Privacy policy

1. Who we are

This website is operated by TEBA TECH S.R.L. ("TebaTech", "we", "us"), the data controller for the processing described in this policy.

We have not appointed a data protection officer, as the law does not require one for our activity. For any privacy question, write to the email address above.

2. What this policy covers

This policy covers the website tebatech.co and any messages you send us, including emails about our games.

Each of our mobile games has its own privacy policy, which explains the data that game processes (for example for advertising or in-app purchases). You'll find it in the game's store listing, inside the game, and on our Games page once the game launches. For data processed inside a game, that game's policy applies.

3. Data we process and why

a) When you visit the website

Our website is hosted by Cloudflare. To deliver pages to you and protect the site from abuse, Cloudflare necessarily processes technical data sent by your browser: your IP address, the date and time of the request, the page requested, the referring page, your browser and operating system (user agent), and security signals used to detect malicious traffic.

• Purpose: delivering the website, keeping it secure and available, preventing attacks.
• Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

Cloudflare also gives us aggregated traffic statistics based on this request data, such as the number of requests and visitors, the pages requested and the countries they come from. They are counted on Cloudflare's servers, without any script running in your browser and without reading anything from your device, and we only see totals, never individual visitors or IP addresses. We use them, on the same legal basis, to understand how much the website is used and to spot problems.

We do not keep our own server logs.

b) Detailed visitor statistics

If you accept on the banner that appears on your first visit, we use Cloudflare Web Analytics to count page views and understand which pages are useful. If you decline, the statistics script is never loaded. It does not use cookies, does not create a profile of you and does not track you across websites. It records the page you viewed, the referring page, your browser, operating system and device type, your country (derived from your IP address, which is not stored for analytics) and page loading times. We only see aggregated statistics, never information about individual visitors.

• Purpose: understanding how the website is used so we can improve it.
• Legal basis: your consent (Article 6(1)(a) GDPR, and Article 4 of Romanian Law no. 506/2004 for reading information from your device).
• Changing your mind: you can withdraw your consent at any time with the Privacy choices button at the bottom of every page. Withdrawing doesn't affect the lawfulness of the statistics collected before.

To remember your answer, your browser stores a small note of your choice and its date in local storage on your device. It stays there for about six months, after which we ask again. It never leaves your device. See our cookie policy.

c) When you contact us

When you email us directly or use the form on our support page, we receive your email address, your name if you include it, the content of your message and any details you choose to add, such as the game, your platform, the topic, your device, screenshots or recordings.

When you use the support form, what you type is sent to our website, which forwards it to our mailbox as an email through our email delivery provider, Resend. To keep the form free of spam, it is protected by Cloudflare Turnstile, which checks technical signals from your browser (such as browser characteristics and how the page is used) to tell people from automated programs, usually without asking you to do anything. We also use your IP address briefly to limit how many messages can be sent in a short time. These checks are used only to protect the form, not for advertising or tracking.

• Purpose: answering your message, providing support for our games and handling your requests.
• Legal basis: taking steps at your request and providing the game you use (Article 6(1)(b) GDPR), our legitimate interest in responding to messages (Article 6(1)(f) GDPR), and, for privacy rights requests, our legal obligations (Article 6(1)(c) GDPR).
• Spam protection: based on our legitimate interest in keeping the form secure and free of abuse (Article 6(1)(f) GDPR). Because it is strictly necessary to provide the form you chose to use, it doesn't require consent under Article 4 of Law no. 506/2004.

Giving us this data is voluntary, but without an email address we can't reply.

What we don't do

• We don't use advertising, social media pixels or third-party trackers on this website.
• We don't load fonts, videos or other content from third-party servers. Everything is served from our own domain, except Cloudflare's spam check on the support page and the visitor statistics you agree to.
• We don't sell or rent personal data, and we don't make decisions about you based solely on automated processing, including profiling.

4. Who receives your data

We share personal data only with service providers that process it on our behalf, under data processing agreements that require them to protect it and use it only on our instructions:

We may also disclose data where the law requires it (for example, to a court or public authority), or to our professional advisers, such as accountants and lawyers, who are bound by confidentiality.

Links on this website to other sites, such as the App Store or Google Play, take you to services with their own privacy policies.

5. Transfers outside the EEA

Cloudflare and Google may process data in the United States and other countries outside the European Economic Area. Cloudflare, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework, which the European Commission has found to provide an adequate level of protection. Where a transfer is not covered by that framework, our providers use the European Commission's Standard Contractual Clauses together with additional safeguards.

Resend processes messages sent through the support form in the United States. These transfers are covered by the European Commission's Standard Contractual Clauses in Resend's data processing agreement. If you'd rather your message not pass through the form, email us directly at [email protected].

6. How long we keep data

• Technical request data: processed by Cloudflare only for as long as needed to deliver the website and keep it secure. The aggregated traffic statistics we see contain no personal data.
• Visitor statistics: collected only with your consent and kept by Cloudflare in aggregated form only, for a limited period set by Cloudflare.
• Your banner choice: stored only in your own browser, for about six months.
• Support form: Resend keeps a copy of each delivered message and its delivery log only for a short period, for delivery and troubleshooting. Spam-protection signals are used only for the check itself, and the IP-based counters expire automatically within a day.
• Your emails: kept while we handle your request and for up to 24 months afterwards, so we can follow up if the same issue comes back. We then delete them, unless we need to keep them longer to meet a legal obligation or to establish, exercise or defend legal claims.

7. Your rights

Under the GDPR, you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased in the cases set out in Article 17 GDPR;
• restrict how we process your data;
• receive your data in a portable format (data portability), where processing is based on a contract and carried out by automated means;
• object at any time to processing based on our legitimate interests, on grounds relating to your particular situation;
• withdraw your consent to visitor statistics at any time, using the Privacy choices button at the bottom of every page.

To exercise any of these rights, email [email protected]. It's free of charge. We'll reply within one month, which we may extend by two further months for complex requests (we'll tell you if we do). We may ask for information to confirm your identity before acting on a request.

8. Complaints

If you think we've handled your data unlawfully, please tell us first so we can try to fix it. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work, or where the alleged infringement took place. In Romania, this is:

9. Children

This website is meant for a general audience and is not directed at children under 16. We don't knowingly collect personal data from children through it. If you're a parent or guardian and believe your child has sent us personal data, contact us and we'll delete it.

10. Security

The website is served only over encrypted HTTPS connections, and access to the mailbox that receives your messages is limited to the people who need it to answer you. No method of transmission or storage is completely secure, but we take appropriate technical and organisational measures to protect your data.

11. Changes to this policy

We'll update this policy when our website or the way we process data changes. The "Last updated" date at the top shows when it was last revised. If a change is significant, we'll highlight it on this page.

See also our cookie policy.