1. Data controller

This policy complies with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD). We apply the same level of protection to every user, wherever they live.

2. What data we process and why

Playing on one phone

Player names, the level and game length you pick and your preferences (for example, sound) are saved only on your own device for your next game. They are not sent to our servers and we can't see them. You can delete them whenever you like from your browser settings.

Playing in a room (everyone on their own phone)

To keep the game in sync, our server receives the name or nickname you type when you join and your game actions (for example, your votes). They are kept in memory only while the room exists and are deleted automatically when nobody has been connected for 30 minutes or after 6 hours with no activity. They are not stored in any database or used for anything else. We recommend using a nickname rather than your full name.

Legal basis: providing the service you request when you create or join a room (Art. 6(1)(b) GDPR).

Technical connection data

Like any website, the server processes your IP address, browser type and the date of your requests so it can show you the page, keep things secure and prevent abuse. These logs are kept for 30 days at most.

Legal basis: our legitimate interest in running the service securely (Art. 6(1)(f) GDPR).

Usage statistics (only if you accept them)

If you tap “Accept” in the cookie notice, we use Google Analytics 4 (through Google Tag Manager) to find out how many people visit the website, which pages are viewed most, which games are played (game, mode, level, themed deck, number of players, length and turns of the game), whether rooms are created or links shared, and from what type of device and approximate area (country or city). Analytics gives your browser a random identifier stored in cookies; it doesn't receive your name or the names or text you type in the games.

With that same permission we turn on Google Signals, which lets Google show us, always in aggregate and anonymously, the approximate age range, gender and interests of visitors who are signed in to Google and have ad personalization turned on in their account. To do this, Google uses its advertising cookies (on its own domains) and also receives the visit data for advertising purposes, under its own policy. There are no ads on this website, and we don't use it to show you ads or for remarketing. The data is kept in Analytics for 14 months at most.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22.2 of the Spanish LSSI-CE). If you don't accept, nothing from Google is loaded. You can withdraw it at any time from “Cookie settings,” at the bottom of any page: we'll delete the Analytics cookies and stop measuring.

If you write to us

If you send us an email, we'll use your address and whatever you tell us only to reply to you. We'll keep it for as long as needed to handle your request and, at most, one year afterward, unless the law requires otherwise. Emails sent to our contact address go through a forwarding service (ImprovMX), which doesn't store their content, to our inbox (Gmail, by Google).

Legal basis: your consent when you write to us and our legitimate interest in responding to you (Art. 6(1)(a) and 6(1)(f) GDPR).

3. What we don't do

  • We don't require sign-up or create accounts.
  • We don't sell or share your data with third parties for commercial purposes.
  • We don't build individual profiles or show personalized ads (we only see Google Signals demographics in aggregate).
  • We don't make automated decisions that affect you.
  • We don't show ads. Statistics cookies, and the Google cookies used by Google Signals, are only set if you accept them (see the cookie policy).

4. Who else has access to the data

Our hosting provider, Hostinger (servidor privado virtual), which acts as a data processor with the safeguards required by Art. 28 GDPR. Fonts and all other website resources are served from our own domain: the only connection to a third party is Google Analytics, and only if you accept statistics.

  • Google (Google Ireland Limited), as a data processor for Google Analytics and Google Tag Manager, only if you accept statistics. We have turned off data sharing with Google for other purposes; for Google Signals, Google also uses data from Google accounts with ad personalization turned on, under its own privacy policy.
  • ImprovMX, which forwards the emails you send us to our inbox, and Google (Gmail), where we read and answer them.

Some of these providers may process data outside the European Economic Area (for example, in the United States). When they do, it's with the safeguards set out in the GDPR: adequacy decisions, such as the EU-U.S. Data Privacy Framework, or the European Commission's standard contractual clauses.

5. Minors

The website is intended exclusively for people aged 18 or older (or of the legal drinking age in their country, if that is higher). We do not knowingly collect data from minors. If we find out that a minor is using the service, we will delete their data.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent, by writing to contacto@juegosparabeber.online. We'll reply within one month at most.

If you feel we haven't handled your request properly, you can file a complaint with the Spanish Data Protection Agency (AEPD) or with the data protection authority in your country.

If you live outside the European Union

We give every user the same rights. In particular, for California residents (CCPA/CPRA): we don't sell or share personal information, and you can ask to know or delete your data without facing any discrimination. Residents of the United Kingdom (UK GDPR) or Brazil (LGPD) have rights equivalent to those described here.

7. Security

The website uses an encrypted connection (HTTPS) and we follow the principle of data minimization: we only process the data that is strictly necessary, for as short a time as possible.

8. Changes to this policy

If we change how data is processed (for example, if we add advertising), we'll update this page and its review date and, where the law requires it, we'll ask for your consent before the change applies.