Privacy.
Last updated: 5 September 2026
This website is a small set of static pages. It has no accounts, no registration and no contact forms. This notice explains, in plain language, what that means for your data.
Who is responsible
The controller of any personal data described here is Ostoya Interactive sp. z o.o., ul. Świeradowska 47, 02-662 Warszawa, Poland (KRS 0001256202, NIP 5214174125).
What the studio pages do not do
- No advertising trackers, marketing pixels or third-party analytics platforms.
- No non-essential cookies. The site sets no cookies of its own.
- No accounts, no registration, no contact forms.
- No third-party scripts, fonts or embeds — every file the page loads comes from this domain.
Game install links
The STARBY and KOŁO download routes choose the appropriate app store from coarse device/platform information. They work without marketing consent and do not use cookies, advertising identifiers, raw IP addresses, or full user-agent strings.
The optional first-party campaign-event capability is currently disabled by default because this site has no trusted region or consent signal. If it is later enabled following an appropriate lawful choice, it will record only the requested route, source/campaign/creative labels already present in the link, coarse platform result, whether a redirect was issued, and manual store-button clicks. These are smart-link requests and redirects, not unique people, confirmed store opens, or installs. Any such records are retained for no longer than 12 months and stored outside public web directories.
Legal and support pages do not load optional analytics, marketing scripts, consent prompts, or third-party embeds. The separate STARBY and KOŁO game privacy policies describe the processing inside each game and its platform services.
Server logs
Serving a website is not anonymous by nature. Our hosting service provider's infrastructure may automatically record limited technical data whenever a page or file is requested, including your IP address, the requested URL, a timestamp, browser and device information, and error or security-related data.
This technical processing happens at the infrastructure level rather than through anything embedded in the page. It is used only to deliver the website, keep it secure, prevent abuse, and diagnose faults — never to build a profile of you. The legal basis is our legitimate interest in operating a secure and functioning website (Article 6(1)(f) GDPR).
Server-log data is kept only for as long as it is needed for those purposes, in line with our hosting service provider's standard log handling, and is then removed or overwritten.
If you email us
If you choose to write to hello@ostoya.games, we process your message and contact details only to read your message and reply to it, and we keep the correspondence for as long as needed to handle the matter it concerns. The legal basis is our legitimate interest in responding to correspondence, or the steps taken at your request before entering into a contract (Article 6(1)(b) and (f) GDPR).
Who else is involved
Our hosting service provider, Namecheap, acts as a technical service provider for the web estate. Apple and Google independently process data when a person follows a store link under their own terms and privacy notices. We do not use advertising or web-analytics platforms on this site.
What we never do
- We never sell personal data.
- We never carry out marketing profiling or automated decision-making.
- We never use your data for advertising.
Your rights
Under the GDPR you may request access to your personal data, its correction or erasure, restriction of processing, or data portability, and you may object to processing based on legitimate interests. To exercise any of these rights, write to hello@ostoya.games. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Changes
If this notice changes, the “Last updated” date above will change with it.