Terms, conditions and privacy

Who operates Limpa

Limpa and its games and learning apps are operated by Static Void Digital AB, a company registered in Sweden.

Using the services

These terms apply to limpa.se and Limpa game and app subdomains. You may use the services for personal, lawful purposes. Do not interfere with the services, attempt to bypass security or score validation, abuse other players, or use automated traffic that harms availability.

Accounts are optional unless a specific feature clearly says otherwise. You are responsible for activity under your account and for keeping your sign-in method secure. To create or sign in to a Limpa account, you must be at least 13 and meet any higher minimum age applicable to this service in your country. If you need a parent or guardian's permission to agree to these terms, you must have it. Guardian permission does not remove the minimum account age. You can play without an account.

Choose a nickname rather than your full name, email address or school. Your player name and verified scores are public. Do not include someone else's personal information in your name.

Availability and changes

The services are currently provided free of charge and as available. We may change, suspend or discontinue a game or feature, but we will take reasonable care and will not remove rights that mandatory consumer law gives you. Important changes to these terms will be posted here with a new update date.

Ownership

Limpa, its original games, artwork, text and software belong to Static Void Digital AB or its licensors. You receive a personal, non-exclusive right to use the services. Open source components remain subject to their own licences.

Responsibility

We do not promise uninterrupted or error-free operation, permanent storage of local or cloud progress, or that every device will remain supported. To the extent permitted by law, Static Void Digital AB is not responsible for indirect loss arising from use or unavailability of a free service. Nothing in these terms excludes liability or consumer rights that cannot legally be excluded.

Privacy

Static Void Digital AB is the data controller for personal data processed to operate Limpa. We do not sell personal data. We use optional Google Analytics only after you have consented. We do not use advertising trackers, Google Signals, advertising personalization or custom gameplay tracking.

Data we may process

• Basic request and security data, such as IP address, requested URL, time, device or browser information and error details, may be processed when a service is accessed.
• If you accept analytics, Google Analytics processes page views, session and referral information, approximate location, and browser and device information. Google receives an IP address during transmission and uses it to derive approximate location, but it is not available to us in Analytics reports.
• Games may keep progress, preferences and offline files on your device using browser storage, IndexedDB and service-worker caches. This stays on the device unless a sync feature clearly sends it to us.
• If you sign in with Google or an email code, we process your account identifier, verified email address, sign-in details and chosen player name. Ranked games send gameplay actions to our API for score verification. Your player name and best verified score appear on the public leaderboard. Your email address does not appear there. Ordinary game saves remain on your device; this release does not synchronize them between devices.
• If you contact us, we process your message and contact details.

Why we process it

We process authentication details and your player profile to perform our agreement with you and provide the account features you request (GDPR Article 6(1)(b)). Ranked play includes verifying gameplay and publishing your chosen name and verified scores on the leaderboard; processing necessary to provide those requested features uses the same contractual basis. Security monitoring and abuse prevention rely on our legitimate interests in keeping Limpa secure and fair (Article 6(1)(f)), balanced against your rights, with particular care for children. Where a specific legal obligation requires processing, we rely on Article 6(1)(c).

Optional Google Analytics relies on your separate consent (Article 6(1)(a)). Analytics stays off unless you accept it using the privacy controls. You can refuse or withdraw analytics consent without losing access to play or eligible account features. Account eligibility does not grant analytics consent. Advertising and other non-essential processing require a separate future decision and are not covered by analytics consent.

Children and guardians

For accounts, we use age-eligibility declarations, not identity documents or birth dates. We do not automatically verify everyone's age. If you are a guardian and believe a child below the account age has registered, contact kontakt@staticvoid.se. We assess reports and may restrict or delete an ineligible account. We may need to verify your authority before sharing account information or acting on a child's behalf.

Cookies and browser storage

Limpa currently uses the following first-party cookies:

• limpa_consent is required to remember whether you accepted or rejected analytics across limpa.se and its subdomains, together with the consent version. It is kept for 12 months.
• _ga and _ga_GYXSQ12687 are set only after analytics consent. Google Analytics uses them to distinguish visits and maintain session state. They are kept for up to 12 months and removed when you withdraw consent.

If no choice exists, only required storage is used. You can reopen the analytics choices using the button near the top of this page.

When you sign in, browser storage also keeps your authentication session so you can return without signing in each time. Email codes are held only in memory while you enter them. Signing out removes the local authentication session. Anonymous offline play does not require an account.

Service providers

We use providers only where needed to operate Limpa:

• Microsoft Azure provides DNS, static hosting, content delivery and backend API hosting. It may process network, request and security data.
• Supabase provides authentication and database services for optional accounts and ranked play. It processes account, authentication, profile and verified score data. The production database is hosted in Stockholm.
• Resend delivers email sign-in codes and processes the recipient address, email content and delivery information. Email open and click tracking are disabled.
• Cloudflare Turnstile protects email sign-in against automated abuse. It processes browser and network signals when you use email sign-in. This security check is separate from optional analytics.
• Google Ireland Limited provides Google Analytics after consent and may process the analytics data described above on our behalf. If you choose Google sign-in, Google also authenticates you and shares your verified email address and basic profile information with Supabase. We do not request access to your inbox, contacts or files.

We configure services in European regions where appropriate. Providers and their subprocessors may process limited data outside the EU or EEA under applicable safeguards, such as adequacy decisions or standard contractual clauses.

Retention

You can delete your Limpa account from the account screen. This removes the account, player profile and leaderboard entries. Gameplay replay content is used for verification and is not retained by the API; run identifiers, verification results and submission receipts support ranked play and abuse prevention.

Operational and security data is kept only for the shortest period reasonably needed to run and protect the services under the relevant provider configuration. Account and cloud data is kept while the account or feature is active and is then deleted or anonymised, subject to limited backup cycles and legal requirements. Google Analytics event and user-level data is configured for 14 months; aggregated standard reports may remain available for longer. Correspondence is kept as long as needed to answer it and handle legal claims.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal data, or object to processing based on legitimate interests. You may withdraw analytics consent at any time using the analytics choices on this page. Withdrawal stops future analytics collection and removes the Analytics cookies from your browser. We do not currently make automated decisions that produce legal or similarly significant effects.

Contact Static Void Digital AB at kontakt@staticvoid.se to exercise a right or ask a privacy question. You may also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Applicable law

Swedish law applies, without limiting any mandatory protection you have under the law of your country of residence. Disputes may be brought before the courts or another competent consumer dispute body where applicable.