Privacy Policy – Pogy
Last updated: 17 October 2026
Who processes your data.
Pogy is operated by Martin Kiss, a private individual from Slovakia ("we"). For questions about your data, email us at pogy@mklegends.com.
Who the game is for.
Pogy is an online game for players aged 18 and over. You can play it in Telegram, on the web at pogy.mklegends.com and later in an Android app. If we find out that an account belongs to a younger person, we delete it.
What data we process
- Account: a random internal account ID and your player ID (for example POG-XXXXX).
- Telegram: only the numeric ID of your Telegram account. We do not store your name, username or photo. The language from Telegram is used only on your device to choose the game language.
- Email: if you sign in with email or add it to your account, we store your email address. One-time codes are stored only in unreadable form (a fingerprint) and deleted within one day at the latest.
- Signed-in devices: platform (Telegram, web or Android), time of sign-in and last use, and a fingerprint of the device key. The key itself is stored only on your device.
- Game data: nickname, collection of POGs and KINs, match results (difficulty, win, loss or draw, time, reward granted), number of wins and losses, achievements and rewards.
- Technical data: IP address and browser details in web server logs. To protect against abuse, the server also briefly keeps your IP address in memory; it is not stored in the database.
- Data on your device: sign-in, device key, language, sound settings, profile and results not yet sent. The trial without an account stays on your device only and is never sent to the server.
To balance the computer opponent (AI) we use only anonymous aggregate statistics. We do not use ads, tracking or analytics cookies, and we do not sell data.
Why and on what legal basis
- To provide the game and your account: sign-in, saving progress, sending codes by email (performance of a contract, Art. 6(1)(b) GDPR).
- Security, protection against abuse, fixing errors and balancing the game from anonymous aggregates (legitimate interest, Art. 6(1)(f) GDPR).
- Compliance with legal obligations, if any arise (Art. 6(1)(c) GDPR).
Who else has access to data
- Hetzner Online GmbH: the game's server and database in the European Union.
- Proton AG (Switzerland): sends emails with codes from pogy@mklegends.com. Switzerland is covered by an EU adequacy decision.
- Telegram: if you play in Telegram, Telegram passes us verified sign-in data. It processes your data under its own policy.
- The game loads the three.js graphics library and Rapier physics library from our own server. The only external script it loads is the Telegram WebApp SDK from telegram.org; Telegram sees your IP address when this script is loaded.
How long we keep data
| Data | How long |
|---|---|
| Account, email and game data | Until you delete your account |
| Signed-in device | 180 days after last use; logging out removes it immediately |
| One-time email codes | At most 1 day |
| Telegram link code | Until it expires |
| Web server logs with IP address | At most 14 days |
| Database backups | At most 30 days |
Deleting your account.
You can delete your account in the game: Settings → Delete account. Steps and how to contact us are on mklegends.com/en/pogy/delete-account/.
Your rights.
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on legitimate interest. Just email pogy@mklegends.com; we reply within one month. You can also contact the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).
Security.
The connection to the server is encrypted (HTTPS). We do not use passwords; codes and device keys are stored only as fingerprints.
Changes.
When we change this policy, we update the date at the top. We also announce important changes in the game.