Privacy
Last updated: 1 October 2026.
Who is responsible. The data controller is Michał Wojciechowski, Moczyły 23, 72-001 Kołbaskowo, Poland. Contact: stickmanhatgame@gmail.com.
What we keep. When you buy a hat we keep the hat you chose, your email address, a fingerprint of your card provided by Stripe (not the card number), a random browser identifier stored in a cookie, your owner number and the time of purchase. When you start a checkout we also briefly keep your IP address.
Why, and on what legal basis.
- To deliver your hat and show it to you: performing our contract with you (Art. 6(1)(b) GDPR).
- To enforce the one-hat-per-person rule and to stop fraud and card testing: our legitimate interest in running the game fairly and safely (Art. 6(1)(f) GDPR).
- To keep sales records required by tax and accounting law: legal obligation (Art. 6(1)(c) GDPR).
Cookies. One strictly necessary cookie (shg_player) remembers that your browser already owns a hat. There are no tracking, analytics or advertising cookies.
Who else processes it. Stripe and Link (payments, receipts and tax: they act as independent controllers for payment data, under their own privacy policies), Vercel (hosting) and Neon (database). Some of these companies are based in the United States. Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long. IP addresses from checkouts: 30 days. Purchase records: for as long as the website runs, because they are needed to enforce the one-hat rule, and at least as long as tax law requires (5 years from the end of the year of purchase).
Your rights. You can ask for access to your data, correction, erasure, restriction of processing, a copy of your data, and you can object to processing based on our legitimate interest. Email us. Erasing your data may also remove your hat. You may also complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa) or to the authority in your own country.