Privacy policy

Who is responsible

VGraphics publishes this website and makes VGraphics Deployer, and is responsible for the personal data this policy describes (its "controller", in the words of the EU's General Data Protection Regulation, the GDPR):

Write to us about anything in this policy, or to use your rights. The company information page has our registration details.

This website

Hosting

vgraphics.gr is hosted on GitHub Pages, a service of GitHub, Inc. Your browser's request for each page reaches GitHub with your IP address, the page's address and your browser's name and version. GitHub logs and stores visitors' IP addresses for security purposes, whether or not they have a GitHub account (GitHub Pages: data collection). We don't get these logs. See the GitHub General Privacy Statement.

No accounts, cookies or trackers

The website has no accounts and no sign-in of its own. Apart from the play pages of the web games (see ads and statistics), no page here sets cookies, counts statistics or shows ads, and none loads scripts or fonts from another site: the fonts and pictures come from vgraphics.gr itself.

The live Exitwise ranking

The home, services and multiplayer pages and the Exitwise ranking show Exitwise's live leaderboards. Your browser reads them straight from the game's public ranking in Google Cloud Firestore, part of Google's Firebase (firestore.googleapis.com), so Google receives your IP address and browser details for those requests. No cookie is set, no sign-in is needed, and nothing else about you is sent. See Privacy and Security in Firebase.

Email

When you email us, we get your address and what you write, and we use them only to answer you. Our email runs on Gmail, so Google stores the messages for us. We keep them as long as we need them for what you asked.

Legal basis: our legitimate interest in a secure website that works, shows the live ranking and answers your messages (GDPR Article 6(1)(f)).

Ads in the web games

The web games on vgraphics.gr can show ads from Google AdSense on their play pages, and nowhere else: today that is Exitwise in your browser, and future web games will work the same way. No other page shows ads.

When ads load

• A play page first reads the site's ad switch, /assets/web-ads.js, from vgraphics.gr itself. Only when it turns ads on for that game does the page load Google's ad code. While it is off, nothing loads from Google for ads, and there are no ads and no ad cookies. The one exception is the page's ad test mode, which we open by adding ?adtest=on to its address: it loads Google's ad code to show test ads.
• With ads on, a game shows a banner under the game from the first level. Once Google allows them for the site, it also shows occasional full-screen ads between levels, and reward videos that you choose to watch, for example to continue a level.
• If an ad blocker stops Google's ad code, the game carries on without ads.

Cookies

Google, and other ad companies whose ads Google shows through AdSense, use cookies and similar technologies to show ads, measure them, limit how often you see the same ad and prevent fraud.

• Third-party vendors, including Google, use cookies to serve ads based on your earlier visits to this website or other websites.
• Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this website and/or other sites on the internet.
• You can opt out of personalised advertising in Google's Ad Settings. You can also opt out of many other ad companies' use of cookies for personalised ads at aboutads.info or youronlinechoices.eu.

Google explains its part in How Google uses information from sites or apps that use our services and in the Google Privacy Policy.

Your choices

• European Economic Area, UK and Switzerland: the first time you open a play page with ads on, Google's consent message asks whether Google and the ad companies it lists may use cookies and your data for ads. Ads are only personalised if you agree. If you don't, you may still see ads, but they are chosen from the page and your general location instead. Change your choice at any time with Ad choices under the game.
• US states with a privacy law: Google's message shows a "Do Not Sell or Share My Personal Information" link on the page, where you can opt out of the sale or sharing of your data for ads.

Legal basis: where the law requires consent, as in the EEA, the UK and Switzerland, ad cookies and personalised ads rely on your consent (GDPR Article 6(1)(a)), which you can withdraw at any time.

Statistics in the web games

The play pages can count game statistics with Google Analytics: for example the levels players finish, where they get stuck, and error reports when something goes wrong in the game. We use them only to improve the games.

• Only if you allow it. The first time a game opens, it asks, for example "Help improve Exitwise?", with Allow and No thanks. If Google's consent message (above) has already asked you about analytics, the game uses that answer instead of asking again.
• Nothing is loaded from Google Analytics or sent to it before you allow it, and the game works the same either way.
• If you allow it, Google Analytics keeps an identifier in a cookie in your browser. It doesn't get your name, email address or Google account.
• Your browser remembers your answer (in its local storage), so the game doesn't ask again. Change it at any time with Statistics under the game. If you withdraw it, the page reloads without Google Analytics.

No other page on vgraphics.gr counts statistics. What each game counts is in its own policy: Exitwise: analytics and crash reports.

Legal basis: your consent (GDPR Article 6(1)(a)).

Inside the games and apps

Each game and app has its own privacy policy for what happens inside it: game accounts and Google sign-in, cloud saves, leaderboards, profiles and pictures, rooms, custom maps, ads, analytics and purchases. When you play a web game here, the game connects to its own services (for Exitwise, Google Firebase), as its policy explains.

• Exitwise privacy policy, also for Exitwise in your browser and its room links
• Speedometer Live Wallpaper privacy policy

VHub

VHub, our coming player network, is only a "coming soon" page for now: it has no sign-in and collects nothing. VHub accounts will get their own privacy policy when VHub opens, and we'll link it here.

VGraphics Deployer

VGraphics Deployer is the internal tool we use to release our games and apps and to follow their statistics. It isn't a public app: it runs on VGraphics' own computer.

Who signs in

Only VGraphics' own staff sign in to it with Google, and only with VGraphics' own Google account. It never asks players, visitors or anyone else to sign in.

What it may read

When we sign in, Google asks us to allow read-only access to two things, and the Deployer asks for nothing else:

• AdMob reports: https://www.googleapis.com/auth/admob.readonly
• AdSense reports: https://www.googleapis.com/auth/adsense.readonly

With them it reads the estimated earnings and ad impressions of VGraphics' own apps and website, per day, ad format and ad unit, and the review status of our sites in AdSense. These are totals: they say nothing about the people who saw the ads. The Deployer can't change anything in AdMob or AdSense, and it doesn't ask for the account's name, email address or any other Google data.

Where it stays

• The sign-in that Google gives the Deployer, and the reports it reads, are kept on VGraphics' own computer. Each report is kept only until a newer copy replaces it.
• They are not shared with anyone, not sold, and not used for advertising.

Removing its access

The Deployer's access can be removed at any time from the Google Account that signed in: open Security → Your connections to third-party apps & services (myaccount.google.com/connections), choose VGraphics Deployer and delete the connection. From then on its saved sign-in no longer works, and it can't read any more reports.

VGraphics Deployer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your rights

Under the GDPR you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct it, or delete it;
• limit how we use it, or stop using it where we rely on our legitimate interest;
• give it to you, or to someone else, in a common machine-readable format.

You can also withdraw your consent at any time, without affecting what happened before: Statistics and Ad choices under each web game do that. Email gvergidis90@gmail.com to use any of these rights, and we'll answer within a month. Most of the data in this policy is held by GitHub and Google rather than by us, so where that's quicker we'll point you to them.

If you think we handle your data unlawfully, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) at dpa.gr, or to the data protection authority where you live or work.

Data outside the EU

GitHub and Google may handle the data described here in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as protecting personal data adequately.

Changes

When the website, its games or the Deployer start handling data differently, we update this page and its date at the top. If the Deployer ever needs more access from Google, this page will say so before it asks.