Privacy Policy

Last updated: 8 July 2026

This policy explains what personal data Plonkers ("we") collects, why, and your rights over it. Plonkers is a UK-based game for players aged 16 and over.

Who we are

We are the data controller for your information. For any privacy request, contact privacy@plonkers.net.

What we collect

Email address — required to create your account, sign in, reset your password, and send account-related messages.
Handle — your public display name, shown to other players.
Password — stored only as a secure hash; we never see or store it in plain text.
Gameplay data — your conkers, battles, wins/losses and related stats.
Security data — limited technical logs and your IP address, used to run the service and prevent abuse; and, if you enable two-factor authentication, an encrypted authenticator secret.
Anonymous usage statistics — aggregate, non-identifying counts (players online over time, active minutes, and an approximate country derived from your network connection) used to keep the service stable and plan capacity. These are never linked to you, and we don't store your IP address for them.

Why we use it (lawful basis)

To provide the game — performance of our contract with you.
To keep it secure (rate-limiting, anti-abuse) — our legitimate interests.
Anonymous, aggregate usage statistics (service stability + capacity planning) — our legitimate interests.
The optional daily digest email — your consent, which you can withdraw at any time.

How long we keep it

We keep your data while your account is active. If you don't log in for 24 months we'll warn you by email and then delete the account. You can delete your account and data at any time from your account page.

Your rights

Under UK and EU data protection law you can access, correct, delete, restrict, object to, or port your data, and withdraw consent. You can download your data and delete your account yourself from your account page, or email privacy@plonkers.net. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

Who we share it with

Email — Resend (Plus Five Five, Inc.): sends your account and digest emails, processing your email address on our behalf. Resend is based in the US; this transfer is protected by Standard Contractual Clauses and Resend's certification under the EU-US Data Privacy Framework (and its UK Extension).
Hosting — Hetzner (Hetzner Online GmbH, Germany): stores the data needed to run the service, in a data centre within the EEA (Falkenstein, Germany), so this involves no transfer outside the UK/EU.
We do not use advertising or third-party analytics trackers, and we don't sell your data. (We keep our own anonymous, aggregate usage counts — see "Usage statistics".)

The only processing outside the UK/EU is by our US email provider (Resend), covered by the safeguards above; all other data stays within the EEA.

Cookies & storage

We store a single sign-in token in your browser's local storage so you stay logged in — this is needed to use the game. We don't use cookies or any browser tracking.

Usage statistics

To run the service reliably and plan capacity (for example, where and when to add servers), we keep anonymous, aggregate usage statistics: how many players are online over time, total active minutes, and an approximate country derived from your network connection. These are counts only — never linked to you or any individual, and we do not store your IP address for them. Lawful basis: our legitimate interests in keeping the game stable and planning capacity.

Children

Plonkers is for players aged 16 and over and is not directed at children under 16.

Changes

We may update this policy; we'll post the new version here with a revised date. Questions? Email privacy@plonkers.net.

← Back to Plonkers