Privacy Policy - Punkham Mayhem

1. Overview

Punkham Mayhem is a free browser-based game available at punkham.punkverse.world. We collect a small amount of information to power the leaderboard, keep the game running smoothly, and protect against cheating. We do not sell your data, run ads, or share your information with data brokers.

This policy is written in plain English. It tells you exactly what we collect, why, how long we keep it, and what you can do about it.

        This policy applies to all players worldwide, with specific rights
        for residents of the EU/EEA (GDPR) and California, USA (CCPA).
        Our governing law is that of Lagos, Nigeria.
      

2. What We Collect

Here is every piece of information the game touches - nothing hidden.

Data	What it is	Where it is stored	Public?	Identifiable?
Display name / username	The name you choose when submitting a score	Our game server	Yes	Your choice
Game score & rank	Your high score and leaderboard position	Our game server	Yes	No
IP address	Your internet address, logged when your device calls our server	Our server logs (temporary)	No	Potentially
Browser & device type	Which browser and device you are using	Umami Analytics	No	No
Session duration	How long you spend in the game per visit	Umami Analytics	No	No
Game save data	Your local progress, crew, unlocks, and settings	Your browser only (localStorage) - never our servers	No	No

We do not collect: real names, email addresses, phone numbers, payment details, passwords, or precise GPS location.

3. Public Leaderboard

The Punkham Mayhem leaderboard is visible to everyone who visits the game. Your chosen display name and score will appear publicly whenever you submit a score.

⚠️

Heads up before you submit Your display name is public. Do not use your real name, email address, or any personal information as your in-game username. Once submitted, your entry appears on the leaderboard immediately. You can request removal at any time by contacting us.

4. How We Use Your Data

Leaderboard - your display name and score are stored and displayed so all players can see rankings.
Anti-cheat & abuse prevention - IP addresses are logged temporarily to detect and block bots, score manipulation, and other abuse. We do not use IPs for any other purpose.
Performance analytics - aggregated, cookieless analytics help us understand how the game performs across different browsers and devices so we can fix bugs and improve load times.
Game saves - localStorage keeps your progress on your own device so you do not lose your game between sessions.

Our legal basis under GDPR is legitimate interests (Art. 6(1)(f)) for analytics and anti-abuse processing, and consent (Art. 6(1)(a)) for leaderboard submissions - you actively choose to submit your score and display name.

5. Cookies & Local Storage

We do not use third-party tracking cookies. Umami Analytics is cookieless by design - it does not set any cookies in your browser and does not track you across websites.

No advertising cookies. No retargeting pixels. No social media trackers.
Your game save lives in your browser's localStorage - it never leaves your device.
Clearing your browser's site data will permanently delete your local save. We have no backup of it.

        Because we use no tracking cookies, you will not see a cookie
        consent banner. The only browser storage we use is localStorage
        for your game save, which is entirely under your control.
      

6. Third-Party Services

Umami Analytics

Privacy-first analytics

We use Umami to measure page views, session duration, browser types, and device types in aggregate. Umami is a privacy-focused analytics platform that does not use cookies, does not collect personal data, and does not track players across sites. All data is aggregated and anonymised.

No cookies set. No cross-site tracking.
IP addresses are never stored by Umami.
Umami is GDPR, CCPA, and PECR compliant by default.
Privacy policy: umami.is/privacy

Game Server / Backend

Leaderboard & score storage

Leaderboard data (display names, scores, ranks) is stored on our Apache/MySQL game server backend. Server access logs including IP addresses are retained temporarily for security purposes and are not shared with third parties.

We do not use advertising networks, data brokers, social login providers, or any service that monetises your personal data.

7. How Long We Keep Data

Data	Retention period	Who controls it
Leaderboard entries (name + score)	Until you request removal, or we reset the leaderboard	Us - email to delete
IP address logs	Deleted automatically after 180 days	Us - automatic deletion
Analytics data (Umami)	Rolling 12-month window; aggregate only, no personal data	Umami
Game save (localStorage)	Until you clear your browser data - we have no copy	You - clear in browser settings

Note: the [X] day IP log retention period is set in our server configuration. If you need the exact figure, email us.

8. Your Rights

Depending on where you live, you have the following rights. To exercise any of them, email punkham@punkverse.world - we aim to respond within 30 days.

🔍

Know / Access Ask us what data we hold about you - we'll tell you in full.

🗑️

Deletion Request removal of your leaderboard entry and any server-side data linked to you.

✏️

Correction Ask us to fix a leaderboard name that was submitted incorrectly.

📦

Portability Request a copy of any personal data we hold in a readable format.

⛔

Object Object to processing based on legitimate interests (GDPR Art. 21).

🚫

Opt-out (CCPA) California residents: we do not sell data, but you can request disclosure or deletion at any time.

        EU and UK residents may also lodge a complaint with their national
        data protection authority (e.g. ICO in the UK, or your local EU
        supervisory authority) if you believe your rights have not been met.
      

9. Children's Privacy

Punkham Mayhem is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13.

If we learn that a player under 13 has submitted data to the leaderboard or otherwise provided personal information, we will delete that data promptly. If you believe this has happened, please contact us immediately at punkham@punkverse.world.

10. International Data Transfers

Our primary operations are based in Lagos, Nigeria. If you are located in the EU, UK, or California, your data may be processed outside your home jurisdiction when it is stored on our server or processed by Umami (which operates from the EU).

We take reasonable steps to ensure any cross-border data transfers are handled with an adequate level of protection. Umami processes data within the EU and is GDPR-compliant by design.

11. Changes to This Policy

If we make meaningful changes - for example, if we add a new third-party service or start collecting new types of data - we will post a notice inside the game for at least 14 days before the change takes effect, and update the "Last updated" date at the top of this page.

Continued play after the notice period is displayed counts as acceptance of the updated policy.

12. Contact Us

Questions, data requests, or anything else? We read every email and respond within 30 days.

Punkham Mayhem - Privacy

Email: punkham@punkverse.world

Website: punkham.punkverse.world

Please include "Privacy Request" in the subject line so we can respond quickly. For leaderboard deletion, include your display name and approximate submission date.