Mineralium Privacy Policy
1. Data controller and contact details
The personal data controller is Maria Andreevna Kopylova, an individual applying the professional income tax regime (self-employed), operating under the Yolgiks brand. Contact: neglottu@mail.ru. Website: mineralium.online.
This policy applies to website visitors, guest and registered players, and support enquiries. It explains how data is processed and does not replace separate consent where required.
2. What data we need and why
We receive data from you, your browser, your chosen sign-in service, the payment service and during gameplay.
| Purpose | Data |
|---|---|
| Creating a profile and signing in | Player ID, nickname, email and authentication data. Passwords are stored on the server as hashes. When signing in through VK ID or Yandex ID, we receive an identifier and the email provided by the service |
| Saving and resuming the game | Game state, moves, results and replays, resources, items, achievements, language and settings |
| Leaderboards and replays | Nickname, score and related game information available to other visitors |
| Protecting the game and resolving faults | IP address, player ID, timestamps and security event information; loading metrics, errors and technical identifiers for the visit and browser |
| Analysing visits | Referral source, campaign tags, landing page, time, country and website interactions; this information may be linked to a game profile |
| Placing and fulfilling purchases, refunds and tax records | Player ID, order number and contents, amount and currency, Offer version, payment, delivery and refund timestamps and status; payment and receipt information needed to verify transactions and meet tax obligations |
| Responding to enquiries | Contact details, the content of the enquiry and account information needed to respond |
Personal data is processed in accordance with the laws of the Russian Federation. The data used is limited to what is necessary for the purposes listed above.
We process data primarily by automated means: we collect, record, store, use, update, transfer it in the circumstances described, block it and delete it. Enquiries may be handled by the controller or an authorised person.
3. Browser storage and Yandex Metrica
Your browser stores sign-in information, settings, local game data and analytics identifiers. You can delete them using your browser controls. This may result in the loss of guest access and local saves, but does not automatically delete your server-side profile.
We use Yandex Metrica, provided by YANDEX LLC (16 Lev Tolstoy Street, Moscow), to analyse traffic and improve the website. The service processes information about pages and navigation, your device and browser, cookie identifiers, website activity and loading metrics.
Metrica uses cookies and browser local storage. Learn more: data collected by the tag, cookies and their lifetimes, service terms.
4. Data access and transfers
Data is accessible to the controller and authorised persons who need it to operate the game and handle enquiries. Data is transferred to Yandex for analytics; when you use an external sign-in option, the game communicates with your chosen authentication service. Data is provided to public authorities where there is a legal basis.
For payment, the Game sends Robokassa the order number, contents, amount and currency, and receives payment confirmation to credit the purchase. The buyer enters payment details and the receipt contact directly on the Robokassa page. The Game does not request or store full bank card numbers or card security codes and does not require separate entry of a contact for the receipt. Robokassa processes information needed for payment, refunds and receipts under its own terms and Privacy Policy. Through Robocheki SMZ, transaction information is transmitted to the Federal Tax Service to generate a professional income tax receipt and record income.
5. Retention and protection
We retain data no longer than required for the relevant purpose, taking statutory obligations into account.
Account and progress data is used to provide the game; event information is used for security and website performance analysis. Order, payment and refund data is retained to fulfil purchases, handle enquiries and meet statutory obligations, including tax obligations. Deleting a game account does not end mandatory retention of such information where a lawful basis remains. Once the purpose of processing has been fulfilled and there is no longer a legal basis for continued retention, personal data must be deleted or anonymised in accordance with the procedure established by law.
Aggregated statistics may be retained to analyse and develop the game if they do not allow a specific individual to be identified directly or indirectly. Removing a name or email alone does not turn an individual player's history into such statistics.
The controller takes legal, organisational and technical measures to protect personal data against unlawful access, alteration, disclosure and destruction.
6. Your rights and how to contact us
You may request information about the processing of your data, request correction, blocking or deletion where there are grounds to do so, and challenge the controller's actions before Roskomnadzor or a court. If processing is based on consent, you may withdraw it.
Send your enquiry to neglottu@mail.ru. Include your question and information that allows us to locate the account; we will verify that the request comes from its owner or representative. Requests are handled in accordance with the procedures and time limits established by Russian law. Withdrawal of consent does not stop processing for which an independent legal basis remains.
The current version of this policy is published on this page.