Privacy policy

Effective from: 19 October 2026
Version: 1.0

1. The short version

• Pelicook is a restaurant game for everyone aged 13 and over. If you are younger, you cannot play and we send nothing to our server.
• We collect as little as possible. You can play as a guest, without an e-mail address.
• Our server is in the EU (Germany). Backups are encrypted and also stay in the EU.
• We use no cookies for statistics or advertising. We never sell your data.
• Anonymous usage statistics are on by default (no name, no advertising ID). You can switch them off in Settings.
• Pelicook is currently a test version. You can play it on pelicook.com; testers' progress may be wiped before the real launch (we announce that in advance; see the terms).
• There are no ads right now and you cannot buy anything yet. If that changes, we will update this policy first.
• You can always delete your account yourself in the game (Settings → Account).
• Questions? E-mail support@pelicook.com.

2. Who is responsible?

Pelicook is made by:

• Lorenzo L. (sole proprietorship), trading as Pelicook
• Chamber of Commerce (KvK) number: follows after registration
• E-mail (our only contact address): support@pelicook.com

We are the "controller" under the GDPR (the European privacy law). That means we decide what happens to your data and we are responsible for it.

We currently publish no postal address; you can reach us by e-mail. A postal address will follow before anything is for sale (web shop or App Store).

3. Who is Pelicook for?

• Pelicook is for players aged 13 and over. The game is not directed at children.
• At the first start we ask for your year of birth. Guests get this question too.
• Are you under 13? Then you see a message that the game is not for you. We do not create an account and send nothing to our server. Only your own device remembers that the game is blocked.
• Are you 13, 14 or 15? Then we do nothing that would need your consent (for example promotional notifications). See also section 15.

4. What data do we use, why, and for how long?

Without the data needed for the contract you cannot play online. An e-mail address is optional.

5. What we never collect

• Your full date of birth (only the year).
• Your location, your contacts or your address book.
• Your phone's advertising ID (IDFA) or other tracking IDs.
• Free chat messages (there is no chat).
• Payment details such as your bank card (if purchases come later, the payment provider handles that).
• IP addresses in our database.

6. Usage statistics

• The game sends short events to our own server in the EU, for example "tutorial step 3 done" or "session lasted 12 minutes". They contain no name or e-mail.
• We use no cookies and no extra tracking IDs for this. We do not use an outside analytics company.
• The game sends nothing before the age question.
• This is on by default. You can switch it off in Settings → Privacy ("share usage statistics"). The game works exactly the same afterwards.
• We use no advertising ID and no other tracking IDs.
• We keep individual events for 90 days. After that we only keep anonymous daily counts.
• Some data about the game itself (for example how many Coins you earn) is created by the server, because it needs it to detect cheating. That counts as "game data" in section 4.

Statistics rest on legitimate interest, not on consent. So for players aged 13, 14 and 15 the same rule applies as for everyone: we do nothing based on consent (section 15), and they can also switch statistics off.

7. Crash reports

• If the game crashes, it can send a technical error report to Sentry, a crash-reporting service. We use their EU storage.
• It contains only technical data: what went wrong in the code, the game version, the device model and the operating system.
• We send no name, e-mail, account ID or IP address. IP address storage is switched off. No screen recordings are made.
• Nothing can be sent before the age question.

8. E-mail

• We only use your e-mail address if you link your account.
• We then send you: login codes, messages about your account (for example if we have to change your name, with the reason), a confirmation when your account has been deleted, and answers to your support questions.
• We send no marketing e-mails and no newsletter.
• Your e-mail address is never visible to other players. It is not stored readably in our logs.
• We send e-mails through Brevo (France). Mail to support@pelicook.com arrives via Cloudflare and is forwarded to the maker's private mailbox at Microsoft (Outlook.com).
• We keep support e-mails for 12 months after we have handled your question.

9. Cookies and storage on your device

• Our website and the browser game use no cookies for statistics or advertising. That is why you see no cookie banner.
• The game does store a few things on your device that are needed to play: your device ID, your login session, your settings and your game. In the browser this uses the browser's storage (IndexedDB); on iPhone the secure storage (Keychain).
• Note for Safari: Safari may erase stored data if you do not play for 7 days. So link an e-mail address, otherwise a guest account can be lost.

10. What is public?

• Your player name and restaurant name may become visible to other players, for example when friends, visits and leaderboards are added. Your restaurant's layout may then be visible too.
• So do not choose a name with your real name, address or other personal information.
• Your year of birth, e-mail address and device ID are never visible to others.
• Names go through an automatic filter against swear words and inappropriate words (see section 16).

11. Who do we share data with?

We never sell your data. We do not share it with advertising companies.

We work with a few companies that help us deliver the service. They may only use your data for us, under our agreements (a "data processing agreement"):

A full, current list is available on request: write to support@pelicook.com.

An uptime monitor (UptimeRobot) only checks whether our server is running. It receives no player data. Our AI assistant that helps manage the server also never sees real player data.

We also share data when the law requires it, for example on the order of a court or a competent authority, or when someone's life or safety is at risk.

12. Where is your data?

• Your account and your game are on our server in the EU (Germany).
• Backups are first encrypted on our server. Only then do they go to Cloudflare storage with EU jurisdiction. Cloudflare cannot read them.
• Cloudflare, Microsoft and Sentry are companies from the United States. Where data may leave the EU (for example when website or mail traffic passes through), we use the legal safeguards: the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses.

13. How long do we keep your data?

14. Deleting your account

You can always delete your account yourself: Settings → Account → Delete account. It works on every device and in every country, for guests too.

• Guest account: deleted immediately. A guest account you have not logged in to for 12 months is deleted automatically (section 13).
• Linked account (with e-mail): switched off immediately and no longer visible to anyone. You have a 30-day grace period. If you log in again within those 30 days, the deletion stops. After that we permanently erase the account and send you a confirmation by e-mail.
• What we erase: your account, your game, your name, your restaurant, your e-mail address, your statistics (the individual events) and what you left with other players (later, for example, stickers or friendships).
• What we may still keep, because we must or to prevent abuse:
  • purchase records required by tax law, without a link to you (only once purchases exist);
  • moderation decisions, if a measure is pending or your account was banned, at most 12 months, in unreadable ("hashed") form;
  • anonymous counts in which you cannot be recognised.
• Backups are not edited one by one, but expire by themselves within 30 days. If we ever have to restore a backup, we immediately erase deleted accounts again.
• Please note: what you have in the game (including Gems and purchased items) is gone after erasure and cannot be restored.

15. Young people (13-17)

• For young people we use the same small set of data as for everyone.
• We build no advertising profiles and show no personalised ads, to anyone.
• Under 16 we do nothing that requires consent. For example, you will not be offered promotional (push) notifications. Statistics do not rest on consent (section 6).
• Under 18 you cannot buy anything in a web shop (if there is one).
• Parents or guardians with questions can e-mail support@pelicook.com.

16. Automated decisions

• Names are checked automatically by a filter. A name with a forbidden word is rejected. If the filter is unsure, nobody else sees the name until a human has looked at it.
• This has no legal effects for you and you can always choose another name. Do you think the filter made a mistake? E-mail us and a human will look at it.
• Penalties (such as banning an account) are always decided by a human, except temporary hiding pending review.

17. Security

• All connections are encrypted (HTTPS).
• Backups are encrypted before they leave the server. The key is not on the server.
• Only the maker can access the server, with a secure key. There is a firewall.
• Logs contain no passwords, login codes or readable e-mail addresses. (There are no passwords at all: you log in with a one-time code.)
• If something does go wrong with your data (a "data breach"), we report it to the Dutch Data Protection Authority within 72 hours where required, and we tell you if there is a high risk to you.

18. Your rights

You have these rights:

• Access: knowing what data we hold about you, and getting a copy.
• Rectification: having incorrect data corrected. You can also change your name yourself in the game.
• Erasure: having your data erased. You can do this yourself in the game (section 14).
• Restriction: asking us to use your data less for a while.
• Portability: getting your data in a common file format (JSON), to take with you.
• Objection: objecting to use based on legitimate interest. You can also switch statistics off yourself (section 6).

How to make a request: e-mail support@pelicook.com. We reply within 1 month (for a complex request this can be extended by up to 2 more months; we will tell you if so). It is free.

We have to be sure the account is yours. If you linked an e-mail address, we send a code to that address. If you are a guest, we ask for your player ID from the settings.

19. Complaints

Not happy with how we handle your data? Tell us first, and we will look for a solution together. You may always file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) (www.autoriteitpersoonsgegevens.nl), or with the data protection authority in the country where you live.

20. What changes later

Pelicook is still in development. These parts come later. Before they start, we update this policy and let you know:

• Social features (friends, visiting restaurants, likes, stickers, reporting and blocking, leaderboards per country). We then derive your country from your account region, never your precise location.
• Purchases (buying Gems): through Apple in the iPhone app, and on the website through a payment provider that is itself the seller. We never receive bank card details.
• Ads: only voluntary reward videos, without tracking and without personalised ads.
• Push notifications on iPhone: notifications about your game (e.g. "your dish is ready"), and promotional notifications only if you switch them on yourself (from age 16).
• The iPhone app through the App Store (Apple). Apple is then responsible for its own services.

21. Changes

We may update this privacy policy. For important changes we tell you in the game in advance. The date and version are always at the top.

22. Contact

support@pelicook.com (English or Dutch)
Lorenzo L. (sole proprietorship), trading as Pelicook