Privacy policy

Effective from 9 November 2026

Who is responsible for data

The data controller is Radosław Tarnas, running a business under the Dareia brand, ul. Nastrojowa 58/5, 91-496 Łódź, Poland, tax ID (NIP) 7251926767, REGON 101315010. Privacy contact: support@dareia.eu.

In short

Data stored only on the device

The game saves the state of play on the device: what is in each place, what the critters are wearing and where they are, the contents of the backpack, found stickers, discoveries in the Book of Discoveries, Game Room high scores, the last place visited and purchased packs. This is not personal data and it is never sent to us or anyone else. It is not included in Android backups either. Clearing the app's data or uninstalling the game deletes it permanently (purchased packs can be restored from the Google account, see below).

In-game purchases (Google Play)

The game offers one-time packs: single places, outfits, lands, “The whole valley” and “The whole world”. Every purchase is preceded by a parent gate (a question a young child can't answer). Payment is handled by Google Play – we never see card details, email addresses or the Google account. The game only receives a purchase confirmation from Google Play (product ID, time and order number) so it can unlock the pack, including after reinstalling the game on the same Google account.

In the Google Play Console we see order data (order number, product, price, country, date and status), without the buyer's name or email address. We use it for accounting and to handle complaints and refunds. Purchases are subject to the Google Play terms, and Google processes payment data under its own privacy policy.

Permissions

The game uses vibration (VIBRATE) and the Google Play billing service (BILLING), which contacts Google Play only when buying or restoring purchases. The game does not use the advertising ID, location, camera, microphone, contacts or files on the device.

Google Play

The game is downloaded and updated through Google Play. Data related to the Google account, downloads, updates and payments is processed by Google as a separate controller, as described in the Google Privacy Policy.

Apart from that, Google Play gives us only aggregate statistics (such as the number of installs per country) and – if sharing diagnostic data is enabled in Android settings – crash reports (device model, system version and the course of the error). They contain no name, email address or account ID.

Children

The game is made for children and takes part in the Google Play Families program. We deliberately do not collect personal data from children: the game does not ask for a name, age, photos or recordings, and it has no chat, account, ads or links leading out of the game. Purchases require the parent's Google account and are protected by a parent gate; parents can also require approval for every purchase in Google Play or use Family Link parental controls. We do not knowingly collect personal information from children under 13 (or the equivalent age in your country). If you are a parent and believe your child has sent us data (for example by email), contact us and we will delete it.

Purpose and legal basis

• In-game purchases: performance of a contract (Art. 6(1)(b) GDPR), and keeping order data for accounting: legal obligation (Art. 6(1)(c) GDPR).
• Crash reports, complaints and contacting us: legitimate interest (Art. 6(1)(f) GDPR).

Transfers outside the European Economic Area

Google may also process data outside the EEA. Such transfers rely on mechanisms provided for in the GDPR, described in the Google Privacy Policy (for example the EU-U.S. Data Privacy Framework or standard contractual clauses).

How long

Data on the device – until you delete it. Payment data on Google's side – under the Google Privacy Policy. Order data visible to us – for the period required by tax and accounting law. Correspondence – as long as needed to resolve the matter.

Contacting us

If you write to us, we process your email address and the content of your message in order to reply (legitimate interest, Art. 6(1)(f) GDPR). We keep correspondence as long as needed to resolve the matter and then delete it. Our email is run on Google Workspace (Google Ireland Limited) – data may be transferred to the USA under the EU-U.S. Data Privacy Framework or standard contractual clauses.

This website

• mibboro-valley.dareia.eu uses no cookies, analytics, or scripts and fonts from third-party services – everything is served from our own server.
• To show the page, the server receives your IP address, the date and time, the page address and browser information. These go into technical logs used only for security and maintenance (legitimate interest, Art. 6(1)(f) GDPR); they are kept briefly and overwritten automatically.
• The server is hosted in Germany by OVH (OVH GmbH), which processes this data on our behalf.
• If you choose the site language yourself (PL / EN), your browser remembers the choice on your device (localStorage). It is not sent to us.
• The Google Play buttons are plain links – data goes to Google only after you click, under Google's terms.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Write to support@dareia.eu. You can also lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa) or with the data protection authority in your country.

The game sends us no data, so we hold nothing that could identify a player – you can delete game data yourself by clearing the app's data or uninstalling it. You manage purchase history in Google Play; for data processed by Google you can also contact Google directly.

Changes

We will announce changes to this policy in the game's update notes. The current version is always available at https://mibboro-valley.dareia.eu/privacy. This policy is also available in Polish; in case of differences, the Polish version prevails.

Back to the home page