Privacy Policy

Last updated: 18 April 2026

This Privacy Policy describes how the Poknort app (available at grimterms.com) collects, processes and protects users' personal data. We operate in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data controller

The data controller is the operator of Poknort at grimterms.com. Contact for privacy matters: contact@grimterms.com.

2. What data we collect

• Parent accounts: name, e-mail address, password (stored as a hash).
• Child accounts: first name (or nickname), assignment to a parent account (guild). We do not collect e-mail addresses from children.
• Game data: hero progress, completed tasks, inventory, expedition results, in-game currency.
• Device identifiers: session tokens and device tokens used for password-less child login.
• Technical data: error logs necessary for operation.

3. Children's data - parental consent required

Poknort is a family app designed for children aged 6-14. Child accounts may only be created by a parent or legal guardian holding an administrator (parent) account. By creating an account and adding a child to a guild, the parent consents to the processing of the child's data as described in this policy.

Under GDPR article 8, consent from a parent or legal guardian is required for children under 16. We do not collect any contact data (e-mail, phone number) from children.

4. Purpose of processing

• Ensuring proper functioning of the app (GDPR art. 6(1)(b)).
• Managing user accounts and authentication.
• Saving game progress and task history.
• Communicating with users about their account.

5. Sharing data with third parties

We do not share personal data with any third parties for marketing, advertising or commercial purposes. Data is not sold or rented. We do not use external analytics, advertising or user tracking systems.

Exceptions are the payment processors required to handle in-app purchases:

• Google Play Billing (Google Ireland Ltd.) - processes payments for the full game purchase. Google receives the user's Google account data and the identifier of the purchased product. Google privacy policy: policies.google.com/privacy.
• RevenueCat, Inc. (USA) - purchase verification infrastructure provider. RevenueCat receives an anonymous user identifier (Poknort account UUID) and purchase status. It does not receive e-mail addresses, names or other personal data. RevenueCat privacy policy: revenuecat.com/privacy.

6. No ads, no tracking

Poknort contains no advertising. We do not use cookies to track users, tracking pixels, or third-party SDKs for profiling. The only technical data stored locally is used solely to maintain the user session.

7. Data storage

All data is stored exclusively on servers located in the European Union - VPS servers operated by Hetzner Online GmbH (Germany). Data is not transferred outside the EEA.

Data is retained for the duration of the user's account. After account deletion, data is permanently removed within 30 days.

8. User rights (GDPR art. 15-17)

You have the right to:

• Access your data (GDPR art. 15).
• Rectification of incorrect data (GDPR art. 16).
• Erasure ("right to be forgotten", GDPR art. 17).
• Restriction of processing (GDPR art. 18).
• Data portability (GDPR art. 20).
• Objection to processing (GDPR art. 21).

To exercise these rights, contact us at contact@grimterms.com. We will respond within 30 days.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

9. Contact

For privacy matters contact: contact@grimterms.com