Privacy Policy

Last updated: March 16, 2026

Krokanti Games SL ("Krokanti", "we", "us") operates Krokanti Tasks (tasks.krokanti.com). This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Spanish and EU data protection laws.

1. Data Controller

The data controller responsible for your personal data is: Krokanti Games SL Registered in Spain Contact: legal@krokanti.com If you have questions about data processing, you may contact our Data Protection Officer at dpo@krokanti.com.

2. Data We Collect

Account information: Name, email address, profile picture, and authentication details provided when you create a Krokanti Account. Usage data: Pages visited, features used, task and project metadata, timestamps, IP address, browser type, and device information. Payment data: Billing information is processed by Stripe. We store your Stripe customer ID and subscription status but never your card details. User-generated content: Tasks, comments, file attachments, and project data you create within the application.

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6): Contract performance (Art. 6(1)(b)): Processing necessary to provide the Krokanti Tasks service, manage your account, and fulfill subscription obligations. Legitimate interests (Art. 6(1)(f)): Analytics to improve the service, fraud prevention, and security monitoring. Consent (Art. 6(1)(a)): Optional analytics cookies and marketing communications, which you may withdraw at any time. Legal obligation (Art. 6(1)(c)): Compliance with tax, accounting, and other legal requirements under Spanish and EU law.

4. Third-Party Services

We use the following third-party services that may process your data: Stripe (payments): Processes payment information. Privacy policy: stripe.com/privacy. Vercel (hosting & analytics): Hosts the application and provides performance analytics. Privacy policy: vercel.com/legal/privacy-policy. Google Analytics (GA4): Collects anonymized usage statistics. Privacy policy: policies.google.com/privacy. Neon (database): Stores application data on EU-based PostgreSQL servers. Privacy policy: neon.tech/privacy. Cloudflare R2 (storage): Stores uploaded files. Privacy policy: cloudflare.com/privacypolicy. Brevo (email): Sends transactional emails. Privacy policy: brevo.com/legal/privacypolicy.

5. Data Retention

Active accounts: Your data is retained as long as your account is active. Deleted accounts: When you delete your account, we remove your personal data within 30 days. Some anonymized data may be retained for analytics purposes. Backups: Database backups are retained for up to 90 days and then permanently deleted. Legal obligations: Some data may be retained longer to comply with tax or legal requirements (typically 5 years under Spanish law).

6. Your Rights

Under the GDPR, you have the following rights: Right of access: Request a copy of your personal data. Right to rectification: Correct inaccurate personal data. Right to erasure: Request deletion of your personal data. Right to data portability: Receive your data in a structured, machine-readable format (JSON export available in Settings). Right to restriction: Request limited processing of your data. Right to object: Object to processing based on legitimate interests. Right to withdraw consent: Withdraw consent for optional data processing at any time. To exercise any of these rights, contact us at legal@krokanti.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

7. Cookies

We use cookies to operate the service and analyze usage. For details on specific cookies, their purposes, and how to manage them, see our Cookie Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Last updated" date at the top of this page indicates the most recent revision.

9. Contact

For questions or requests related to your privacy, contact us at: Krokanti Games SL Email: legal@krokanti.com Data Protection Officer: dpo@krokanti.com