Privacy policy

1. Data controller

The controller of your personal data is the company below, which runs the SPAWN Gaming & GastroBar venue:

• Alter Line sp. z o.o.
• BrandSPAWN Gaming & GastroBar
• Registered officeAleja Jana Pawła II 45A / 58, 01-008 Warszawa, Polska
• KRS0000779474
• NIP (tax ID)5213861763
• Phone+48 786 902 002
• E-mailspawnwarsaw@gmail.com

For anything about your personal data, contact us using the details above.

2. The mini-game prize

When you hit every target and enter your phone number, we send an SMS with a code for one free hour of gaming to that number.

• Data: phone number, site language, referral code (if you came from a friend’s link), an identifier of the group or team (if you play as friends via invite links, or in a registered team), the generated prize code and referral code, date of the claim, SMS delivery status and whether the code has been redeemed.
• Purpose: sending the code, honouring the prize at the bar, counting the referral bonus and preventing abuse (one prize per number, limited resends).
• Legal basis: Art. 6(1)(b) GDPR (acting on your request and providing the prize) and Art. 6(1)(f) GDPR (our legitimate interest in preventing abuse).

We send the prize code by SMS only — it is never shown on the site. We use your number only for this prize and do not send it advertising.

3. Event or tournament enquiry

When you send the form under Tournaments & Events, we receive your enquiry.

• Data: name (required), phone number (required) and, optionally, company, e-mail, date, number of guests, type of event and message; plus the site language and the time it was sent.
• Purpose: replying to your enquiry and preparing an offer.
• Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before a contract); for keeping correspondence and for establishing or defending legal claims, Art. 6(1)(f) GDPR.

4. Team registration

After you win the mini-game, you can create a team of five players in the prize dialog.

• Data: team name, optionally the names of up to five players (nicknames are fine) and the phone number of the person who creates the team, the captain (taken from their prize claim, nothing else is typed); plus the site language and the time of the request. We do not ask for the other players’ phone numbers.
• Purpose: linking the five players’ prizes into one team and giving the team link right away, contacting the captain on the phone number from the prize claim (by call or message, including a text message that the team is complete) when all five have won, to arrange the visit, checking at the bar that the players are present when the “2 hours each if all five win and come together” promotion is redeemed, and preventing abuse (we can switch a team off, and there is a daily limit on registrations).
• Legal basis: Art. 6(1)(b) GDPR (steps taken at your request and delivering the promotion) and Art. 6(1)(f) GDPR (our legitimate interest in preventing abuse).

Only enter the names of players who know about it — we use the names only for this team. Every player gets their own prize by SMS to their own number when they win through the team link (see section 2). We do not sell this data or use it for advertising, and that includes the captain’s number.

5. Nickname and score table

In “My prize & scores” you can choose a nickname and appear on the public score table (weekly, monthly and all-time) and, if you are among the best of the week, in the selection of finalists for the weekend final, for which we plan a prize.

• Data: the nickname (made up by you; do not use your name or phone number), the results of your rounds (hits and shots, time, device type — computer or phone, date), the moment you gave your consent, and a player key stored in your browser so that the device recognises your claim. The results are linked to your prize claim (phone number), but the table shows only the nickname and the score.
• Purpose: letting you log in to “My prize & scores” (with the code from your SMS), running the public score tables (separate for the standard and the short round), choosing the best players of the week as finalists of the weekend final and the winner of the final, contacting the finalists about the final and the prize and checking the result at the venue before the prize is handed over, and preventing abuse (unrealistic scores, unsuitable nicknames — we can hide a nickname).
• Legal basis: your consent, Art. 6(1)(a) GDPR (the tick box next to the nickname); for choosing the finalists, contacting them, handing over the prize of the final and for preventing abuse also Art. 6(1)(b) and (f) GDPR.
• You can withdraw your consent at any time by removing your nickname in “My prize & scores” (it then disappears from the table) or by writing to us. Withdrawing consent does not affect the lawfulness of earlier processing.

Your nickname and scores may appear in weekly, monthly and all-time tables and in the Hall of Fame. When a weekend final is enabled, the best eligible players may be selected as finalists. Authorised staff receive operational notifications and may use the contact details from the prize claim to arrange the final by phone or WhatsApp, not prize-code SMS. Public tables do not show phone numbers. Removing your nickname removes it from the public tables; the underlying results and records are handled under section 10. Photos and videos of a final are not covered by this section.

Everyone who visits the site can see the nickname and the score. We do not sell this data or use it for advertising.

6. Technical data and hosting

Vercel hosts the website. Our own backend handles prize claims, team registrations, scores and event enquiries. Cloudflare provides access and traffic protection. These services may process technical information, such as IP addresses and browser details, to operate and protect the site.

7. Advertising and SMS

We send an SMS only with the prize code (and again if you ask for it). A team captain also gets one message when the team is complete. We do not send advertising to numbers given in these forms without your separate, voluntary consent. Invitations to the weekend final (section 5) are made by phone call or WhatsApp, not by SMS.

8. Who receives your data

We do not sell data. We use service providers that process it on our behalf:

• Our own backend and database — storing and handling prize claims, teams, scores and event enquiries; authorised SPAWN staff use a protected administration panel.
• SMSAPI — delivering prize-code and team-completion SMS messages.
• Telegram — delivering operational notifications to authorised staff. Depending on the notification, these may include enquiry details, team information and contact details needed to respond or arrange a visit.
• Cloudflare — access protection for the administration panel and protection/routing of backend traffic.
• Vercel — hosting the website.
• Google Ads — advertising measurement only if enabled and only after your consent; it is not used to store prize claims or enquiries.

The owner of the venue and the staff who redeem codes at the bar and answer enquiries can see the claims. We may disclose data to public authorities where the law requires it. The nickname and scores you agreed to publish are visible to everyone on the score table (section 5).

9. Transfers outside the EEA

Prize claims, team registrations, scores and event enquiries are handled by our own backend, not Google Workspace. The providers listed in section 8 may also process data, including technical information and staff-notification contents, outside the European Economic Area. Contact us using the details in section 1 for information about the applicable providers, processing locations and transfer safeguards.

10. How long we keep data

• Prize claims: as long as we need to run the promotion and handle any claims, then we delete the phone number; earlier if you ask us to.
• Event enquiries: until the enquiry has been dealt with and for as long as we need to handle any claims. If we do sign a contract, we keep the data as long as the law requires (for example tax and accounting rules). If you ask us to, we delete it earlier unless the law requires us to keep it.
• Team registrations: until the promotion for that team is settled and for as long as we need to handle any claims, then we delete the data; earlier if you ask us to.
• Nickname and scores: until you withdraw your consent (remove your nickname); scores without a nickname for as long as we need to settle the prizes of the weekend finals and handle any claims, then we delete them.
• Hosting logs: for a short period set by the provider.

11. Cookies and browser storage

By default we do not use advertising or analytics cookies and we do not track you across sites. When we run ads on Google, the site shows a banner asking for your consent: only after you press “Accept” do we load the Google Ads tag, which may set cookies and measure how our ads perform; “Reject” is just as easy, and you can change your choice in the footer (“Privacy settings”). The site also saves a few technical settings in your browser’s storage (localStorage):

• the language you chose,
• the effects, sound and crosshair settings of the mini-game and your best score,
• the referral code from a friend’s link or the team ID from a team link, and the reference number of your prize claim,
• your player key (if you won or logged in under “My prize & scores”) and your choice in the privacy banner,
• a copy of the menu and schedule so the site loads faster.

This data stays on your device and does not contain your phone number (the referral code or team ID only reaches us together with a prize claim, and the player key when we save your nickname or score). You can delete it in your browser settings. If we add analytics tools in the future, we will update this policy.

12. Your rights

You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable form (where the basis is a contract) and object to processing based on our legitimate interest. To use these rights, write or call us — the details are in section 1; for a prize, tell us the number you used, and for a team registration, the team name and the phone number you used for the prize. Where processing is based on your consent (the nickname on the score table, ad measurement) you can withdraw it at any time, without affecting the lawfulness of earlier processing; for a nickname, give the nickname and the phone number from the prize.

If you believe we process your data unlawfully, you can complain to the President of the Personal Data Protection Office in Poland (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

Giving us your data is voluntary, but without a phone number we cannot send the prize code, and without a name and phone number we cannot answer your enquiry. We do not make automated decisions or profile you.

13. Links to other services

The site links to, among others, SENET (PC booking), Google Maps, WhatsApp, Telegram, Instagram and TikTok. Those services have their own privacy policies and decide for themselves what they do with their data.

14. Changes

If we change how we handle data, we will update this page and the date at the top.