Privacy policy
Last updated: 2026-10-28
Who runs Decernimus
Decernimus is a free community story game in beta, run by Marcin Dudek. He decides how your data is used.
For any question or request about your data, write to [email protected]
The short version
- You do not need an account to play.
- Reading pages sets one cookie and stores nothing about you on the server.
- There are no analytics and no ad or tracking cookies. The one third-party script is the BuildHop feedback button.
- What you write in the game is public.
The one cookie
Your first visit sets one cookie, gw_sid, holding a random id. It keeps the same pseudonym on screen while you look around. Nothing about you is stored on the server until you first act in the game (vote, write an argument, press Convinced me, send a chat message or report a post). Then the server creates a guest identity for you under that pseudonym.
The gw_sid cookie is HttpOnly, Secure and SameSite=Lax, and it lasts 1 year. It only links your browser to your pseudonym. It is not used for tracking or ads.
What we store
The game keeps these in a database on its server:
- Your pseudonym and your session id (the value of your cookie), with the time it was created.
- Your vote and every change of your vote, with the reason you give and the argument that convinced you, if you name one.
- The arguments you write.
- Your Convinced me marks, with the time you gave them.
- Your chat messages.
- The reports you send about arguments, with the reason you give and the time.
- The time of every vote, argument and message.
Each vote and vote change is also logged with your IP address, your browser's user agent and your session id. We use these to spot abuse, such as ballot stuffing.
What others can see
Your pseudonym, your arguments and your chat messages are public. Anyone who visits the site can read them. Do not put personal data in them. An argument that several players report is hidden automatically.
How long we keep it
The IP address, user agent and session id in the vote log are deleted automatically after 90 days. The web server also keeps ordinary access logs (IP address, browser, page requested) for 14 days. The rest is the history of the game. We keep it while the game runs, unless you ask us to delete it.
If you sign in with Google (not yet available)
Google sign-in is built but turned off. If we turn it on, it asks Google only for the openid and profile scopes. It does not ask for your email.
We would store your Google account id and your profile name. Other players see your real name only if you choose to show it.
Where your data lives
The server is a VPS at Hetzner in Finland, in the EU. The site runs behind Cloudflare, a CDN and proxy that processes IP addresses to deliver the pages. The feedback button is loaded from BuildHop (buildhop.io). Your browser contacts BuildHop when a page loads, and BuildHop receives whatever you send through that button. No one else processes your data for us.
Why we may use it
Under the GDPR, we use your data to run the game you chose to take part in. That is the contract between us, and our legitimate interest in running it.
We keep the IP address, user agent and session logs for 90 days, and server access logs for 14 days, to prevent abuse and keep the site running. That is our legitimate interest too.
Your rights
You can ask to see your data, to correct it, to delete it, or object to how we use it.
There is no login, so tell us your pseudonym when you write. Your gw_sid cookie is what links you to it.
Send your request to [email protected]
You can also complain to a data protection authority. In Poland that is UODO (uodo.gov.pl).
Age
You must be at least 16 to play.
Changes
If this policy changes, we update this page and the date at the top, and announce it on the site.