Terms, conditions and privacy

Who operates Limpa

Limpa and its games and learning apps are operated by Static Void Digital AB, a company registered in Sweden.

Using the services

These terms apply to limpa.se and Limpa game and app subdomains. You may use the services for personal, lawful purposes. Do not interfere with the services, attempt to bypass security or score validation, abuse other players, or use automated traffic that harms availability.

Accounts are optional unless a specific feature clearly says otherwise. You are responsible for activity under your account and for keeping your sign-in method secure. If you cannot legally agree to these terms yourself, a parent or guardian must decide whether you may use the service.

Availability and changes

The services are currently provided free of charge and as available. We may change, suspend or discontinue a game or feature, but we will take reasonable care and will not remove rights that mandatory consumer law gives you. Important changes to these terms will be posted here with a new update date.

Ownership

Limpa, its original games, artwork, text and software belong to Static Void Digital AB or its licensors. You receive a personal, non-exclusive right to use the services. Open source components remain subject to their own licences.

Responsibility

We do not promise uninterrupted or error-free operation, permanent storage of local or cloud progress, or that every device will remain supported. To the extent permitted by law, Static Void Digital AB is not responsible for indirect loss arising from use or unavailability of a free service. Nothing in these terms excludes liability or consumer rights that cannot legally be excluded.

Privacy

Static Void Digital AB is the data controller for personal data processed to operate Limpa. We do not sell personal data. We use optional Google Analytics only after you have consented. We do not use advertising trackers, Google Signals, advertising personalization or custom gameplay tracking.

Data we may process

• Basic request and security data, such as IP address, requested URL, time, device or browser information and error details, may be processed when a service is accessed.
• If you accept analytics, Google Analytics processes page views, session and referral information, approximate location, and browser and device information. Google receives an IP address during transmission and uses it to derive approximate location, but it is not available to us in Analytics reports.
• Games may keep progress, preferences and offline files on your device using browser storage, IndexedDB and service-worker caches. This stays on the device unless a sync feature clearly sends it to us.
• If you sign in with Google or an email code, we process your account identifier, verified email address, sign-in details and chosen player name. Ranked games send gameplay actions to our API for score verification. Your player name and best verified score appear on the public leaderboard. Your email address does not appear there. Ordinary game saves remain on your device; this release does not synchronize them between devices.
• If you contact us, we process your message and contact details.

Why we process it

We process data as needed to provide requested account and synchronization features, meet legal obligations, and pursue our legitimate interests in securing, maintaining and preventing abuse of the services. With your consent, we use Google Analytics to understand visits and improve Limpa. You can refuse or withdraw analytics consent without losing access to any Limpa service. Advertising and other non-essential processing require a separate future decision and are not covered by analytics consent.

Cookies and browser storage

Limpa currently uses the following first-party cookies:

• limpa_consent is required to remember whether you accepted or rejected analytics across limpa.se and its subdomains. It is kept for 12 months.
• _ga and _ga_GYXSQ12687 are set only after analytics consent. Google Analytics uses them to distinguish visits and maintain session state. They are kept for up to 12 months and removed when you withdraw consent.

If no choice exists, only required storage is used. You can reopen the analytics choices using the button near the top of this page.

When you sign in, browser storage also keeps your authentication session so you can return without signing in each time. Email codes are held only in memory while you enter them. Signing out removes the local authentication session. Anonymous offline play does not require an account.

Service providers

We use providers only where needed to operate Limpa:

• Microsoft Azure provides DNS, static hosting, content delivery and backend API hosting. It may process network, request and security data.
• Supabase provides authentication and database services for optional accounts and ranked play. It processes account, authentication, profile and verified score data. The production database is hosted in Stockholm.
• Resend delivers email sign-in codes and processes the recipient address, email content and delivery information. Email open and click tracking are disabled.
• Cloudflare Turnstile protects email sign-in against automated abuse. It processes browser and network signals when you use email sign-in. This security check is separate from optional analytics.
• Google Ireland Limited provides Google Analytics after consent and may process the analytics data described above on our behalf. If you choose Google sign-in, Google also authenticates you and shares your verified email address and basic profile information with Supabase. We do not request access to your inbox, contacts or files.

We configure services in European regions where appropriate. Providers and their subprocessors may process limited data outside the EU or EEA under applicable safeguards, such as adequacy decisions or standard contractual clauses.

Retention

You can delete your Limpa account from the account screen. This removes the account, player profile and leaderboard entries. Gameplay replay content is used for verification and is not retained by the API; run identifiers, verification results and submission receipts support ranked play and abuse prevention.

Operational and security data is kept only for the shortest period reasonably needed to run and protect the services under the relevant provider configuration. Account and cloud data is kept while the account or feature is active and is then deleted or anonymised, subject to limited backup cycles and legal requirements. Google Analytics event and user-level data is configured for 14 months; aggregated standard reports may remain available for longer. Correspondence is kept as long as needed to answer it and handle legal claims.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. You may withdraw analytics consent at any time using the analytics choices on this page. Withdrawal stops future analytics collection and removes the Analytics cookies from your browser. We do not currently make automated decisions that produce legal or similarly significant effects.

Contact Static Void Digital AB at kontakt@staticvoid.se to exercise a right or ask a privacy question. You may also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Applicable law

Swedish law applies, without limiting any mandatory protection you have under the law of your country of residence. Disputes may be brought before the courts or another competent consumer dispute body where applicable.