Privacy Policy

Who we are. This experience is operated by a self-employed person (osoba samostatně výdělečně činná, OSVČ) registered in the Czech Republic under IČO 19180535 and listed in the Czech Trade Register (živnostenský rejstřík). We operate the websites enochian.ink and play.enochian.ink ("the Sites"). You can contact us by email using the Email us link.

The short version. We collect as little as possible. You don't create an account. Your location stays on your device. We don't sell your data, and we don't use tracking or advertising cookies.

What we collect, and why

• Purchase information (your email, name, and payment details) is collected and processed by Lemon Squeezy, our Merchant of Record and the seller of record for your purchase. Lemon Squeezy is the data controller for that payment information — see their privacy policy. We receive only limited order details (that a sale occurred, your licence key, and the email you used) so we can deliver your access and help you if something goes wrong. Legal basis: performance of our contract with you.
• Embedded checkout. When you click "Begin the trail," the Lemon Squeezy checkout opens as an overlay on this page rather than a new tab. To enable that, a small script (lemon.js) loads from assets.lemonsqueezy.com. The checkout itself runs inside an iframe and may set the session cookies it needs to process your payment; those cookies belong to Lemon Squeezy, not to us, and are governed by their privacy policy.
• Location. To guide you along the trail, the app uses your device's GPS to measure how close you are to each point. This happens on your device only — your location is not sent to us, not stored on our servers, and not shared with anyone. Your device asks your permission before using GPS. Legal basis: necessary to provide the service you requested.
• Progress. Your progress through the trail is saved in your browser's local storage on your device so you can pause and resume. We don't collect or receive it.
• Analytics. We use Vercel Web Analytics on enochian.ink to understand which pages people visit and how they reach us. It is cookieless, uses no tracking identifiers, and does not collect personal data — we see only aggregate, anonymized counts.
• Messages you send us. If you contact us using the Email us form, your message (and the name and email you enter) is delivered to our inbox by Web3Forms, a form-delivery service; it is not stored on this site. We keep the correspondence so we can answer you and provide support.

Who processes data for us. Lemon Squeezy (payments, as our Merchant of Record, and the embedded checkout overlay); Vercel (website hosting and Vercel Web Analytics); Web3Forms (delivery of contact-form messages); and the provider of our contact email. We do not sell or rent personal data.

International transfers. Some of these providers may process data outside the EU/EEA. Where they do, they rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or an adequacy decision).

How long we keep it. Order and support records are kept only as long as needed to provide support and to meet accounting and legal obligations. On-device data (your location and progress) is under your control and is removed when you clear your browser.

Your rights. Under the GDPR you have the right to access, correct, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent where processing relies on it. To exercise any of these, use the Email us link. You also have the right to lodge a complaint with the Czech supervisory authority, the Úřad pro ochranu osobních údajů (ÚOOÚ), www.uoou.cz.

Cookies. The Sites use no tracking or advertising cookies of our own. We use only the essential local storage needed to run the trail and remember your progress. If you open the Lemon Squeezy checkout overlay, that iframe may set its own session cookies needed to process payment; those are Lemon Squeezy's, not ours.

Children. The Sites are not directed at children, and we do not knowingly collect data from them. The experience is intended for adults or for minors accompanied by a participating adult.

Changes. We may update this policy; the date at the top shows the latest version.