GO CODE EUROPA: privacy notice
Effective 9 November 2026. In plain language: what we keep about you when you play this private test, why, and what you can do about it.
Who is responsible
Sofus (eenmanszaak of W. van der Sluis), trading as Clixworks, Balatonmeerlaan 49, 1060 RD Amsterdam, the Netherlands. Under the GDPR we are the controller. Questions, requests and complaints: hello@clixworks.com.
This is a small invitation-only test among friends. That still counts as processing personal data under the GDPR, so this notice applies.
What we collect
- Your email address, when you join the waitlist or sign in. You sign in with Google or a one-time code by email, through our sign-in provider Clerk. If you choose Google, Google tells Clerk your email address, name and profile picture; we use only the email address. Clerk keeps your account (email, sign-in method, sign-in times, and the browser and IP address of each session for security) so we know who may play.
- Game logs. When a game ends, or you leave it, the game sends a record of it: the mission, the commands you gave, what happened and when. The log carries a pseudonymous player ID (a short code made from your email with a secret key), not your email. A separate list pairs each code with the email, the first time and the last time you played. Only Clixworks can read that list.
- Settings on your own device, stored in your browser: sound on or off, auto-pause, difficulty mode, your best ratings, and which version of the terms you accepted.
The email address is needed to play. Without it we cannot let you in.
Why, and on what legal basis
| Purpose | Data | Basis (GDPR) |
|---|---|---|
| Keeping a waitlist and sending invitations | Art 6(1)(b), steps you asked for by joining the waitlist | |
| Letting invited people in and keeping others out | Email, sign-in method and session data | Art 6(1)(b), to provide the test you asked to join, or Art 6(1)(f), our legitimate interest in keeping a private test private |
| Improving the balance and design of the game | Game logs | Art 6(1)(f), our legitimate interest in making the game better |
For the game logs you have the right to object at any time (Art 21). Tell us, and we stop and delete your logs.
Who handles the data for us
- Clerk (Clerk, Inc.): the waitlist, the sign-in and your account.
- Cloudflare: hosting and storage of the logs (R2).
- Anthropic: when we have Claude analyse the logs. This goes through Anthropic's API, under its commercial terms, and by default Anthropic does not train on API data. Only the pseudonymous logs are used, never emails.
All three companies are in the United States. Transfers there rely on the EU-US Data Privacy Framework and on the Standard Contractual Clauses in the providers' data processing agreements. We do not sell your data.
How long we keep it
- Game logs: 365 days after upload, then they are deleted automatically.
- Your account and the list that pairs player IDs with emails: until your access ends or you ask us to delete it.
- A waitlist entry: until you are invited, or at the latest 12 months after you joined if no place opened.
Your rights
You can ask us for access to your data, for it to be erased, and you can object to the use of your game logs. Write to hello@clixworks.com. We answer within one month. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in your own country.
Cookies and local storage
We set a few cookies and use a few settings in your browser, all strictly necessary:
- Clerk's sign-in cookies keep you signed in (up to 7 days):
__sessionand__client_uaton play.gocodeeuropa.com, and__clienton clerk.gocodeeuropa.com, Clerk's address for this game. gce.*in your browser's local storage:gce.mute,gce.autopause,gce.mode,gce.best.v3andgce.best.v3.<mode>(your best ratings) andgce.terms(the terms version you accepted), plusgce.nudge.planin session storage (a hint shown once per tab session). They never leave your device.
Because these are strictly necessary, there is no cookie banner (ePrivacy Directive Art 5(3); Telecommunicatiewet 11.7a(3)). No advertising or analytics cookies are used.
Do Not Track
We do not track you across other websites and show no ads, so a Do Not Track signal from your browser changes nothing: the same limited data is handled either way.
Changes to this notice
This notice is effective from 9 November 2026 (it replaced the version of 6 November 2026, when sign-in ran on Cloudflare Access). If it changes in a way that matters, we announce it on the entry screen of the game, which you then have to accept again before you play. The date above shows when this version took effect.