Privacy policy.

The short version

We collect as little as we can. You can play every game without giving us anything. If you create an account we keep your name, email and a scrambled version of your password. We never ask for payment details, and we don't run advertising or analytics trackers.

What we collect

• When you create an account: first name, last name, email address and a password. Your password is turned into a one-way scrambled code (a hash) before it is saved, so we can't read it. We also keep the date you joined, your last sign-in, a count of wrong password tries (five wrong tries lock the account for 15 minutes), and your coin balance, XP, last daily-bonus date and the games you have opened.
• If you use Google sign-in: your name, verified email address and Google account ID, checked with Google by our server. We then ask you to confirm you are 18+ and accept the Terms.
• When you contact us: the name, email, topic and message you type into the contact or Player Care forms.
• Form log: each time a form is submitted, our server records the date, which form it was, whether it worked, and the name and email entered. Passwords are never written to this log.

Where it is kept and who handles it

Everything above is handled by our own server. There is no public database and nothing is ever shown in the page code. Each account is a single protected file on the server that cannot be opened from the web, and the form log is stored in a protected folder in the same way.

Messages you send through the contact forms are emailed from our server to our support inbox using our email delivery provider, Brevo, over an encrypted SMTP connection. A copy is kept in the protected form log so we can check it arrived.

Signing in sets one strictly necessary session cookie (tt_sid). Your coin balance, XP and level are kept with your account if you are signed in, or in your own browser if you are not. See the Cookies Policy.

Why we use it

• To run your account, coins, XP and levels (so we can provide the Service you asked for)
• To confirm you are 18+ and in the UK
• To answer your messages
• To keep the Service secure and fix problems (our legitimate interests)

Other services

• Google Sign-In, only if you choose it. Google's privacy policy applies to that step.
• Brevo, which delivers the emails sent from our forms.

How long we keep things

Your account stays until you delete it from the My account page or ask us to. We keep contact messages and form-log entries only as long as we need them to deal with your request and keep our records, then delete them.

Your rights

Under UK data protection law you can ask to see, correct or delete your information, restrict or object to how it is used, or ask for a copy. You can delete your account yourself at any time. For anything else, send your request through the contact form. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

The Service is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you think someone under 18 has an account, please tell us and we will remove it.

Changes

If anything changes we will update this page. The date at the top shows the latest version.