Legal notice and privacy

Legal notice

This website promotes the video game Pongzi Scheme. In compliance with Spanish Law 34/2002 on Information Society Services (LSSI-CE), the owner of this website is:

Owner

Joel Vargas Medal, trading as IndieOffshore

Tax ID (NIF)

43206168R

Address

Santa Ponsa, 07180 Calvià, Illes Balears, Spain

Email

[email protected]

Pongzi Scheme is a work of satire. Nothing on this website is financial or investment advice, and no money is collected here. The minigame score is fictional.

Texts, images and code on this website belong to IndieOffshore unless stated otherwise. The press kit files may be used to write about or promote the game. Steam and the Steam logo are trademarks of Valve Corporation. Bluesky, YouTube, TikTok and Instagram are trademarks of their respective owners.

Privacy policy

The data controller is the owner named above. You can reach us at [email protected] for any question about your data.

What we collect and why

• Your fund name. To play you register a name of 3 to 12 letters or numbers. We store it with a salted SHA-256 hash of a random code that your browser keeps, so only you can use that name. The name and your best score are public on the leaderboard. Legal basis: our legitimate interest in running the leaderboard (GDPR art. 6.1.f); choosing a name is optional and it does not need to be your real name.
• Your records. When you beat your personal best we store the score, the length of the game and the date, linked to your fund name. Purpose: the global ranking. Same legal basis.
• A scrambled version of your IP address. When you register a name or file a score we store a salted SHA-256 hash of your IP address, never the address itself. Purpose: limit registrations and scores to 5 of each every 10 minutes and stop abuse. Legal basis: legitimate interest in keeping the ranking fair. The hash is deleted after 30 days.
• On your own device. The minigame saves your fund name, its random code, your best score and your best streak in your browser's local storage. Clearing your browser data removes them, and with them your access to that fund name.

We do not use analytics, advertising trackers or cookies of our own.

How long we keep it

Fund names and records stay while the leaderboard exists. We remove offensive names, and any name and its records on request. IP hashes are deleted after 30 days.

Who processes it

The website and the leaderboard database are hosted by Cloudflare, Inc., which acts as our processor and may process technical data such as IP addresses to deliver and protect the site. Cloudflare transfers data under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

Third-party content

• YouTube. The trailer only loads from YouTube's privacy-enhanced domain (youtube-nocookie.com) after you press play. From then on, Google's privacy policy applies.
• Steam. The store widget only loads from Valve's servers after you press its button. From then on, Valve's privacy policy applies, and Valve may set cookies.
• External links to Steam, Bluesky, YouTube, TikTok and Instagram, and the share buttons of the minigame, take you to sites with their own privacy policies.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, and object to its processing, by writing to [email protected]. Tell us your fund name so we can find your records. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.

Cookies

This website sets no cookies. The only things it stores on your device are your fund name, its random code and your minigame records, in local storage, because you played. Third-party content (the trailer and the Steam widget) only loads when you ask for it.