Privacy policy

This is an English translation provided for convenience. The Polish version is the binding one.

1. Data controller

The controller of your personal data is Szymon Grzybek, a sole trader operating as Little Mushroom Szymon Grzybek, ul. Kingi 58J, 41-711 Ruda Śląska, Poland, tax ID (NIP) 6412452105, REGON 369323390 (“the Controller”, “I”).

For anything related to personal data, email hello@mshr.pl or call +48 721 713 767. No data protection officer has been appointed.

2. Scope

This policy explains how I process personal data when you use the website mshr.pl and the Android app Gilded Gameroom (package ID com.gildedgameroom.app), in line with Regulation (EU) 2016/679 (“GDPR”).

3. Website

The website uses no cookies or similar technologies. It uses no analytics, advertising pixels or social media plugins. Fonts, scripts and images are served from the website's own server — your browser does not contact third-party services.

IP address and server log. To send you the page, the server and the hosting provider's infrastructure have to process your device's IP address. They do so for as long as it takes to deliver the page and protect the server from attacks. The web server writes IP addresses to no log. It keeps only a technical request log (date and time, page address, response code, browser type) that cannot identify you. The purpose is to keep the website running and secure; the legal basis is my legitimate interest (Art. 6(1)(f) GDPR).

4. Email and phone contact

When you write or call, I process the data you provide: your email address or phone number, your name if you give it, and the content of your message. I do this to reply and keep up the correspondence (Art. 6(1)(f) GDPR) and, when your message is about working together, to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

I keep correspondence while it is ongoing and then until any related claims become time-barred, in order to establish, pursue or defend claims, which is my legitimate interest (Art. 6(1)(f) GDPR). If we sign a contract, accounting records are kept for the period required by tax and accounting law (Art. 6(1)(c) GDPR). Providing data is voluntary, but I cannot reply without it.

5. The Gilded Gameroom app

• I receive no data from the app. It has no user accounts, ads, analytics or tracking tools and sends nothing to my servers.
• Game progress and settings are stored only on your device. I have no access to them. Erase them by resetting progress in the app's settings or by uninstalling the app. The full-version purchase belongs to your Google account, so a progress reset keeps it.
• The app uses the vibration permission (in-game feedback), the Google Play billing permission, and internet and network-state access, which the Google Play Billing Library requires.

In-app purchases. The full version is bought through Google Play. Google processes the payment, your card details and your Google account as a separate controller under the Google Privacy Policy. The Google Play Billing Library in the app communicates with Google to complete and confirm the purchase. I never receive your card details. Google provides me with the transaction information needed for accounting and refunds: order number, date, product, price, and the buyer's country, region, city and postal code and device model. I process it to perform the contract (Art. 6(1)(b) GDPR) and meet tax obligations (Art. 6(1)(c) GDPR) for as long as that law requires.

Google Play reviews. When you review the app, I see your Google display name, the review text, the rating and basic device details (model, Android and app version). I process them to reply to reviews and improve the app, which is my legitimate interest (Art. 6(1)(f) GDPR), for as long as the review is published on Google Play.

6. Recipients

Data may be received only by those who help me run the business and by public authorities where the law requires it, and only as far as necessary:

• the website hosting provider (Contabo GmbH, Germany),
• the email provider (MXroute LLC, USA),
• accounting service providers.

I do not sell data or share it for marketing. The website server is located in the European Union (Contabo GmbH).

Transfers outside the EEA. Email is handled by MXroute LLC, whose servers are in the United States. Messages sent to hello@mshr.pl are therefore transferred to the USA under standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can get a copy of these safeguards by writing to hello@mshr.pl.

7. Your rights

You have the right to:

• access your data and receive a copy,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on legitimate interest (Art. 21 GDPR),
• lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the supervisory authority in the EU member state of your habitual residence, place of work or place of the alleged infringement.

To exercise your rights, email hello@mshr.pl.

8. Automated decisions

I make no decisions based solely on automated processing, including profiling.

9. Changes

The current version of this policy is always available on this page; the date at the top shows when it took effect. The rules for using the website and the app are set out in the Terms.