Privacy Policy – Onezise Studios

01 Who We Are

Onezise Studios ("Onezise", "we", "us", "our") is a game development collaborative team in Finland. We operate the website onezise.com and develop video games including Voluntary Rescue Finland, Bike Experience, and Burger Clicker.

As a team established in the European Union, we are subject to the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). Onezise acts as the data controller for personal data processed through our website.

If you have any questions about this policy or our data practices, you may contact us at [email protected].

02 Data We Collect

We may collect the following categories of personal data depending on how you interact with our website and games:

Contact data: Name and email address when you submit our contact form.
Usage data: Pages visited, time spent on pages, referral URLs, browser type, operating system, and device type — collected anonymously via Google Analytics.
Cookie data: Cookie preferences and consent records via Cookiebot.
Communications: The content of any email or message you send us.
Game data: If you play our games, game-related telemetry such as session length and in-game events may be collected as described in game-specific policies.

We do not collect sensitive categories of personal data (such as health data, racial or ethnic origin, or financial information).

03 How We Use Your Data

We use the personal data we collect for the following purposes:

To respond to your messages and inquiries.
To improve and optimise our website and games through analytics.
To maintain records of cookie consent as required by law.
To communicate updates about our games and studio when you have opted in.
To comply with our legal obligations under Finnish and EU law.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

04 Legal Basis (GDPR)

Under the GDPR, we rely on the following legal bases for processing your personal data:

Consent (Art. 6(1)(a)): For analytics cookies and optional marketing communications. You may withdraw consent at any time.
Legitimate interest (Art. 6(1)(f)): For website security, fraud prevention, and improving our services.
Contractual necessity (Art. 6(1)(b)): Where processing is necessary to respond to your inquiry or fulfil a service.
Legal obligation (Art. 6(1)(c)): Where required by applicable Finnish or EU law.

05 Cookies & Tracking

We use cookies and similar technologies on our website. Our cookie consent is managed by Cookiebot, which allows you to selectively accept or decline cookie categories.

Strictly necessary cookies: Required for the website to function. Cannot be disabled.
Statistics cookies: Google Analytics (GA4) collects anonymised usage data to help us understand how visitors use our site.
Marketing cookies: Not currently in use on our website.

You can update your cookie preferences at any time by clicking the cookie settings link in our footer, or by clearing your cookies and revisiting our site. For more information on Google Analytics data practices, see Google's Privacy Policy.

06 Third-Party Services

We use a limited number of trusted third-party services that may process data on our behalf:

Google Analytics (Google LLC): Website usage analytics. Data may be transferred to the United States under Standard Contractual Clauses.
Cookiebot (Usercentrics A/S): Cookie consent management. Data processed in the EU.
Proton Mail: Encrypted email service used for communications. Data processed in Switzerland/EU.
Discord: Community platform. Subject to Discord's own privacy policy.

Each third party is bound by their own privacy policies and, where applicable, Data Processing Agreements with us.

07 Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Contact form submissions are retained for up to 24 months.
Analytics data is retained according to Google Analytics default settings (up to 14 months for user-level data).
Cookie consent records are retained for 12 months in accordance with Cookiebot standards.

After the applicable retention period, data is securely deleted or anonymised.

08 Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your data ("right to be forgotten").
Right to restriction: Request that we limit how we use your data.
Right to data portability: Receive your data in a machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

09 Children

Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without parental consent, please contact us immediately at [email protected] and we will delete it promptly.

Some of our games may have age ratings. Please consult the relevant game page and rating information before allowing children to play.

10 Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These measures include encrypted email communications (Proton Mail), HTTPS encryption on our website, and access controls for internal systems.

No method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11 Changes To This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes are published constitutes acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: [email protected]
Country: Finland
Data controller: Onezise Studios

You may also use our Contact page to reach us directly.