PRIVACY POLICY

Effective date: November 10, 2025

The purpose of this Privacy Policy is to inform visitors and registered users of the Mindblower board game website (www.mindblower.center) about the processing of their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data Controller Information The entity responsible for collecting and processing data:

2. What data do we process and why? We process personal data for the following purposes during the use of the website:

A) Registration and Account Usage Registration is required to access certain features (e.g., game card datasheets, extra content, community features).

B) Contact When the Data Subject sends us an email or uses the website contact form.

C) Technical Data (Cookies and Logs) The system may automatically record certain technical data to ensure secure operation.

D) Cookie Management Our website places so-called "cookies" (small data files) on the Data Subject's device for proper functioning. We use strictly necessary (technical) cookies only.

What do we use them for?

What we do not use them for:

Without these cookies, the website or the login would not function; therefore, their use is automatic upon visiting the site. Their legal basis is Section 13/A (3) of the Act on Electronic Commerce Services (or relevant local legislation), and the Service Provider's legitimate interest in operating the website.

3. Who has access to the data? (Processors) We do not transfer the Data Subject's data to third parties. However, we use technical service providers (data processors) to operate the website:

4. Data Security We take all necessary measures to protect the Data Subject's data. Passwords are stored encrypted (hashed), so even we cannot see them. The website uses SSL encryption (https://), ensuring protected communication between the Data Subject's devices and the server.

5. Rights of the Data Subject The Data Subject may request from us at any time:

Requests can be sent to info@goldenlotus.space , to which we will respond within 30 days at the latest.

6. Remedies If the Data Subject feels their rights have been violated, please contact us first so we can remedy the problem! If this does not lead to a result, a complaint may be lodged with the authority: