Privacy Policy

Last updated: 18 September 2026

1. Who is responsible for your data?

This Privacy Policy applies to Green Candle Cup and the operator of greencandlecake.com, including Green Candle Cup, Sprite Doctor and Jitter Doctor.

Privacy contact: contact@greencandlecake.com

2. What information may be processed?

Green Candle Cup

Depending on how you use the game, the following information may be processed:

• a Supabase user/account identifier, including an automatically created anonymous account when applicable;
• your chosen player name and game profile;
• your email address if you choose to save or recover your account using email;
• Google account authentication information made available through the Google sign-in process if you choose Google sign-in;
• game progress and gameplay information, such as levels, XP, coins, diamonds, cards, characters, match results, season/tournament information and related game statistics;
• team information, team membership, invitations and messages you choose to send in Team Chat;
• multiplayer and connection information needed to create, run, synchronize and settle PVP matches;
• limited public-test usage events, such as the game being loaded or the Play button being clicked, together with a random per-tab session identifier and timestamp;
• browser-stored settings and game information, such as language preferences and local game/session data.

Sprite Doctor and Jitter Doctor

These tools are designed to perform their sprite/image processing in your browser. The files you select are not intentionally uploaded to our server by the normal tool-processing code.

For the public test, limited usage events may be sent to our backend. These events can include the tool/action used, a short action detail where applicable, a random per-tab session identifier and a timestamp. The tracking code is not designed to include your sprite/image content, wallet address, email address or player name.

Technical information

When you access an online service, hosting, authentication, database and network providers may necessarily process technical connection information such as IP address, request information, timestamps, device/browser information and security logs. We do not use this Privacy Policy to claim that such network-level data is never processed by infrastructure providers.

3. Why do we process information?

Information is processed only for purposes connected with operating and protecting the services, including:

• providing Green Candle Cup and its gameplay features;
• creating and maintaining player profiles and saved accounts;
• providing email or Google-based account access when you choose those options;
• running PVP matchmaking, live matches, tournaments, teams, leaderboards and Team Chat;
• saving game progress and applying game rewards;
• operating Sprite Doctor and Jitter Doctor;
• understanding basic public-test usage so we can improve the game and tools;
• maintaining security, preventing abuse, diagnosing failures and protecting the services.

4. Legal bases

Where the GDPR applies, the legal basis depends on the processing involved. We may process information because it is necessary to provide the service you request, because we have a legitimate interest in operating, securing and improving the service in a proportionate way, because you have given consent where consent is specifically requested, or because processing is necessary to meet a legal obligation.

You are not required to provide an email address or use Google sign-in merely to start the game where anonymous play is available. Those account-saving options are optional.

5. Service providers and recipients

We use third-party infrastructure where necessary to provide the service. Current services include:

• Supabase for backend/database functions and authentication;
• Google when you voluntarily choose Google authentication;
• Cloudflare for realtime PVP/network infrastructure and related service delivery;
• our website/hosting and network providers where required to deliver greencandlecake.com.

These providers may process information according to their own roles, contracts and privacy terms. We do not sell your personal data.

6. Public and social game information

Green Candle Cup includes social and competitive features. Information you deliberately use in those features can be visible to other players where the feature requires it. This can include your player name, leaderboard or ranking information, team information and Team Chat messages visible to the relevant team members. Do not put sensitive personal information in your player name, team information or chat messages.

7. Local browser storage

The site uses browser storage such as localStorage, sessionStorage and authentication/session storage to keep game state, settings, language choices, session information and similar functionality. Some of this storage is necessary for the requested game or tool functionality. Clearing browser/site data may remove locally stored settings or progress that has not been saved to an account.

8. International data transfers

Some service providers may process data outside Belgium or the European Economic Area. Where GDPR transfer rules apply, transfers must rely on a lawful transfer mechanism or other applicable safeguard provided under data-protection law.

9. How long is information kept?

We keep personal information only for as long as reasonably necessary for the purpose for which it is processed, including maintaining an active account or game record, providing the service, security and abuse prevention, resolving technical or legal issues, and complying with applicable obligations.

Different categories of information may therefore have different retention periods. When information is no longer needed, it should be deleted or anonymised where appropriate. Browser data stored locally remains on your device until it is removed by the game/tool, expires, or you clear the relevant browser/site data.

10. Your privacy rights

If the GDPR applies to you, you may have rights including access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, data portability where applicable, and withdrawal of consent where processing is based on consent. These rights can depend on the circumstances and legal basis of the processing.

To make a privacy request, email contact@greencandlecake.com. We may need enough information to verify that the request relates to you before acting on it.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Belgium, this is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

11. Children

We aim to keep the information in this policy understandable. Children receive additional protection under data-protection law. Users should not submit unnecessary personal or sensitive information through player names, team information or chat. If you believe a child has provided personal information in a way that requires attention or deletion, contact us at contact@greencandlecake.com.

12. Security

We use reasonable technical and organisational measures intended to protect the service and the information processed through it. No online service can guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy when the game, tools, service providers or data practices change. The “Last updated” date at the top of this page will be changed when the policy is revised.

14. Contact

Questions or privacy requests can be sent to:
Green Candle Cup / greencandlecake.com
contact@greencandlecake.com