Privacy · GDPR
GDPR & Your Rights
Plain and simple: what data we process, why, for how long — and how to use your GDPR rights with a single email.
Our principles
- Data minimisation: an account needs only a display name and email. We store no password and no payment data — there is nothing to pay for.
- No tracking without consent: Google Ads loads only after you click "Accept". Rejecting is exactly as easy as accepting.
- No selling or ad sharing: we never sell data and do no profiling.
- Security: HTTPS everywhere, protected data storage with no public access, self-hosted fonts.
Your rights at a glance
- Access (Art. 15): find out what data we hold about you and get a copy.
- Rectification (Art. 16): we correct inaccurate or incomplete data.
- Erasure (Art. 17): we delete your account and data unless the law requires us to keep it.
- Restriction (Art. 18): we block your data instead of deleting it, if you prefer.
- Portability (Art. 20): you receive your account data in a common machine-readable format (CSV).
- Objection (Art. 21): you can object to processing based on legitimate interests.
- Withdraw consent (Art. 7(3)): at any time, with effect for the future.
- Complaint (Art. 77): you can complain to a data protection authority.
How to make a request
Choose your request — we'll prepare an email in your own email app. Please send it from the address you registered with so we can identify your account.
- Timing: we reply within one month; complex requests may take up to two further months, and we'll tell you if so (Art. 12(3)).
- Cost: free of charge.
- Identity check: to protect your data we only reply to the registered email address or ask for a short confirmation.
Manage your consent
Change your Google Ads choice at any time:
Record of our processing
| Purpose | Data | Legal basis | Retention | Recipients |
|---|---|---|---|---|
| Delivering the website (server log files) | IP address, date/time, page requested, browser and system details, referrer | Art. 6(1)(f) GDPR (secure, stable operation) | Only as long as needed for operation and security; then deleted automatically by the hosting provider | Hostinger (hosting, processor) |
| Free user account | Display name, email address, confirmation of age/residence and Terms, timestamp | Art. 6(1)(b) GDPR (contract); records of confirmations: Art. 6(1)(f) GDPR | Until the account is deleted; records of confirmations up to 3 years after the account ends | Hostinger (storage, processor) |
| Contact by email | Name, email address, content of your message | Art. 6(1)(b) or (f) GDPR | Until resolved, then deleted within 6 months unless a legal retention duty applies | Operator's email provider |
| Games in the game window (only after you click) | IP address and technical connection data | Art. 6(1)(b) GDPR (game you requested) | According to the game provider's policies | Play'n GO (game provider, independent controller) |
| Ad measurement with Google Ads (consent only) | Cookie IDs, IP address (truncated), device and browser data, interactions | Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) | Cookies up to 90 days; otherwise per Google's policies | Google Ireland Limited; possible transfer to Google LLC (USA) |
| Storing your privacy choice | Your choice and its time (in your browser only, localStorage) | § 25(2) no. 2 TDDDG; Art. 6(1)(c) GDPR (proof of consent) | Until you change your choice or clear your browser data | None — stays on your device |
Controller & complaints
The controller is the operator of this website; full provider details are in our Imprint and Privacy Policy. For all privacy requests, email hello@emberplaysocial.com.
You may complain to any data protection supervisory authority, in particular in the EU member state where you live. Full details: Privacy Policy · Deutsch: DSGVO & Ihre Rechte.