. Estonian accounting law requires us to keep the record for seven years from the end of the financial year the order falls in, and we delete it after that.
When you write to us, we keep the message and your address so we can answer, and so we can find the conversation again if you come back about the same order. We keep it for two years after the last message in the conversation, and then delete it.
When you subscribe to the newsletter, we hold your email address and nothing else. Every message has an unsubscribe link, and using it removes you.
You may ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask us to pause using it, ask for a copy, or object to how we use it. Write to [email protected] and a person will read it.
If we get it wrong you may complain to your national data protection authority. In Estonia that is the Andmekaitse Inspektsioon.
The controller is Plepic Games OÜ, Pihlaka 2, Jüri alevik, Rae vald, Harju maakond, Estonia.