POWDERLINE

1 · Who is responsible — Powderline (the game at powderlinegame.com and this website) is operated by Roman Princ, ID No. (IČO) 21782571, registered office Hluboká 4591/10, Mšeno nad Nisou, 466 04 Jablonec nad Nisou, Czech Republic ("we"), who is the data controller within the meaning of Regulation (EU) 2016/679 (the "GDPR"). For any privacy matter, including exercising your rights under section 10, write to powderlinegame@gmail.com or to the postal address above. We are not required to appoint a data protection officer.

2 · The short version — the game is playable without an account. We collect only what the features you choose to use require. The pages of this website may show advertising served by Google AdSense (section 14) — never inside a run, and in the EEA only after you have made a choice in the consent dialog. We ourselves do not track you across other websites. Our website statistics run on our own server without cookies and without storing your IP address. We never sell personal data and never share it for marketing. You can erase your account and everything in it yourself, in one click. The sections below list every category of data we touch, why, and for how long.

3 · Playing without an account — game state and preferences (rider name, time of day, sound, graphics quality, your best run, a stashed invite code, the session of any account you sign in to, and a same-day flag so a returning visit is not counted twice) are stored only in your browser's localStorage and never leave your device unless a feature below sends them. We set no cookies. The only data an anonymous player sends us is a leaderboard post you explicitly choose to make: the rider name you typed, score, distance and a timestamp.

4 · Website statistics — the pages of this website (not the game itself) load a statistics script from analytics.princdev.com, which is our own self-hosted installation of the open-source Umami software on our own EU server — not a third-party service. It records the page viewed, the referring site, browser and operating-system type, device type, screen size, language and the country derived from your IP address. The IP address itself is not stored, no cookie is set, and visitors are counted by a salted hash that is rotated regularly, so a person cannot be recognised across longer periods or across other sites. Legal basis: our legitimate interest in knowing how the site is used (art. 6(1)(f)). You may object at any time (section 10); browsers with "Do Not Track" enabled are respected where the software supports it.

5 · Traffic counters in the game — the game counts page loads as three aggregate numbers per calendar day: total loads, first-loads-of-the-day and signed-in loads. These counters contain no IP address, no identifier and no per-visitor records of any kind — they cannot be linked to you, by us or anyone else. Whether you are a "first load of the day" is decided by a date flag in your own browser.

6 · With a rider account — to run the game and keep your progress (art. 6(1)(b) GDPR, performance of our contract with you) we store: your e-mail address; your password, if you chose one (stored only as a salted hash, never readable by us); rider name; coin balance; cosmetic loadout; best run; game settings (motion blur, sound, the radio, time of day, render quality); ride log (distance, score, coins, duration, top speed, timestamps); quest progress; wheel-spin and unlock history; your invite code and — if you joined through an invite link — which rider invited you; and the time and version of the Terms and this policy you accepted (art. 7(1) — proof of acceptance). If you sign in with Google, we receive from Google your e-mail address, your Google display name (used as your initial rider name, which you can change) and a Google account identifier; we never receive your Google password. The sign-in step itself is performed by Google under its own privacy policy, as an independent controller. If you buy a coin pack, we additionally store the purchase record: pack, amount, currency, time and the Stripe checkout session id (art. 6(1)(b), and art. 6(1)(c) for accounting duties). Your e-mail is never shown to other players and never used for marketing. Access to account data is limited to the operator, for running and moderating the game.

7 · Feedback and screenshots — if you send feedback from the game, we store its type, your message, up to three screenshots you choose to attach, the time, and the account it came from, so that we can investigate the report, reply where needed and pay the report reward (art. 6(1)(b) and (f)). Screenshots are stored in EU storage and are visible only to the operator. Please do not include other people's personal data in a report. Reports and their screenshots are deleted when the report is closed and no longer needed, and in any case when you delete your account.

8 · E-mails — we send only transactional e-mails that an account needs: address confirmation, password reset, sign-in links, e-mail-change confirmation and security codes. They are sent from info@powderlinegame.com through Resend, Inc. (USA), which acts as our processor under an art. 28 data-processing agreement and, for any processing outside the EU, the European Commission's standard contractual clauses. Resend receives your e-mail address and the message content and retains delivery logs for a limited period. We send no newsletters and no marketing e-mail.

9 · 1v1 races — races connect the two players directly, peer-to-peer (WebRTC), so, like any direct connection, your IP address is visible to your opponent. During matchmaking your IP and a random peer id pass through third-party connection services: the PeerJS cloud signaling server, Google STUN servers and — only if a direct connection cannot be established — PeerJS TURN relays (EU/US, so your IP may briefly transit outside the EU). We store none of this, and it happens only while you race (art. 6(1)(b): providing the race you requested).

10 · Your rights — under arts. 15–21 GDPR you may request access to your data, a copy for porting, correction, erasure, restriction of processing, or object to processing based on legitimate interests (including the statistics in section 4), and you may withdraw any consent at any time without affecting past processing. Write to powderlinegame@gmail.com from the account's e-mail address so that we can verify it is you; we respond within one month (art. 12(3)), extendable by two further months for complex requests, in which case we tell you. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz) or with the supervisory authority of your own country.

11 · Infrastructure and recipients — our database, login provider and file storage is Supabase, hosted in the EU (Frankfurt), acting as our processor under an art. 28 data-processing agreement. The game and this website are served from an EU-hosted server whose web server keeps standard, short-lived access logs (IP address, time, requested URL, browser identification) for security and operations (art. 6(1)(f)); they are rotated away after about two weeks and are not combined with game data. Coin-pack payments are processed by Stripe: your card details go directly to Stripe and never reach us, and Stripe also retains its own records of your payments as an independent controller for its legal obligations (it may process payment data outside the EU under its own safeguards — see stripe.com/privacy). E-mail delivery is described in section 8 and Google sign-in in section 6. Beyond these providers, we disclose personal data only where the law requires it, or where it is necessary to establish, exercise or defend legal claims (art. 6(1)(f)).

12 · Retention and deletion — account data is kept for as long as the account exists. When you delete the account it is erased immediately and permanently: profile, rides, quests, coins, skins, invite relations, feedback and screenshots, and leaderboard entries posted while signed in. Delete it yourself under ACCOUNT → DELETE ACCOUNT (it takes effect at once), or e-mail us. Our copy of any purchase record is erased with the account, except where accounting law obliges us to keep an invoice record, and Stripe keeps its own payment records for as long as its legal obligations require. Anonymous leaderboard posts are not linked to you — e-mail us to have one removed. Aggregate daily counters (section 5) and website statistics (section 4) contain nothing personal and are kept for the game's statistics.

13 · Security — all traffic is encrypted in transit (TLS), passwords are stored only as salted hashes, and every database table is protected by row-level security so one player can never read another's data. We collect little precisely so that little can leak. No system is perfectly secure; should a breach nevertheless affect your data, we will notify the supervisory authority and, where the GDPR requires it, you, without undue delay.

14 · Advertising (Google AdSense) — the content pages of the website (home, guides, updates, about, contact, credits and the policy page) include the Google AdSense script and, once Google has approved the site, show advertising served by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This game screen carries no ads during a run. To serve ads, cap how often you see the same one, measure that an ad was shown and detect fraud, Google and its certified advertising partners may use cookies and similar identifiers (including the DoubleClick IDE cookie) and may, with your consent, personalise ads based on your visits to this and other websites. In the EEA, the United Kingdom and Switzerland that consent is asked for through Google's own consent dialog on the website pages, which follows the IAB Transparency & Consent Framework; if you decline, Google shows ads that use no cookies for personalisation, or none at all, and you can change your choice any time via the "Privacy settings" link in the website footer. Legal basis: your consent (art. 6(1)(a) GDPR and the ePrivacy rules on cookies) for anything stored on your device or personalised; our legitimate interest (art. 6(1)(f)) in funding a free game for non-personalised ads. Google's use of the data is described at policies.google.com/technologies/partner-sites; opt out of personalised advertising at adssettings.google.com. The "free spin" rewarded-video screen in the shop is still an inert placeholder: if rewarded videos ever go live, this section will say so first, and they play only when you press the button.

What we still don't do — no cross-site tracking of our own, no fingerprinting, no profiling, no automated decision-making with legal or similar effect, no AI processing of your data, no selling or sharing of data for marketing. Advertising data collected by Google is governed by Google's privacy policy, not stored by us, and never joined to your rider account.

15 · Children — the game is playable without an account and collects no more data from children than from anyone else. Creating an account requires the age set out in the Terms (15, or a parent's or guardian's permission). Parents or guardians can write to us at any time to have a child's account, posts or feedback removed.

16 · Changes — changes to this policy are published here with a new version number and effective date; material changes are additionally announced in the game before they take effect.

Version 5 — published 6 October 2026, adding your game settings to what section 6 lists as stored with a rider account, so they follow you to every device you sign in on. Version 4 — published 15 September 2026, adding section 14 on advertising (which concerns the website pages and stores nothing about your rider account). Otherwise unchanged from version 3 of 6 September 2026, effective immediately for new accounts and from 20 September 2026 for existing riders (version 2 of 18 August 2026 applies to them until then).

1 · Who we are & what this covers — Powderline is a free browser game operated by Roman Princ, ID No. (IČO) 21782571, registered office Hluboká 4591/10, Mšeno nad Nisou, 466 04 Jablonec nad Nisou, Czech Republic ("we", "us"). These terms govern the game, this website, rider accounts, leaderboards, quests, coins and cosmetics, purchases, 1v1 races, and the feedback you send us (together, the "service"). Contact for anything in these terms: powderlinegame@gmail.com. How we handle personal data is described in the Privacy Policy, which forms part of these terms.

2 · Acceptance & changes — by playing you accept these terms; if you do not agree, do not play. Creating an account requires explicit acceptance (the checkbox at sign-up, or continuing with Google where the sign-up screen says so); we record the time and the version of the terms you accepted. We may amend these terms for legal, regulatory, security, technical, economic or gameplay reasons. The current version, with its effective date, is always published on this website and in the game menu; material changes are announced in the game at least 14 days before they take effect, unless a shorter period is required by law or to address a security or legal risk. If you do not agree with a change, stop playing and, if you have an account, delete it before the effective date; continued use after the effective date means acceptance.

3 · Eligibility & your account — you must be at least 15 years old to create an account, or have a parent's or guardian's permission (the game itself is playable without an account at any age). One account per person, registered with a real e-mail address or Google account you control. Keep your credentials to yourself — we will never ask for your password — and tell us promptly if you believe your account has been compromised; you are responsible for activity on your account until you do. Rider names are unique; we may change or remove a name that is offensive, misleading, impersonates someone or infringes rights. We may refuse, suspend or close accounts under section 8. You can delete your account at any moment under ACCOUNT → DELETE ACCOUNT; deleting is as easy as signing up and takes effect immediately.

4 · The service — free to play (with optional coin purchases under section 9), provided "as is" and "as available", with no warranty of availability, uninterrupted or error-free operation, compatibility with your device or browser, or preservation of progress. The game is under continuous development: features, the economy, drop odds, difficulty, the leaderboards and the game itself may be changed, rebalanced, reset, suspended or discontinued at any time without compensation — though we will stop selling coin packs ahead of any permanent shutdown and give reasonable notice where we can. You are responsible for your device, browser, internet connection and any data charges. Nothing in these terms limits your mandatory statutory rights.

5 · Health & safety — the game contains fast motion, rapidly changing images and light, and repetitive inputs. A small number of people may experience seizures or discomfort from such content; if you or anyone in your family has an epileptic condition, consult a doctor before playing, and stop immediately if you feel dizzy, disoriented, nauseous or unwell. Take regular breaks. The tricks in the game are simulated and exaggerated: do not attempt to imitate them or any in-game behaviour in real life. We are not liable for injury or loss caused by real-world imitation of the game.

6 · Fair play & prohibited conduct — you must not: cheat, exploit bugs for advantage, or use bots, scripts, macros, modified clients or any automation to play, to post scores or to interact with the service; probe, scan, overload, disrupt or interfere with the service, its API or its infrastructure, or bypass any limit, cap or security measure; access or attempt to access another person's account or data; create or control multiple accounts to farm invite rewards, quests, coins or feedback rewards; impersonate other people or misrepresent your affiliation; use rider names, leaderboard entries, feedback or screenshots that are offensive, hateful, sexual, threatening, harassing, misleading, unlawful or infringe anyone's rights; harass or abuse other riders, in races or elsewhere; copy, scrape, decompile, reverse-engineer, re-host, frame or create derivative works of the game or its assets except to the extent mandatory law expressly permits; use the service for any commercial purpose without our written permission; or sell, buy, trade or transfer accounts, coins or items. Report exploitable bugs to us instead of using them — a report that leads to a fix is rewarded (section 10).

7 · Your content — rider names, leaderboard posts, feedback and screenshots you submit remain yours. You grant us a worldwide, non-exclusive, royalty-free licence to store, reproduce, display and use them for the purpose of running, moderating, securing and improving the service: leaderboard names and scores are shown publicly for as long as the entry stands; feedback and screenshots are used internally. You confirm that you have the right to submit what you submit, that it contains no unlawful material and no personal data of other people, and that it does not infringe anyone's rights. We may remove or refuse any content without notice if we believe it breaks these terms or the law. Illegal content or conduct can be reported to powderlinegame@gmail.com; we review reports and act on them without undue delay.

8 · Enforcement — if these terms are broken we may, in proportion to the breach: warn you; remove leaderboard entries, names or content; revoke coins, items or rewards gained through abuse; restrict features; and suspend or delete the account. Where practicable we will tell you what rule was broken. You can object to any measure at powderlinegame@gmail.com and we will review it. We may report unlawful conduct to the competent authorities.

9 · Coins, cosmetics & purchases — coins and cosmetic items are virtual content, not money or property: they have no monetary value, exist only as a limited licence to use them in the game, which ends with the account, and they cannot be sold, transferred between accounts, exchanged or cashed out. Coins are earned through quests, invites and feedback rewards, or bought as coin packs in the shop, with the final price including VAT shown at checkout. Payments are processed by Stripe under its own terms; we never see your card details. Purchased coins are delivered to your account within seconds of payment — by buying you expressly request this immediate delivery and acknowledge that, once delivered, the 14-day right of withdrawal for digital content no longer applies (art. 16(m) of Directive 2011/83/EU, § 1837(l) of the Czech Civil Code). Your statutory rights for digital content that does not conform to the contract are unaffected — if paid coins do not arrive or do not work, write to us and we will fix it or refund you. Otherwise purchases are non-refundable to the extent the law allows. If you are a minor, buy only with a parent's or guardian's consent. Deleting the account forfeits any remaining coins and items. Wheel odds are published in the shop, including the legendary pity timer; the economy may be rebalanced under section 4, but coins you bought will never be taken away except where a payment is reversed, disputed or found to be fraudulent, in which case we may remove the coins and items obtained with it and suspend the account.

10 · Feedback rewards — we may reward a bug report or suggestion with coins when, in our judgement, it leads to a change in the game. Rewards are discretionary: there is no entitlement to a reward, duplicate, vague or spam reports are not rewarded, our decision on whether a report qualifies is final, and the programme may be changed or ended at any time.

11 · Leaderboards — by posting a run you grant us the right to display the rider name, score and distance you submitted, publicly and for as long as the entry stands. Entries that break section 6 may be removed, and boards may be reset when the game or its economy changes materially. Anonymous entries can be removed on request (see the Privacy Policy).

12 · 1v1 races — races run peer-to-peer between the two players. We do not operate the connection infrastructure (PeerJS, STUN/TURN servers) and are not responsible for its availability, for the quality of the connection, or for your opponent's conduct. Racing reveals your IP address to your opponent — see the Privacy Policy. We do not guarantee that an opponent will be available.

13 · Ownership & your licence — the game, its code, artwork, sounds, name and logo belong to us or to their respective authors (third-party assets are credited in the project's CREDITS file and used under their own licences). You receive a personal, non-exclusive, non-transferable, revocable licence to play the game in your browser for private, non-commercial purposes. You may record and publish videos or streams of your own gameplay, including on monetised channels, provided they are not misleading and do not present the game as your own. Any other reproduction, distribution, re-hosting, framing or extraction of the game or its assets requires our written permission.

14 · Third-party services — parts of the service rely on third parties: Stripe (payments), Google (sign in with Google), Supabase (hosting of accounts and data), Resend (e-mail delivery) and PeerJS/STUN/TURN (races). Their terms and privacy policies apply to your use of them, and we are not liable for their availability or conduct.

15 · Liability — the service is free, and to the extent permitted by law we are liable only for damage caused intentionally or by gross negligence. We are not liable for loss of virtual items, coins, progress or leaderboard entries; for unavailability, interruptions or changes of the service; for the acts of other riders or of third-party services; for damage caused by your own device, browser, connection or by your breach of these terms; or for real-world imitation of the game (section 5). Nothing in these terms excludes or limits liability that cannot legally be excluded or limited — in particular liability for harm to life or health, for intentional or grossly negligent conduct, and your mandatory rights as a consumer.

16 · Indemnity — to the extent permitted by the law applicable to you, you will compensate us for losses, costs and claims by third parties that arise from your breach of these terms, from content you submitted, or from your unlawful use of the service.

17 · Termination — you may stop playing and delete your account at any time. We may suspend or terminate your access or account for breach of these terms (section 8), where the law requires it, or, with reasonable notice where possible, if we discontinue the service. On termination your licence ends and any coins and items are forfeited, without prejudice to section 9 and to your mandatory rights; personal data is handled as described in the Privacy Policy.

18 · Law & disputes — these terms are governed by the laws of the Czech Republic; if you are a consumer, the mandatory protections of the law of your country of residence still apply, and nothing here deprives you of the right to bring proceedings before the courts of that country. Please contact us first — most issues are solved by e-mail. Consumers in the Czech Republic and the EU may use alternative dispute resolution before the Czech Trade Inspection Authority (Česká obchodní inspekce, Štěpánská 567/15, 120 00 Praha 2, coi.cz) or another body entitled to resolve consumer disputes in their country.

19 · General — if any provision of these terms is invalid or unenforceable, the remaining provisions stay in force. Our failure to enforce a provision is not a waiver of it. We may transfer these terms and the service to a successor operator, telling you in advance; you may not transfer your account or rights under these terms. These terms are the entire agreement between you and us regarding the service. They are written in English; a translation, if offered, is for convenience and the English text governs to the extent the law allows.

Version 3 — published 6 September 2026. Effective immediately for new accounts and from 20 September 2026 for existing riders (version 2 of 18 August 2026 applies to them until then).