Privacy Policy

The Buckvale team is responsible ("controller") for the personal data processed when you play Buckvale. We collect as little as we can, we never sell your data and we don't show ads.

What we collect, and why

• Account: your email address and a securely hashed password (we can't read it). Used to give you an account and keep it safe. Legal basis: performing our contract with you.
• Game progress: your grove, items, settings and grove name, so the game works and is the same on every device. Legal basis: contract.
• Purchases: what you bought, when, the price and currency, and payment references from Stripe. Legal basis: contract, and our legal duty to keep accounting records.
• Age answer: your birth year (and month if needed) before your first purchase, to keep purchases 18+ only. Legal basis: legal obligation and our legitimate interest in protecting minors.
• Reports you send: your message, an optional screenshot and basic technical details (browser, screen size, game version). Used to answer you and fix bugs. Legal basis: legitimate interest.
• Security logs: IP address and request times, kept briefly to block abuse and attacks. Legal basis: legitimate interest.
• Analytics (only if you allow it): how the game is used, through Google Analytics. Legal basis: your consent, which you can withdraw any time.

Who we share it with

Only with service providers who process data for us under contract:

• Our hosting provider in the European Union (servers and backups).
• Stripe (payments). Stripe receives your email and payment details directly and is also a controller for fraud prevention: see stripe.com/privacy.
• Google (analytics, only with your consent), with advertising features turned off. See policies.google.com/privacy.

Some providers may process data outside the EU/UK (for example in the USA). Such transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We share data with authorities only when the law requires it.

How long we keep it

• Account and game data: while your account exists. Guest groves that are never saved are removed after 12 months without play.
• Purchase records: as long as tax and accounting law requires (usually up to 10 years), without your email once the account is deleted.
• Reports: up to 24 months. Security logs: up to 30 days. Analytics: 14 months.

Your rights

You can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent at any time. Delete your account yourself in Settings → Account, change your cookie choice in Settings → Privacy, and send any other request to the Help & feedback form in the game’s Settings. We answer within one month.

If you are unhappy with how we handle your data you can complain to a data protection authority, for example in the country where you live. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

US residents

We don't sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information. Residents of California and other US states have the right to know, delete and correct their data and not to be discriminated against for using these rights: use the contact below. We honour the Global Privacy Control signal as an opt-out of analytics.

Children

Buckvale can be played as a guest without giving any personal details. Accounts are for players aged 13 or over (or with a parent's permission where the law requires it). If you believe a child gave us personal data without permission, contact us and we will delete it.

Security

Connections are encrypted (HTTPS), passwords are hashed, payment card data never reaches our servers, and access to player data is limited to admins who use two-factor sign-in.

Changes and contact

We will tell you in the game about important changes to this policy. Privacy questions or requests: the Help & feedback form in the game’s Settings.

Last updated 15 November 2026