Last updated: 1 July 2026

Privacy Policy

This policy explains how personal data is handled across Gem TD (the game at play.gem-td.net) and this site at gem-td.net. Gem TD is run by an individual developer (the “operator”, “I”), who is the data controller. The short version: I collect as little as possible, and your game progress never leaves your device.

At a glance: no account is needed to play; your progress and settings live only in your browser; this site runs no analytics, advertising, or tracking cookies today; the only personal data that reaches a third party is what the payment processor needs when you choose to buy a cosmetic skin.

1. Who is responsible

The data controller is the individual operator of Gem TD. For any privacy request or question, contact [email protected]. There is no company and no dedicated data-protection officer; requests are handled by the operator personally.

2. What data is involved

Game progress and settings (stays on your device)

Your high scores, campaign progress, and preferences are saved in your browser using localStorage. This data is stored only on your device. It is not transmitted to me, is not linked to your identity, and I cannot see it. Clearing your browser storage deletes it.

Purchase data (handled by the payment processor)

If you buy a cosmetic skin, the payment is processed by Stripe, my payment provider (I am the seller of record). You provide your payment and billing details directly to that processor under its own privacy policy. I never see or store your full card number. I may receive limited confirmation data (such as an order reference, the item purchased, and a masked or partial identifier) so that I can deliver your item and handle support or refunds.

Technical/server data

The site and game are served by a hosting provider (a content-delivery network). Like almost all web hosts, it may process standard technical information — such as IP address and basic request logs — transiently for security, abuse-prevention, and delivery. I do not use this data to build profiles of visitors, and I do not combine it with any other data to identify you.

3. What I do not do

No accounts, sign-ups, or login profiles.
No advertising and no ad networks.
No third-party analytics or tracking cookies on this site today.
No selling or renting of personal data — ever.

If I add analytics or similar tools in the future, I will update this policy and the Cookie Policy first, and add a consent mechanism where the law requires one.

4. Why I process data, and the lawful bases (GDPR)

Where the EU/UK GDPR applies, the lawful bases are:

Performance of a contract — to process a purchase and deliver a cosmetic skin you bought.
Legitimate interests — to keep the Service secure, prevent abuse and fraud, and provide basic support, balanced against your rights.
Legal obligation — to keep records I am required to keep by law (for example, tax and accounting records tied to purchases).
Consent — only if and when optional tools (such as analytics) are introduced.

5. Sharing

Personal data is shared only with the providers needed to run the Service: the payment processor (Stripe) for purchases, and the hosting/CDN provider for delivery and security. These act as processors or independent controllers under their own terms. Data may also be disclosed if required by law or to protect rights and safety.

6. International transfers

Because these providers operate globally, your data may be processed outside your country, including outside the EEA/UK. Where that happens, transfers rely on appropriate safeguards (such as the EU Standard Contractual Clauses or an adequacy decision) put in place by those providers.

7. Retention

Device-stored game data stays until you clear it. Purchase and support records are kept only as long as needed for the purpose collected and to meet legal (for example, tax and accounting) obligations — typically the period required by the applicable law — after which they are deleted or anonymised. The payment processor sets its own retention for the payment data it holds.

8. Your rights

Subject to applicable law, you may have the right to:

access the personal data held about you;
have inaccurate data corrected;
have data erased (the “right to be forgotten”);
restrict or object to certain processing;
data portability; and
lodge a complaint with your local data-protection authority.

To exercise any right, email [email protected]. Note that most game data is only on your device, so I may not hold anything to act on; for purchase data, I may direct part of a request to Stripe where it is the controller. I may need to verify your request to protect your data.

9. Children

Gem TD is intended for a general audience and is not directed to children under 13 (or the relevant digital-consent age where you live). See the Children’s Privacy policy.

10. Changes to this policy

I may update this policy; the “Last updated” date above will change when I do. Please check back from time to time.

11. Contact

Privacy questions and requests: [email protected]. See also Contact.