Privacy Policy
1. Who we are and how to reach us
Follower Heights ("we", "us") is an online game at followerheights.com connected to the Instagram account @followerheights. This policy explains what personal data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR). For any privacy question or request, send a direct message to @followerheights on Instagram.
2. What we collect
| Data | Where it comes from |
|---|---|
| Instagram nickname | You type it when you move in. |
| Agreement that your nickname is shown in the game, and when you gave it | The tick box when you move in. |
| Session key (we store only a one-way fingerprint of it) | Created by our server so your browser remembers you. |
| E-mail address and the gift you picked | The wish list form, only if you use it. |
| Marketing consent (yes/no) and when you gave or withdrew it | The separate, optional tick box in the wish list. |
| Public Instagram comments and replies under our posts (nickname, text, time) | Instagram, when you comment on our posts, to read wishes and follow codes. |
| Technical data: IP address, browser type, time of request | Automatically, through our hosting provider, for security. |
We do not ask for your real name, address, phone number, password or payment card details. We do not use advertising or tracking cookies.
3. Why we use it and on what legal basis
- Running the game – giving you a flat, showing your nickname on it, remembering your sign-in, delivering your gift, running villa draws and building wishes from comments. Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR) and your consent to show your nickname (Art. 6(1)(a)).
- Checking that you follow us and that the nickname is yours – by matching a code you post in a comment. Legal basis: our legitimate interest in fair play and preventing impersonation (Art. 6(1)(f)).
- One gift per person and per e-mail – we keep your e-mail to stop the same address claiming twice, and may send one e-mail to confirm the address. Legal basis: legitimate interest (Art. 6(1)(f)).
- Marketing e-mails – news about the game, events and offers. Only if you ticked the separate box. Legal basis: consent (Art. 6(1)(a)). You can withdraw it at any time through the unsubscribe link in every e-mail or by writing to us. Withdrawing does not affect anything else in the game.
- Security and abuse prevention – technical logs. Legal basis: legitimate interest (Art. 6(1)(f)).
- Legal obligations – for example accounting records if you buy something. Legal basis: Art. 6(1)(c).
4. Who sees your data
Everyone who opens the game sees your nickname, your flat and what is in it. Your e-mail is never shown in the game.
We use these service providers (processors), bound by data processing agreements:
- Supabase Inc. – database, servers in the EU.
- Cloudflare, Inc. – website hosting and security.
- An e-mail delivery provider – sending confirmation and, with consent, marketing e-mails.
Instagram (Meta Platforms Ireland Ltd.) processes your comments under its own privacy policy. Some providers may process data outside the EU; in that case transfers are covered by the EU Standard Contractual Clauses or an adequacy decision. We never sell your personal data.
5. How long we keep it
- Nickname, flat and gift: as long as you play, and until you ask us to delete them.
- E-mail for the one-gift rule: as long as your flat exists, then deleted within 30 days.
- Marketing e-mails: until you withdraw consent; we keep a record of the consent itself for 3 years as proof.
- Technical logs: up to 30 days.
- Accounting records: 10 years, as required by Slovak law.
6. Your rights
You can ask us to: see a copy of your data, correct it, delete it, restrict its use, receive it in a portable format, and you can object to processing based on legitimate interest. Where we rely on consent you can withdraw it at any time. Send us a direct message on Instagram (@followerheights); we answer within one month.
You can also complain to a supervisory authority. In Slovakia it is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk, or the authority in the EU country where you live.
7. Random draws
Villas are given to randomly chosen e-mails by our server. This is a game prize with no legal or similarly significant effect on you; there is no other automated decision-making or profiling.
8. Storage in your browser
We store one small item in your browser's local storage: your nickname and session key, so you stay signed in. It is strictly necessary for the sign-in you asked for, so no consent banner is needed. You can delete it anytime by clearing your browser data; you will then need to sign in again.
9. Children
The game is for people aged 16 and over. If you are younger, please do not give us your e-mail. If we learn that we hold data of a child under 16 without parental consent, we delete it.
10. Changes
If we change this policy we update the date above and, for important changes, tell you in the game or by e-mail.