Who we are
Advert Themes (advertthemes.com) is the data controller for the personal information described here. The operator is , . You can contact us about privacy through our contact form or email .
What we collect
| When | Information |
|---|---|
| You create an account with email | First and last name, email address, UK phone number and password (saved only as a one-way hash), plus the date you joined, your last sign-in and a count of failed sign-in attempts. |
| You sign up with Google | Your name, verified email address and Google account ID, checked by our server with Google. We ask for your phone number separately. |
| You play while signed in | Your virtual coin balance, XP, level, the games you've opened and when, and when you last collected the daily bonus. |
| You contact us or Player Care | Your name, email, topic and message. |
| Form activity | A security log of sign-up, sign-in and account actions (date, action, email, result and a shortened IP address). Passwords are never logged. |
We don't ask for, and never store, payment card or bank details.
Why we use it (lawful bases)
- To run your account and the games (performance of our contract with you).
- To check you're 18+ and in the UK, and to protect accounts from misuse (legitimate interests and legal obligations).
- To reply to your messages and act on break, restriction or deletion requests (legitimate interests).
- To keep the Service secure through security logs and lock-outs (legitimate interests).
We don't sell your information and we don't use it for third-party advertising.
Where it's kept and how it's protected
All account information is processed and stored on our server. We don't keep it in your browser and we don't publish it in any web page, public table or visible database query. Each account is a separate file in a protected folder that can't be opened from the web. Passwords are hashed, the sign-in cookie is HttpOnly and sent over HTTPS only, and Google sign-ins are verified directly with Google.
Messages you send are emailed from our server to our support inbox through our email delivery provider, and a copy is kept in a protected log so we can reply and confirm delivery.
Who we share it with
- Our hosting provider, which runs the server the Service lives on.
- Our email delivery provider (Brevo), which delivers contact and Player Care messages to our inbox.
- Google, only if you choose Google sign-in. Google's own privacy policy applies.
- Authorities, if the law requires it.
Where a provider processes data outside the UK, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement.
How long we keep it
- Account information: until you delete your account, or after 24 months without a sign-in.
- Messages: until your request is dealt with, and no longer than 12 months.
- Security logs: up to 12 months.
Your rights
Under UK GDPR you can ask to access, correct or delete your information, restrict or object to how we use it, and receive a portable copy. You can delete your account yourself at any time from My account. For anything else, use the contact form. We'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Under-18s
The Service is only for adults aged 18 or over. We don't knowingly collect information from anyone under 18. If we learn that we have, we'll delete the account.
Cookies
We use one strictly necessary cookie to keep you signed in, plus browser storage for your age confirmation and cookie choice. See the Cookies Policy.
Changes to this policy
We'll update this page if anything changes. The date at the top shows the latest version.