Updated 30 September 2026. This notice describes what this service actually stores.
Registration stores your email, screen name, a hashed password, date of birth, UK eligibility, and the time and version of accepted terms. It also stores your fictional-credit balance, round history, favourites, game preferences, reminder settings and any account break. Passwords are not stored as plain text.
A random session identifier links your browser to temporary guest state in server memory. Guest balances and rounds are not written to the account database. They expire after two hours, are deleted when you end the visit and are lost if the application process restarts. No email or date of birth is collected for guest play.
Account data enables sign-in, eligibility declarations, saved balances, game history, support and your chosen controls. Game and image assets are hosted by us. Cloudflare handles delivery and security. Server access logs record connection information, request paths and response status for service operation and security. Google sign-in is not enabled. Optional Google Analytics measures public-page visits after permission.
The Google tag script loads on every page, including before a cookie choice. Fetching it connects your browser to Google and exposes connection information such as your IP address, browser information and this site's origin. Analytics measurement and cookies stay disabled until you allow analytics. After permission, Google receives public-page visits, browser and device information, cookie identifiers and approximate location derived from connection information. Recognised campaign parameters such as UTM and Google Ads click identifiers are included for attribution; other query parameters are excluded. We do not send account names, email addresses, dates of birth, balances or support messages to Analytics. Authenticated visits, account and password pages, support pages, searches and URLs containing non-campaign query parameters are not measured. Google may process analytics information outside the United Kingdom. Advertising storage, advertising personalisation and Google Signals are disabled. Reject analytics or withdraw permission in Cookie preferences without losing access to the site.
Support requests include your reply email, topic, message and reference. Brevo delivers password recovery and support messages; ImprovMX forwards mail addressed to hello@newartdeco.com. The support team can access these records to respond. Do not send payment details, identification documents or other sensitive information.
Account and support records are stored in the application database on our server. Accounts remain until deletion is requested and processed. Daily maintenance removes expired reset tokens, delivery records older than 24 hours and support requests older than 90 days. Database backups are retained for up to 15 days. Reset links expire after 30 minutes and can be used only once.
Manage reminders in your profile and account breaks in Player Care. Request access, correction or deletion through Support or hello@newartdeco.com. Remove browser favourites with the heart control or by clearing browser storage. Deletions may remain in protected backups until the backup retention period expires.