Privacy Policy

Who we are

This policy covers the website at spelvaro.com, run as Spelvaro (“we”, “us”). We are the data controller for the small amount of processing described below.

Information you give us directly

There are no sign-up forms, contact forms, comment boxes, or newsletters here, so in normal use you give us nothing at all. The one exception is if you email us. Then we hold your email address and what you wrote for as long as it takes to deal with it and keep a record of the conversation. We will not add you to a mailing list or pass it on to anyone.

Information stored on your device

The games use your browser's local storage to remember three things: your best score in each game, whether you muted the sound in it, and the last difficulty or board size you picked where a game offers a choice. Nothing else is stored there.

Your browser writes it, it stays on your device, and it is never sent to us or anyone else. We cannot read it, and it holds nothing that identifies you. Clear site data for spelvaro.com in your browser settings and all of it goes, along with your high scores.

Information collected automatically

The site uses Google Analytics 4. It tells us how many people visit, which games get opened, roughly which country a visit came from, and whether it came from a phone or a desktop. It sets a cookie holding a random identifier so that a return visit is not counted as a new one. It never receives your name or your email address, we do not use it to identify anyone individually, and we do not sell or rent data to anyone. The reports show totals only. Google processes this on our behalf, under its own terms as a data processor.

Our hosting provider handles the usual technical request data (your IP address, which page you asked for, your browser's user-agent string, the time) so that it can send you the page and keep the site from being abused. That provider acts as our processor for delivering the site. We do not use those logs to identify or follow individual visitors.

Advertising

There is currently no advertising on this site. No advertising network, script or cookie is loaded. At present nothing collected here is used for advertising.

If we introduce advertising, or another third-party tool, we will update this page and the cookie policy before the change goes live. That covers anything that sets cookies.

Legal bases for processing

For visitors in the United Kingdom and the European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Legitimate interests for the technical request data our host needs in order to serve the site securely and reliably. This is the minimum a web server needs.
• Legitimate interests for handling correspondence you choose to start by emailing us.
• Legitimate interests for the aggregate analytics described above, which we use to see which games are worth keeping and which are not.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, to withdraw consent, and to have it transferred to another provider. If you are in California, you also have the right to know what personal information is collected and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA and CPRA. You do not have to give a reason for any of them.

Your scores are held on your own device and you can delete them at any time. If you have not emailed us, we hold no personal data about you. To exercise any of these rights, write to us. We reply within 30 days, there is no charge, and you will not receive a lesser service for asking.

Children's privacy

The site is for a general audience and contains nothing violent, sexual, gambling-related, or otherwise adult. It is not directed at children under 13, and we do not knowingly collect personal data from them. Playing asks for no account, no name, and no age. If you believe a child has sent us personal information by email, tell us and we will delete it.

Data retention and security

We keep email for as long as it is useful for support and record-keeping, then delete it. Local storage on your device stays until you clear it. Analytics data is held by Google for the retention period set on our account and deleted after that. The site is served only over HTTPS, we run no user accounts, and we hold no database of visitors.

International transfers

Our host and Google both operate globally, so the request data and the analytics data described above may be processed on servers outside your country, including in the United States. Those transfers rely on safeguards such as the European Commission's standard contractual clauses and the UK addendum to them. Your rights go with the data.

Changes to this policy

We may update this Privacy Policy at any time. Continued use of the site constitutes acceptance of changes. The current version always lives at this address.

Contact

Privacy questions, data requests, and complaints: [email protected].