Šumadija

Privacy policy

Last updated: November 5, 2026

In short: no tracking cookies, no analytics and no ad scripts. We only store personal data (your email) if you choose to create an account for cloud saves. An account is optional.

Who we are

Šumadija is an independent game. For any question about data, write to [email protected].

The website shumadija.xyz

  • The site sets no cookies and uses no analytics (Google Analytics or similar).
  • The site is served through Cloudflare, which delivers pages and protects against attacks. In doing so Cloudflare processes technical data such as your IP address, country and browser type. We use the country only to send you from the front address to the Serbian or English version; we do not store it.
  • Fonts and images are hosted on our own server; nothing is loaded from third-party sites.

The browser game (game.shumadija.xyz)

  • Your village is saved in your browser’s storage (localStorage) on your device. Without an account it is not sent to us.
  • Clearing the site’s data in your browser also deletes the saved game.

The Android app

  • The app has no internet permission and sends no data.
  • The game is saved only on your phone.

Account and cloud saves

In the browser game you can (but don't have to) create an account to continue the same village on another device. If you do, we store:

  • your email address (used only for signing in),
  • your password in protected form (an argon2id hash; we don't know your password and can't read it),
  • the saved games the game sends (the state of your village),
  • when the account was created and last signed in, and your sign-in session (a sid cookie used only to keep you signed in, valid for 90 days).

The data is on our server at the hosting company Contabo, behind Cloudflare. The database is backed up every night and backups are kept for 7 days. We don't sell or share it, and we don't send marketing email.

You can delete your account and all saved games yourself: in the game, Nalog i čuvanje u oblaku › Obriši nalog (Account › Delete account). Deletion is immediate; it disappears from backups within 7 days. You can also write to us and we'll do it for you.

Advertising

If we advertise the game (for example on social media), we will not add tracking to the site without first updating this page and, where the law requires it, asking for your consent.

Your rights

Under the Serbian Personal Data Protection Act and the GDPR you have the right to know what data we hold about you, to ask for it to be corrected or deleted, and to object. You can also contact the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or your local data protection authority.

Children

The game is for all ages and works without an account. Children under 15 may only create an account with a parent’s consent.

Changes

When this page changes, so does the date at the top. Larger changes will be announced on the blog.