In short
Balls has no accounts, no sign-up and no forms, and it does not ask for your name, email or password. So online rooms work and abuse is prevented, the technical IP of your connection stays in the server logs for 48 hours. Your progress is kept only in your browser.
Data controller
| Item | Value |
|---|---|
| Controller | Sergi Pinós |
| Tax ID (NIF) | 46355419T |
| Trade name | XMAS Software |
| Contact | info@balls.xmassoftware.com |
What data is processed and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Technical IP and connection data (date, route, result) in the room server logs | Make rooms work, limit abuse (for example, attempts to enter other people’s rooms) and fix faults | Legitimate interest in the security and operation of the service (art. 6.1.f GDPR) | 48 hours |
| Nickname you choose when joining a room | Show it to the other players in the room | Performance of the service you ask for (art. 6.1.b GDPR) | While the room exists |
| Website visits (aggregated, no cookies, no profiles) | Know how many people visit each page | Legitimate interest (art. 6.1.f GDPR) | Aggregated data, nobody identified |
We process no other personal data. Your game progress, unlocked levels, settings and statistics are kept only in your browser’s storage: they are not sent to our servers and we cannot see them.
We do not use your information for advertising, profiling or automated decisions.
What other players see
The players in your room see your nickname and what you do in the match. Connections go through our room server, so nobody sees your IP address.
Do not type personal data (full name, phone, address…) into your nickname. If you are under 14, ask your family for permission before playing online.
Who else is involved
- Cloudflare, Inc. (USA): serves the site, acts as a delivery network, measures visits in aggregate without cookies (Web Analytics) and checks with Turnstile that whoever creates a room is not a robot.
- The hosting provider of the room server, acting as data processor and hosting the 48-hour logs.
Providers outside the European Economic Area process data with GDPR safeguards (adequacy decision or standard contractual clauses). We do not sell or hand data to anyone else.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@balls.xmassoftware.com. We will answer within the legal deadline (one month).
Since logs delete themselves after 48 hours and there are no accounts, there will normally be nothing to erase after that time. To find data of yours within those 48 hours you will need to tell us your IP and the approximate time of the connection.
If you think your data is not handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Security
All communication is encrypted (HTTPS and secure WebSocket). Logs are deleted after 48 hours and access to them is limited to the owner. Rooms have per-IP attempt limits to stop abuse.
Changes to this policy
If what is stored changes, we will update this page and its date before the change applies.
Contact: info@balls.xmassoftware.com