← Back to front page

Privacy Policy

Data controller

Rafla Enterprises Oy

Business ID: 3176629-5

Hakakatu 7, 67100 Kokkola, Finland

Email: admin@etkot.fi

Data we collect

Analytics (Google Analytics 4)

We use Google Analytics 4 to analyse how the site is used. Google Analytics collects:

  • Page views and visit duration
  • User location (country/city level)
  • Device and browser used
  • Navigation within the site

Sign-in with Google

You can sign in to Etkot with your Google account. When you do, Google shares your email address, your verified-email status, and a Google account identifier with us. We store the email and the Google identifier on our servers so we can recognise you on future logins. We do not receive your Google password and do not access any other Google services on your behalf.

Payments (Stripe)

When you subscribe to Etkot VIP, payments are processed by Stripe Payments Europe, Limited. Stripe handles the checkout and card payment directly - card numbers and billing details are entered on Stripe's hosted checkout and we never see or store them.

We share the following information with Stripe to create and manage your subscription:

  • Your email address
  • An internal user identifier
  • The selected subscription plan (monthly or yearly)

We store on our own servers a Stripe customer identifier and the status of your subscription (active, canceled or past due, plan type, current billing period end date, and whether the subscription is set to cancel at period end). This is used to grant access to VIP features and to display the correct state in your account.

Why we collect data

We collect analytics data to understand how our service is used and to improve the user experience. Account and subscription data is collected to operate the service: to authenticate you, to provide access to VIP features, and to meet our accounting and tax obligations. We do not sell or share data with third parties for marketing purposes.

Legal basis

We process analytics data on the basis of your consent under GDPR Article 6(1)(a). Analytics data is only collected if you have given your consent through the cookie banner.

Subscription and payment data is processed on the basis of performance of a contract under GDPR Article 6(1)(b), and on the basis of a legal obligation under Article 6(1)(c) for accounting records that we are required to retain.

Data retention

Google Analytics retains event data for 2 months and user data for 14 months, after which the data is automatically deleted.

Subscription data is retained for as long as your account exists. Accounting records relating to payments (such as invoices) are retained for 6 years as required by the Finnish Accounting Act, even if your account is otherwise deleted.

Data transfers outside the EU

Use of Google Analytics may involve transferring data to the United States. Google has committed to the EU-US Data Privacy Framework, which guarantees an adequate level of data protection for personal data transfers.

Stripe processes payment data primarily within the EU through Stripe Payments Europe, Limited (Ireland), but data may also be transferred to Stripe affiliates in the United States. Stripe is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses for international transfers.

Cookies

We use the following cookies:

Strictly necessary cookies (no consent required):

  • etkot_session - visitor identifier required for multiplayer and game connections
  • etkot_user - authentication token for signed-in users
  • etkot_locale - your selected language
  • A cookie that remembers your consent choice

Analytics cookies (consent-gated):

Google Analytics sets cookies (e.g. _ga, _ga_*) to identify users between visits. These are only set if you give your consent through the cookie banner.

You can prevent analytics cookies from being used by rejecting them when the cookie banner is shown.

Your rights

Under the GDPR you have the following rights:

  • The right to access your data
  • The right to have your data corrected
  • The right to have your data erased
  • The right to data portability
  • The right to restrict processing
  • The right to object to processing
  • The right to withdraw consent at any time
  • The right to lodge a complaint with a supervisory authority - in particular the Finnish Data Protection Ombudsman, or the supervisory authority of your country of residence

You can exercise your rights by contacting us by email: admin@etkot.fi

You can also withdraw your consent for analytics data collection at any time by pressing the "Reset cookie settings" button. After withdrawal, the cookie banner will appear again on the front page and you can choose whether to accept or reject cookies.

Children

The service is intended for users aged 18 and over per our Terms of Service. Under Finland's Data Protection Act, consent given by a minor in connection with information society services is valid if the child is at least 13 years old. We do not knowingly collect data from children under 13.

Contact

For privacy-related questions you can contact us by email: admin@etkot.fi

Last updated: 25 April 2026