Privacy and cookies

Data controller

The controller is Brown Enterprises Srls, Via Fattori 10, 60019 Senigallia (AN), Italia, VAT 02870950421.

For any question about your data write to info@brownenterprises.it or to the certified address brownsrls@pec.it.

What we process and why

• Browsing data. When you visit https://www.labyra.app, the hosting provider logs IP address, browser, requested page and time. This serves to deliver the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). It stays in the provider’s logs for the technical period set by its policies.
• Purchases. Payment, invoicing and VAT are handled by Lemon Squeezy, acting as merchant of record and independent controller of payment data: we never see or store card details. From Lemon Squeezy we receive the order data (name, email, title purchased, any licence key) to deliver the game or PDF and to provide support. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).
• Kit unlock codes. If you enter a code, we check it with Lemon Squeezy and store a technical cookie in your browser that remembers the unlock. Legal basis: performance of a contract.
• Email enquiries. If you write to us (including as a school or company) we use what you send only to reply and, if you ask, to prepare an offer. Legal basis: pre-contractual steps and legitimate interest (Art. 6(1)(b) and (f)).

Cookies and browser storage

We only use technical tools needed for the service you request, so no consent is required and you will not see a banner. We use no profiling, marketing or statistics cookies, neither our own nor third-party.

• kit_<kit> and kit_<kit>_partita: technical cookies that remember a printable kit’s unlock and the game in progress. They last up to 400 days; you can delete them from your browser at any time.
• Game saves and playtest reports: kept in your device’s local storage (localStorage) and never sent to us.
• Service worker and offline cache: copies of pages and images stored on your device so you can play without a connection.
• Typefaces: hosted on our own domain, printable kits’ pages included. The site never contacts Google Fonts.

Embedded games

Some digital titles open inside the play page from an external address (for instance an HTML5 game hosting service). Your browser then connects to that service, which receives your IP address and may process it under its own notice.

Providers and transfers outside the EU

When data goes to the United States, the transfer relies on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. We do not sell or hand over data to third parties for commercial purposes.

• Vercel Inc. (USA): website hosting.
• Lemon Squeezy LLC (USA): sales, payments, receipts, licence keys.
• Sanity AS (Norway): catalogue content management; it processes no visitor data.
• Hosting providers of embedded games, only for the titles that use them.

How long

We keep data only as long as its purpose requires: email enquiries until they are closed, order data for support and for the tax and accounting obligations set by law (up to 10 years).

Minors

Many titles are designed for young players too, but purchases and enquiries must come from an adult (parent, teacher, company contact). The site asks players for no data.

Your rights

You may ask us at any time to access, correct or erase your data, restrict or object to its processing, or receive it in a portable format (Arts. 15–22 GDPR), by writing to info@brownenterprises.it. If you believe the processing breaks the law you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local authority.

We take no decisions based solely on automated processing that produce legal effects on you.

Changes

If we change how we process data we update this page and the date above.