Privacy Policy
Last updated: 1 November 2026
This policy explains, in line with Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), which personal data we process when you use emberplaysocial.com, why, on what legal basis, for how long, and what rights you have. We keep data collection to a minimum: the platform is free, sells nothing and shows no third-party advertising. Players in Germany: the binding version for you is the German Datenschutzerklärung.
1. Controller
Operator of the website emberplaysocial.com
Email: hello@emberplaysocial.com
Further provider details: Imprint.
Data protection officer: We are not required to appoint one (Art. 37 GDPR). Contact us directly at hello@emberplaysocial.com with any privacy question.
2. Overview of processing
| Purpose | Data | Legal basis | Retention | Recipients |
|---|---|---|---|---|
| Delivering the website (server log files) | IP address, date/time, page requested, browser and system details, referrer | Art. 6(1)(f) GDPR (secure, stable operation) | Only as long as needed for operation and security; then deleted automatically by the hosting provider | Hostinger (hosting, processor) |
| Free user account | Display name, email address, confirmation of age/residence and Terms, timestamp | Art. 6(1)(b) GDPR (contract); records of confirmations: Art. 6(1)(f) GDPR | Until the account is deleted; records of confirmations up to 3 years after the account ends | Hostinger (storage, processor) |
| Contact by email | Name, email address, content of your message | Art. 6(1)(b) or (f) GDPR | Until resolved, then deleted within 6 months unless a legal retention duty applies | Operator's email provider |
| Games in the game window (only after you click) | IP address and technical connection data | Art. 6(1)(b) GDPR (game you requested) | According to the game provider's policies | Play'n GO (game provider, independent controller) |
| Ad measurement with Google Ads (consent only) | Cookie IDs, IP address (truncated), device and browser data, interactions | Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent) | Cookies up to 90 days; otherwise per Google's policies | Google Ireland Limited; possible transfer to Google LLC (USA) |
| Storing your privacy choice | Your choice and its time (in your browser only, localStorage) | § 25(2) no. 2 TDDDG; Art. 6(1)(c) GDPR (proof of consent) | Until you change your choice or clear your browser data | None — stays on your device |
3. Delivering the website and server logs
When you visit, your browser automatically sends technical data to our server (IP address, date and time, page requested, data volume, referrer, browser type and operating system). We need this to deliver the website and keep it secure and stable (Art. 6(1)(f) GDPR). Logs are kept only as long as needed for operation and security, are then deleted automatically by the hosting provider, and are never combined with other data or used for profiling. Our website is hosted by Hostinger International Ltd. (Larnaca, Cyprus), which processes data only on our behalf under a data processing agreement (Art. 28 GDPR). The whole site is served over HTTPS only, and fonts are served from our own server — no data goes to third-party font services.
4. Free user account
If you create an account we process your display name, email address, your confirmation that you are 21+ and reside in an eligible region, your acceptance of the Terms, and the time of registration. We do not store a password. The purpose is to run your free account (Art. 6(1)(b) GDPR); the data is required to create an account (Art. 13(2)(e) GDPR). We keep records of your confirmations to show the eligibility requirements were declared (Art. 6(1)(f) GDPR). Account data is deleted when you ask us to delete your account, at the latest 30 days after your request; confirmation records are kept for at most three years after the account ends.
5. Contacting us
Our contact form does not store or send any data itself — it only opens a pre-filled email in your own email app. When you email us, we process your name, email address and message to reply (Art. 6(1)(b) or (f) GDPR) and delete the enquiry once resolved, at the latest after six months unless a legal retention duty applies.
6. Third-party games
Games are provided by the game provider Play'n GO and only load in a window on our page after you actively click "Play Free". From then on your browser connects directly to the provider's servers, which receive your IP address and technical connection data (Art. 6(1)(b) GDPR — you requested the game). The provider is responsible for its own processing. We never pass account data to the game provider.
7. Cookies, browser storage and Google Ads
Strictly necessary: We store your privacy choice only in your own browser (localStorage) so the banner does not reappear on every page. This is permitted without consent under § 25(2) no. 2 TDDDG and never leaves your device.
Google Ads conversion tracking (consent only): Only if you click "Accept" do we load the Google tag (gtag.js) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before that, no Google script loads and nothing is sent to Google (Google Consent Mode, default "denied"). With your consent, Google sets cookies to measure whether people visit or register after clicking one of our ads and to optimise our advertising, processing cookie IDs, truncated IP address, device/browser data and interactions. Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via "Cookie settings" in the footer; this does not affect processing before withdrawal (Art. 7(3) GDPR). Google may transfer data to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework (EU adequacy decision of 10 July 2023, Art. 45 GDPR). See Google's Privacy Policy.
8. Recipients and international transfers
We share personal data only with the recipients listed above: our hosting provider (processor), the game provider (only after your click) and Google (only with your consent). We do not sell data or share it for advertising. Transfers outside the EU occur only as described in section 7.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to withdraw consent (Art. 7(3)). Our GDPR page explains how to use them in one email. Requests are free and answered within one month.
Right to object (Art. 21 GDPR): Where we process data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop unless we demonstrate compelling legitimate grounds that override your interests, or the processing is needed for legal claims. A simple email to hello@emberplaysocial.com is enough.
Right to complain: You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live. Residents of Canada may also contact the Office of the Privacy Commissioner of Canada. Residents of Australia: please see our Australian Privacy Notice, which explains how to complain to the OAIC.
10. No automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
11. Age restriction
The platform is only for adults aged 21+ residing in Germany, in Australia or in Canada (excluding Quebec and Ontario). We do not knowingly collect data from anyone under 21 and delete it promptly if we learn of it.
12. Changes
We update this policy when our processing or the law changes. The version published here applies; registered users are notified of material changes by email.