Privacy Policy
Last updated: 5 October 2026
This policy explains what personal data Nat21 collects when you use the Nat21 website and app, how it is used and shared, and what rights you have.
Who is responsible
Nat21 is operated by Michal Petr, who is the controller of your personal data. You can reach us at michal.t.petr@gmail.com.
What we collect
When you sign in with Google, we receive and store:
- your Google account ID, which identifies your account,
- your email address and whether Google has verified it,
- your name,
- the address (URL) of your Google profile picture.
We only request Google's basic sign-in permissions (openid, email and profile). We have no access to your contacts, files, email messages or any other
data in your Google account.
We also store what you create in Nat21: your games with their names and descriptions, the maps in them and everything placed on those maps, and the nickname, role and join date for each game you are a member of.
To keep you signed in, Nat21 stores a sign-in cookie or token in your browser. Our server processes your IP address in order to deliver pages and respond to requests. We do not use analytics, advertising or tracking cookies.
How we use it
- to create your account and sign you in,
- to show your name and profile picture to the other members of the games you join,
- to save your games and maps and show them to you and your fellow players,
- to keep Nat21 secure and to fix problems.
We do not sell your data, use it for advertising or profiling, or use it to train artificial intelligence models.
Google user data
Nat21's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the data we receive from Google only for the purposes described in this policy.
Who can see your data
- Other members of a game you are in can see your name, profile picture, nickname and role in that game. They cannot see your email address.
- The Nat21 administrator can see your account details, including your email address, in order to run the service.
- Our hosting provider, Oracle Cloud Infrastructure, stores the data on our behalf on servers in the European Union.
- Profile pictures are loaded directly from Google's servers, so Google receives the request when your or another player's browser displays one.
We do not share your data with anyone else unless the law requires us to.
Legal basis
We process your data under the EU General Data Protection Regulation (GDPR) because:
- it is necessary to provide the service you signed up for (Article 6(1)(b) GDPR), and
- we have a legitimate interest in keeping Nat21 secure and working (Article 6(1)(f) GDPR).
How long we keep it
We keep your data for as long as you have an account. If you ask us to delete your account, we delete it within 30 days, together with the games you own and your membership in other games.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email us at michal.t.petr@gmail.com.
You can remove Nat21's access to your Google account at any time in your Google Account settings.
If you believe we handle your data unlawfully, you can lodge a complaint with a data protection authority, such as the Czech Office for Personal Data Protection.
Children
Nat21 is not intended for children under 15.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will also let you know in Nat21.
Contact
Questions about this policy or your data? Email michal.t.petr@gmail.com. See also our Terms of Service.