Privacy

A short, honest version. We collect very little, never sell anything, and you can ask for it all to be deleted.

LAST UPDATED · 9 MAY 2026 · VERSION 1.0

Who we are. Rozana is a product line of Skiwo AS, a Norwegian limited company based in Oslo. Skiwo is the data controller for any personal data processed through Rozana. You can reach us at the address below.

Skiwo AS

Org. nr. 916 636 660

Pilestredet 17, 0164 Oslo, Norway

privacy@rozana.games

1What we collect

To run the games, store your streak, and produce aggregate views, we collect the following:

Data	Why	Legal basis
Anonymous device cookie (one ID, in your browser)	So your streak survives between visits	Strictly necessary · ePrivacy
Game answers (yes/no, mood, etc.)	To produce aggregate views and your personal history	Legitimate interest · Art. 6(1)(f)
Approximate location (country level only)	For the world map and country aggregates	Legitimate interest · Art. 6(1)(f)
If you sign up for nudges: your email	To send the daily reminder you asked for	Consent · Art. 6(1)(a)

We do not collect your name, your phone number, your contacts, your photos, or anything from other apps. We do not use behavioural advertising. We do not track you across other websites.

2Accounts (optional)

If you create an account, here's exactly what happens to your email address:

You type it into the signup form.
Our server computes a one-way SHA-256 hash of your email combined with a secret key only we know (the "pepper"). We store only that hash, never your email itself.
Your email passes through Amazon SES so we can send you the sign-in link. Amazon retains delivery metadata per AWS's policies. We do not retain it.
Our application filters the email out of request logs (it appears as [FILTERED] in those lines). Outbound-mail delivery logs from our hosting platform may include the recipient address transiently as part of standard mail-server logging.
To sign in later, you type your email again. We hash it the same way and look it up. Even we cannot recover your address from the hash.

If you delete your account, the email hash and all your game data (streaks, answers, guesses, chain history) are hard-deleted from our database. The orphaned hash is gone within seconds.

The daily-nudge email subscription is a separate feature; it does store your email plaintext and you can opt out from any nudge link. The account system has no link to it.

3How we use it

To run the games. Show today's round, your streak, your history.
To produce aggregates. Country-level and city-level views, never below 5 total entries per region. Individual answers are never shown.
To improve the games. Anonymised, aggregated metrics on what's played and what isn't.

We do not:

Sell your data, ever.
Show third-party advertising on Rozana today. Google AdSense may be added in a future release; if and when it is, this page will be updated and the change noted at the top before any ad code goes live.
Use your data to train AI models.
Share your data with anyone outside Skiwo and our processors below.

4Where it lives

All Rozana data is stored on servers within the European Union. Our processors:

Heroku (Salesforce, EU region) — application hosting and Postgres database.
Amazon Web Services — Simple Email Service (AWS SES) (EU region) — sending the optional daily-nudge email, only if you've opted in.

If we ever change processors or locations, this page will be updated and the change noted at the top.

5How long we keep it

Game answers: 90 days, then aggregated and the individual entry deleted.
Streak data: as long as your browser cookie exists; cleared when you clear cookies.
Email (if you opted in): until you unsubscribe, or until 30 consecutive days pass without you clicking any link in our emails — whichever comes first. Removal is destructive: the address and all associated tokens are deleted, no archive, no soft-delete.
Email click tracking: we record only the timestamp of your most recent click in our emails — used to detect inactivity for the auto-prune above. We do not store a history of which links you clicked.

6Your rights

Under the GDPR and the Norwegian Personal Data Act (personopplysningsloven) you have the right to:

Ask what data we hold about you.
Ask us to correct it if it's wrong.
Ask us to delete it (the "right to be forgotten").
Object to processing or restrict it.
Receive your data in a portable format.
Withdraw any consent you've given.

Most of these can be done in-app under Settings → My data. For anything that needs us to act, email privacy@rozana.games and we'll respond within 30 days.

If you're unhappy with how we've handled your data, you can complain to the Norwegian Data Protection Authority — Datatilsynet (datatilsynet.no).

7Cookies

One cookie. Anonymous. Stores your streak ID. Lasts one year, refreshes when you visit. No third-party tracking cookies, no fingerprinting, no analytics that follow you off Rozana.

8Children

Rozana is not directed at children under 13. We don't knowingly collect data from children under 13. If you're a parent and you think your child has used Rozana, get in touch and we'll delete the relevant data.

9Changes

If this policy changes in any meaningful way, we'll show a banner on the home page and email anyone who's signed up for nudges. The "last updated" date at the top will change.

10Contact

For privacy questions, reach privacy@rozana.games. For everything else, hello@rozana.games.