RULETA · PRIVACY · ENGLISH
Privacy, in plain language.
What the Ruleta website processes, why, and the choices available to you.
Who is responsible.
The controller of personal data processed through the Ruleta website is MAMBA IT MICHAŁ KUŚ, ul. Świętokrzyska 16, 32-650 Kęty, Poland, NIP 5492486607, REGON 542863201.
For privacy questions or requests, email michal.kus.dev@gmail.com.
Analytics is optional.
Google Analytics does not load until you select Accept analytics. Rejecting analytics does not limit the website or your ability to buy and download Ruleta. A small “Privacy choices” control remains available so you can change or withdraw your choice at any time.
Ruleta remembers your choice in your browser’s local storage for up to 180 days. This preference is necessary to respect your decision and is not used for advertising.
When you agree.
Ruleta uses Google Analytics 4 to understand visits and which pages
are useful. Google Analytics may set first-party cookies such as
_ga and _ga_* and receive information
including page paths, referrers, device and browser details,
approximate location, and interactions with the website.
Analytics data is processed on the basis of your consent. Advertising storage, advertising user data, ad personalization, Google Signals, and ad-personalization signals are disabled in Ruleta’s tag configuration. Private checkout parameters are removed from analytics page URLs. Google Ireland Limited provides Google Analytics. Google may process analytics data outside the EEA and relies, as applicable, on the EU–US Data Privacy Framework, adequacy decisions, and the European Commission’s Standard Contractual Clauses for international transfers.
The _ga and _ga_* cookies have a default
lifetime of two years and are refreshed when analytics activity is sent.
User-level and event-level data in this GA4 property is configured for a
retention period of 14 months. Aggregated reports may remain available
for longer. Consent is the legal basis for this processing under Article
6(1)(a) GDPR.
Read Google’s Privacy Policy ↗ · Google’s transfer safeguards ↗
What is needed to provide the service.
When you start a purchase, Stripe processes contact, payment and fraud-prevention information required to complete it. Ruleta stores a random browser identifier, order and Stripe references, product and price references, amount, currency, payment status, and timestamps so it can verify payment and provide or revoke the protected download. Payment-card details are handled by Stripe and are not stored in Ruleta’s database.
A necessary ruleta_browser cookie connects the browser to an
order and expires after one year. Purchase processing and fulfilment are
necessary to enter into and perform the sale contract under Article
6(1)(b) GDPR. Records required for tax and accounting compliance are
processed under Article 6(1)(c). Fraud prevention, service security and
the establishment or defence of claims rely on the controller’s legitimate
interests under Article 6(1)(f).
Order and accounting records are retained until the applicable tax and accounting limitation periods expire—ordinarily five years counted from the end of the calendar year in which the relevant tax payment deadline occurred—and longer only where a limitation period is suspended or interrupted or a dispute requires it. Other order records are removed or anonymised when they are no longer needed to fulfil the purchase, provide the download, or handle applicable claims.
Providing purchase data is necessary to buy Ruleta; without it, the order cannot be processed. Contacting support is voluntary. Support correspondence is kept until the request is resolved and then only for as long as needed for applicable claims or legal obligations.
Stripe Payments Europe, Limited and relevant Stripe affiliates provide payment services and may act as processor or independent controller, depending on the activity. Stripe may transfer data internationally using the EU–US Data Privacy Framework and Standard Contractual Clauses.
Delivered through Cloudflare.
Cloudflare provides website hosting, content delivery, DNS, security, and database infrastructure. It processes technical request information such as IP addresses, requested URLs, timestamps, device or protocol details, and security signals to deliver and protect the service. Cloudflare acts as a processor for relevant customer logs and content under its Data Processing Addendum.
Mamba IT does not export or maintain a separate copy of raw Cloudflare HTTP request logs. Cloudflare retains operational and security information according to the enabled product, account configuration, contractual obligations, and the period necessary to provide and secure its services. Cloudflare operates a global network and uses safeguards including the European Commission’s Standard Contractual Clauses for relevant transfers outside the EEA.
Questions are welcome.
Depending on the processing and applicable conditions, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. You may withdraw analytics consent at any time without affecting processing that took place before withdrawal. To exercise these rights, email michal.kus.dev@gmail.com.
Mamba IT does not make decisions producing legal or similarly significant effects solely by automated processing. Stripe may use automated fraud and payment controls as described in its own privacy information. You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) in Poland.
Last updated: 14 September 2026. This notice describes the current website implementation; it should be reviewed whenever analytics, payment, or hosting services change.