Privacy policy

This policy explains how personal data is processed in the Femma World game. It has been drawn up in accordance with Article 13 of the EU General Data Protection Regulation ((EU) 2016/679). This is a translation of the Finnish privacy policy; if the versions differ, the Finnish version prevails.

In short: Femma World does not collect identifiable personal data about its players. The game has no user account, cookies or advertising. Game progress is saved only in the player’s own browser. Anonymous usage statistics about the game are compiled without cookies. Personal data is processed only in the technical logs of the game’s web server and briefly when compiling the usage statistics.

1. Controller and contact details

Digitahti Oy (business ID 3514735-2)
Email: info@digitahti.fi

Questions and requests concerning data protection can be sent to the email address above.

2. Game data in the player’s own browser

Game progress is saved in the browser of the player’s device (IndexedDB). The saved data consists of finished areas and their solutions, an unfinished area, the park name, settings, femma coins, purchased and placed decorations, and the game’s timestamps. The data is not transferred to Digitahti Oy or anyone else, and it cannot be linked to the player.

• Language choice: the chosen language is saved in the browser’s local storage (localStorage) so that the game opens in the same language next time.
• Game files: the game stores its own files (program, images and sounds) in the browser’s cache so that it also works without an internet connection and can be installed as an app. The cache contains no data about the player.
• The player can delete the data by clearing the browser’s site data.
• Backup: the player can download a file of their park and import it back in the settings. The file is saved only on the player’s device.
• Moving the park to the new address: when a player moves their park from the old address to femmaworld.com, the park data travels in the # part of the address. The browser does not send this part to the server, and the game removes it from the address bar right after the transfer.

The player writes the park name themselves. It is best not to include personal data in the name, even though the name stays in the player’s own browser.

3. Technical logs of the web server

When the browser fetches the game’s pages and files, the web server records technical details of the request. These include the IP address, the requested address, a timestamp, the browser identifier (user agent) and the status of the response.

• Purpose: delivering the game to the browser, ensuring that the service works, and preventing misuse and attacks.
• Legal basis: the controller’s legitimate interest in providing a working and secure service (Article 6(1)(f) of the General Data Protection Regulation).
• Retention period: logs are kept for a short period in line with the service provider’s practice and then deleted.

4. Usage statistics

The game’s pages use Vercel Web Analytics, which compiles anonymous statistics about how the game is used, such as how many visitors the game has and on which devices it is played. The statistics do not use cookies and do not store anything on the player’s device.

• Data collected: the page opened, without the # part of the address, the page the visitor came from, country and region, operating system, browser, device type and a timestamp.
• Identifying visits: page loads by the same visitor are linked with a hash calculated from the request, which is discarded within 24 hours. IP addresses are not stored in the statistics, and no individual player can be identified from them.
• Purpose: developing the game and following how it is used.
• Legal basis: the controller’s legitimate interest in developing the game (Article 6(1)(f) of the General Data Protection Regulation).
• Retention period: the aggregated statistics are kept in Vercel’s service for the period of its service plan.

5. Processors and transfers outside the EU

The game is published on a service of Vercel Inc. Vercel processes the data mentioned in sections 3 and 4 on behalf of Digitahti Oy under a data processing agreement. Vercel is a US company, so the data may be processed outside the European Economic Area. Vercel is certified under the EU–U.S. Data Privacy Framework. Standard contractual clauses approved by the European Commission may also apply to the transfers.

The data is not sold or disclosed to others, and it is not used for marketing or profiling.

6. Cookies and tracking

The game does not use cookies, advertising or third-party tracking. The usage statistics (section 4) are compiled without cookies, and they are not used to follow visitors on other websites. The game does not load external fonts or other resources from third parties either. The browser’s storage is used only to save the game, remember the language choice and store the game’s files for playing without an internet connection, not for tracking.

7. Femma coins and the shop

Femma coins and shop items exist only within the game, and their data is saved only in the player’s browser. It is currently not possible to pay with real money in the game. If paid features, user accounts or cloud saving are introduced later, this policy will be updated before they are introduced.

8. Your rights

Under the General Data Protection Regulation, you have the right to:

• know whether personal data concerning you is processed, and access it;
• have inaccurate data rectified;
• have data erased or its processing restricted;
• object to processing based on legitimate interest; and
• have your data transferred to another system when the processing is based on consent or a contract.

Because the game data is only in your browser, you can view, export and delete it yourself. Requests concerning log data can be sent to info@digitahti.fi. Log data usually cannot identify an individual person, so handling a request may require further details, such as the IP address you used and the time. No individual can be identified from the usage statistics, so no data concerning you can be extracted from them.

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data violates data protection law. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).

9. Children

The game can be played by people of all ages. Because the game does not collect identifiable personal data about players and has no user account, playing does not require a guardian’s consent to the processing of personal data.

10. Changes to this policy

This policy is updated when the game’s data processing changes. The current version and its update date are always on this page.