Legal

Privacy policy

Effective date: 27 October 2026 · Polski

This policy applies to the Commutopia Android game (package be.kapica.commutopia) and commutopia.online. The game is published by an independent developer. Playing does not require an account or consent to crash reporting.

Data controller: [NAZWA FIRMY, ADRES] · [email protected]

The game

Gameplay, cities and simulation work offline. The Android app requests INTERNET because some WebView versions need it for local https://localhost content. When you opt in, a network connection is used to transmit error reports to Google; without consent, reports must not be sent.
Crash reporting is off until you actively agree. If you agree, Google Firebase Crashlytics receives automatic reports of crashes, non-fatal errors and app-not-responding events when connectivity is available. You may also choose “Report a bug” to submit a description and recent technical errors. Reporting is not necessary to play.
Reports may contain an error message and stack trace; game version and build; phone or tablet model; Android and WebView versions; graphics quality, frame rate and frame time; approximate city size expressed as road and building counts; and a random Crashlytics installation UUID and Firebase installation ID. A voluntary report also contains your description and up to ten recent technical errors. Please do not include names, contact details or other personal information in the description.
There is no game account, advertising, advertising ID, in-app purchase, marketing analytics or behavioural tracking. We do not deliberately collect location, contacts, photos, camera or microphone data. Technical reports may nevertheless contain identifiers and should not be considered fully anonymous.
Your cities, progress, achievements and settings remain in the app's local storage. If Android backup is enabled, the operating system may back up or transfer these local files through your Google account; we cannot access that backup. Clearing app storage or uninstalling deletes local data, not reports already uploaded to Google.
Google Play separately processes information about app downloads and store operations under Google's own privacy policy; that is distinct from optional Crashlytics reporting by Commutopia.

Purpose and legal basis

The sole purpose of the optional reports is to investigate crashes, reproduce and fix bugs, and improve technical stability. The legal basis for this reporting is your freely given consent (GDPR Article 6(1)(a)); refusal does not affect gameplay. The same consent governs a manually submitted bug report.

Google and international transfers

Google provides Firebase Crashlytics as our data processor under the applicable Firebase data-processing terms. Data may be processed outside the European Economic Area, including by Google or its subprocessors, subject to the transfer mechanisms applicable under those terms, which may include an adequacy framework and/or Standard Contractual Clauses. Transport uses HTTPS encryption. We do not sell report data or use it for advertising.

Retention

According to Google's published documentation, Crashlytics retains crash traces and associated installation identifiers for 90 days before beginning deletion from live and backup systems; completion may take longer. Other technical Firebase identifiers may follow separate retention rules. We do not plan a separate database or export of these reports. This period and the final SDK configuration must be verified before release.

Consent, withdrawal and deletion

At first launch, “Send reports” and “Not now” are equally available; the default is off. You can change your choice in Settings → Privacy. Turning reporting off stops the app from authorizing future uploads, but the Crashlytics SDK may apply its opt-out only on the next app launch, so the app asks you to close and restart immediately. Locally unsent reports should be deleted; already transmitted reports cannot be recalled merely by switching the setting off.

For questions or a request to access or erase report data, contact [email protected]. Providing an installation identifier, if available, may help identify a report, but there is no player account and identifying a particular record may be technically impossible. We will assess requests and explain limitations; withdrawal does not invalidate processing performed before withdrawal.

This website

commutopia.online uses no analytics, tracking pixels or marketing cookies. The website remembers only your chosen language in browser local storage (commutopia-lang), which stays on your device.
Website files, including fonts, are served by commutopia.online. The hosting provider may store standard security logs, including an IP address and requested page, for a limited period. The website does not intentionally load third-party trackers.
The “Get notified” form opens your email app rather than automatically sending information. If you choose to send an email, we use that email address solely to send launch information and remove it on request.

Children

Commutopia is suitable for ages 3+ (PEGI 3); that rating does not mean young children can legally consent to data processing. Where parental authorization is required under applicable law, optional reporting must remain off unless a parent or legal guardian has validly authorized it and the authorization is appropriately verified. Children may play without reporting.

Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability and, where relevant, object to processing; you may withdraw consent at any time and complain to your supervisory data protection authority. Contact [email protected]. Because reports use random installation identifiers rather than accounts, fulfilling some requests may depend on whether we can identify the data.

Changes and languages

We will update this policy before a future version changes reporting or other data practices. If the translations differ or raise interpretive doubt, the English version prevails to the extent permitted by applicable law; mandatory consumer and data-protection rights remain unaffected.

Firebase Privacy and Security · Firebase Data Processing Terms · Google Privacy Policy