Effective date: June 21, 2026
1. Data Controller
Scaleo is an independent application, published by the same team as Truka. For any questions about your personal data, contact us at: contact@scaleo.fun
2. Data We Collect
We only collect data necessary for the Scaleo game to function:
- Account: email address, display name (username)
- Preferences: language, time zone, interface background colours
- Game activity: rankings and scores in the History, Size, Weight and Speed modes, multiplayer sessions (player identities within a shared game)
- Audience measurement: pages viewed, in-app actions and a device identifier, sent to Google Analytics only after your consent and never before
- Notifications: your device notification identifier (Firebase Cloud Messaging token), only in the Android apps and after your permission, to invite you in the evening to claim your card of the day
- Security: the IP address recorded when the account is created, to prevent abuse
No GPS location data, no advertising identifiers (IDFA/GAID), and no biometric data are collected.
3. How We Use Your Data
Your data is used exclusively to:
- Authenticate your account and secure your session
- Personalise the display according to your preferences (language, time zone, colours)
- Calculate and display your game scores and rankings
- Let you join a multiplayer game via the link you share, and reconnect to it
- Produce aggregated, anonymous statistics to improve the service
No processing for commercial, advertising, or profiling purposes is carried out.
4. Legal Basis (GDPR)
- Contract performance (Art. 6.1.b): processing necessary to provide the service
- Legitimate interest (Art. 6.1.f): security and integrity of the service
5. Data Retention
Your data is retained for as long as your account is active. Upon account deletion, all your personal data is erased within 30 days. Aggregated, anonymised statistics may be retained indefinitely.
6. Security
The security of your data is an absolute priority. Measures in place:
- All communications encrypted via TLS 1.2 and TLS 1.3
- Authentication using JWT tokens with limited lifetimes
- Passwords hashed with bcrypt (never stored in plain text)
- Servers hosted in Europe (Hostinger VPS, European Union)
- Data access restricted to authorised administrators only
- Strict data isolation between users
- No sensitive data stored in plain text on client devices
7. Data Sharing
Your data is never sold to third parties. It stays inside Scaleo's secure system, with the single exception of the audience measurement described below, which is only sent with your consent.
The only sharing that occurs is what you initiate yourself by sharing a multiplayer game link with the people you invite to play.
We do not integrate any advertising SDKs or social networks. We use Google Analytics (Google Ireland Limited) to measure site and app usage — and Firebase Analytics in the Android applications — only after your explicit consent. Until you accept, no data is sent to Google. Your data is never sold. The Android apps also use Firebase Cloud Messaging (Google) to send notifications, only if you have allowed them.
8. Your Rights (GDPR)
You have the following rights over your data:
- Access: obtain a copy of your personal data
- Rectification: correct inaccurate data
- Erasure: delete your account and all your data
- Objection: object to certain processing activities
- Portability: receive your data in a structured format
- Restriction: temporarily restrict processing
To exercise these rights: contact@scaleo.fun. We respond within 30 days. You may also contact the ICO (UK): ico.org.uk or your local data protection authority.
Deleting your account requires no written request: it is done from the app settings, under “Delete my account”, and takes effect immediately. The steps are set out on the Delete your account page.
9. Cookies and Local Storage
No audience measurement takes place without your consent: until you accept, no Google script is loaded and no measurement cookie is set. If you accept, Google Analytics sets audience measurement cookies. You can change this choice at any time in the application settings. Apart from this measurement, the web version only uses the browser's local storage (localStorage) to maintain your session, with no advertising cookies.
10. Minors
Scaleo is not intended for children under 13. We do not knowingly collect data about minors. If you believe a minor has created an account, contact us for immediate deletion.
11. Changes to This Policy
Any material changes to this policy will be notified via the application. The date at the top of this page will be updated accordingly.
12. Contact
For any questions about the privacy of your data: contact@scaleo.fun