Last updated: October 25, 2026
Movetio stores your nickname, email address and a password hash. IP addresses are kept briefly for security and to spot multiple accounts. From the latest IP we derive a country code for anonymous statistics. Chat, private messages and profile text can be read by staff when someone reports them.
Play money has no real-money value.
You can ask for access, correction and deletion via the contact page. Deletion has a seven-day grace period; after that the email, password hash and IP data are wiped and the nickname is replaced.
Security IP data is kept for up to ninety days, or sooner when the account is anonymised.
Cookies
Movetio only uses cookies and local storage that are needed to run and secure the game:
- Login cookie: keeps you logged in.
- Security cookie: protects forms against forged requests (CSRF).
- Language cookie: remembers your language choice.
- Notice cookies: show the status of a pending account deletion or block, and short notices after an action.
- Device cookie: a random code that helps detect abuse with multiple accounts. It isn't strictly needed to play; we use it based on our legitimate interest in fair play and security.
- Local storage in your browser: a few settings, such as your language, read notices and filter choices.
These are functional cookies. They don't require consent, which is why Movetio shows no cookie banner. We don't use cookies for statistics, advertising or tracking. If that ever changes, we'll ask for your consent first.
Who is responsible
Movetio is responsible for processing your data. You can reach us via the contact page.
Who helps us
- Hosting: the Movetio app and database run on a server from TransIP in the Netherlands. Purpose: keeping the game online and storing data.
- Email: we send account, security and support mail through an email provider. It only receives the recipient's address and the message text.
- Cloudflare Turnstile: on registration, the contact form and sometimes in-game we use a bot check from Cloudflare, Inc. (US). Turnstile may process technical data (such as IP address, browser signals and interaction with the widget) to limit abuse. Purpose: security and fraud prevention. Cloudflare may process data outside the EEA; they provide standard contractual clauses for transfers. See Cloudflare's privacy policy for details.
Complaints
You may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we do not handle your data properly.