Last updated
That company is the data controller for everything described below.
Analytics never receives the simulator’s own URL parameters. A shared engine link carries your whole build in the query string; we send the page path and standard UTM tags, nothing else. There is no session recording and no heatmap on this site.
Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of other vendors’ use of advertising cookies at aboutads.info. Google explains how it uses data from sites that use its services here.
In the EEA, the UK and Switzerland we ask for your consent before setting personalised advertising cookies, and you can change that choice whenever you like. Decline and you get non-personalised ads instead.
Google Analytics and PostHog each store an identifier to tell a returning visit from a new one. We switch off Google Signals and ad-personalisation signals, so Google cannot use analytics from this site to build advertising audiences. Block every cookie and you lose the saved build and nothing else. The simulator needs none of them to run.
These providers process data on our instructions, under contract. None may sell it, and we do not sell it either.
Submitting the feedback form attaches the email address you gave to that browser’s analytics history, so we can match your report to the session it describes. Write to us by email instead if you would rather we did not. We also disclose data where the law requires it.
Those providers process data in the European Union and the United States. Where personal data leaves the EEA it moves under the European Commission’s Standard Contractual Clauses or an adequacy decision.
You can ask for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, or ask for it in a portable form. Where we rely on consent you can withdraw it at any time. Email grybukasltu@gmail.com and say what you want. We answer within a month, and a person reads it. If you think we have got it wrong you can complain to your data protection authority; ours is the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
Plenty of the people reading this site are students. We do not knowingly collect personal data from children under 16, and nothing on the site asks for any. If you think a child has sent us personal data through a form, write to us and we will delete it.
The site is served over HTTPS, and submissions are written to a database reachable only from our server-side code, with no public read access. There is no account system here, so there is very little to steal.
When what we collect changes, this page changes with it and the date at the top moves. Questions about any of it: grybukasltu@gmail.com, or the contact page.