Gridmere

Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data Gridmere collects, why, how long we keep it and what rights you have. It covers the Gridmere game on Android and Windows, Gridmere accounts, and the mokkigames.com and gridempiregame.com websites, including the Gridmere wiki and the password reset pages.

1. Who we are

Gridmere is made by Mökkigames, a game developer registered in the Finnish Trade Register. Mökkigames is the controller of the personal data described in this policy.

Mökkigames
Business ID: 3659072-7
Ahjokatu 14-16, 40320 Jyväskylä, Finland
Email: support@mokkigames.com

2. What we collect

Account

Your username, email address and password. The password is stored only as a salted hash, so we cannot read it.
When your account was created and when you last logged in.

Device and connection

Your IP address.
A device identifier provided by your device's operating system, and a random ID the app creates when it is installed.
A one-way code calculated from your device's technical characteristics. The code cannot be turned back into those details.
Your platform, device model and game version, and whether your previous session ended in a crash.
Error reports: technical details about errors the game hits on your device, and how much memory your device has.
The country in your device's language and region settings. Other players see it as a flag next to your name. You can hide it with the /toggleflag command.

Gameplay

Your progress: inventory, coins, levels, skills, achievements, the worlds you own or can build in, and where you are in the game.
Your friends, ignored players, and favorite and recently visited worlds.
Your play sessions: when they start and end, and how much of that time you were active.
A record of game events such as trades, items and coins you gain, spend or drop, shop purchases, logins, reports and moderation actions.
Information about how you play and which devices and networks you play from, which our anti-cheat and anti-bot systems use to find cheating, bots and linked accounts.

Chat and content

Chat messages you send. We keep your last 100 world chat lines with your account.
Text you place in the game, such as signs, bulletin board posts, mailbox notes, gift messages and world names.
Reports you send about other players or worlds.

World chat and the text you put on signs, bulletin boards, mailboxes and gifts are also logged for 60 days, so moderators can act on reports.

Purchases

When you buy something with real money, Google Play sends us the order number, the product, the time and country of purchase, and a purchase token. We use them to check the payment and deliver what you bought. We never receive your card or bank details.

Support and websites

Emails you send us and what you tell us in them.
When you use the password reset page: your IP address and the time of the request.
Our web servers' access logs: IP address, time, the page requested, the page you came from and your browser type.

You give us your username, email address and password when you register, and you need them to have an account. Everything else is collected automatically while you play or use our websites, or comes from Google Play when you make a purchase and from other players when they report you.

3. Why we use it

Purpose	Legal basis (GDPR)
Running your account and the game: logging in, saving your progress, delivering chat, friends and trades, and sending password reset emails.	Performing our contract with you (Art. 6(1)(b))
Checking and delivering purchases.	Performing our contract with you (Art. 6(1)(b))
Keeping the game fair and safe: stopping cheating, bots, scams, fraud, refund abuse, ban evasion and mass account creation, moderating chat and handling reports.	Our legitimate interest in a fair and safe game (Art. 6(1)(f))
Fixing bugs and improving the game, using error reports, crash signals, device models and gameplay statistics.	Our legitimate interest in a working game (Art. 6(1)(f))
Keeping purchase records for bookkeeping, and answering lawful requests from authorities.	Legal obligation (Art. 6(1)(c))

Gridmere has no ads. We do not sell your data or use it for marketing.

4. Automatic decisions

Some moderation happens automatically:

The chat filter hides offensive words. Using them repeatedly mutes your chat for a while, and being muted repeatedly suspends your account for a few days.
Anti-cheat and anti-bot systems can disconnect you, ask you to solve a quick check, or temporarily block actions.
When a purchase is refunded or charged back, what it gave you is removed automatically. Repeated refunds can suspend the account, as described in the Terms of Service.

If you think an automatic decision is wrong, email us and a person will review it.

5. What other players can see

Other players can see your username, your avatar and what it wears, your country flag unless you hide it, your world chat messages, the worlds you own and the text you place in them. Your friends can also see when you are online and which world you are in.

We share personal data only with service providers that help us run Gridmere, and only what they need:

Hosting providers run our servers and database.
Google handles payments through Google Play. Our server checks each purchase with Google.
Unity Technologies makes the game engine. Its purchase and services components can send Unity technical data about your device and a random installation ID.
Our email providers deliver password reset emails and our support mailbox.

We also share data with authorities when the law requires it.

The store you download Gridmere from, such as Google Play or itch.io, handles your data under its own privacy policy.

7. Where your data is processed

Our servers and database are in the European Union. If we run game servers in other regions so players there get less lag, and you play on one, your game connection goes through that server, but your account data stays stored in the EU.

Google, Unity and our email providers may process data outside the EU, for example in the United States. When they do, the transfer is protected by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or by the Commission's standard contractual clauses.

8. How long we keep it

Data	How long
Your account, progress, friends, last 100 world chat lines and moderation history	Until you delete your account
Game event logs, including world chat, text placed on signs, boards, mailboxes and gifts, error reports and player reports	60 days
Coin and token history	90 days
Play session records	180 days
Security records tied to an IP address or device, such as logins, account creation and world locks	Up to 12 months
Bans on an IP address or device	While the ban applies, and 30 days after it ends
Purchase records	10 years, as Finnish bookkeeping law requires
The username of a deleted account	Permanently, so that nobody else can register it and pretend to be you
Support emails	As long as we need them to handle your request
Website access logs	A few weeks

Backups of our database are kept only as long as we need them to recover from a failure. Deleted data disappears from them when old backups are replaced.

9. Deleting your account

You can delete your account in the game in Settings, or by emailing support@mokkigames.com from the email address of your account. The account is deleted 30 days after the request. During that time you cannot log in, and you can cancel by emailing us from the email address of your account. After deletion we keep only the data listed in section 8, for the times listed there. Text you placed in worlds, such as signs, stays in those worlds; email us if you want a specific text removed.

Step by step instructions are on the account deletion page.

10. Your rights

You have the right to:

get a copy of your personal data,
have wrong data corrected,
have your data deleted,
restrict how we use your data,
get the data you gave us in a machine-readable format.

You also have the right to object, at any time, to our use of your data based on our legitimate interests.

To use these rights, email support@mokkigames.com from the email address of your account, so we know the request is yours. We answer within one month.

You can also complain to the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi) or to the data protection authority in your own country.

11. Children

Gridmere is not meant for children under 13. If we learn that an account belongs to a child under 13, we delete it. If you are a parent and think your child under 13 has an account, email us.

12. Security

Passwords are stored only as salted hashes, connections to our servers are encrypted, and only staff who need personal data for their work can see it. No system is perfectly secure, so use a password you do not use anywhere else.

13. Data on your device

The app stores your login details on your device so you stay logged in, and removes them when you log out. It also stores the random install ID, your settings and downloaded game content.

14. Cookies

Our websites do not use advertising or analytics cookies. The password reset form uses one cookie that protects the form from misuse. The wiki saves your sound setting and world planner saves in your own browser, and does not send them to us.

15. Changes to this policy

When we change this policy, we update the date at the top. If a change is important, we tell players in the game or on our Discord before it takes effect.