Privacy Policy — Spanish Games

Solana Digital Studios S.L. respects your privacy. This Privacy Policy describes what personal data we process when you visit spanishgames.example, why we process it, on what legal basis, with whom we share it, and the rights you can exercise under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

1. Who we are

The data controller is Solana Digital Studios S.L., a company registered in Spain with CIF ES-B98765432, registered office at Calle del Sol 42, 28013 Madrid. Our Data Protection Officer can be reached at [email protected].

2. Data we collect

We try to collect as little personal data as possible. The categories we may handle are:

Technical data — IP address (truncated within 24 hours), browser type and version, device class, screen size, language, and the pages you visited on our site.
Gameplay data — a session identifier stored in your browser's local storage so we can keep your fun-credit balance between page loads.
Communication data — name, email address, and message content you submit through the contact form, plus any follow-up correspondence.
Consent data — your choices in the cookie banner, including a timestamp.

We do not collect government IDs, payment details, or financial information.

3. Why and on what legal basis

To deliver and secure the Service — legitimate interest (Article 6(1)(f) GDPR) in providing a working, abuse-free amusement product.
To remember your preferences — your consent (Article 6(1)(a) GDPR) for non-essential cookies; strict necessity for essential cookies.
To reply to your messages — pre-contractual or contractual steps at your request (Article 6(1)(b) GDPR).
To comply with legal obligations — Article 6(1)(c) GDPR, when authorities lawfully request information.

4. How long we keep it

Server access logs: 30 days.
Anonymous analytics aggregates: up to 14 months.
Contact-form correspondence: up to 24 months after the last reply.
Cookie consent record: 12 months, then we ask again.

5. Who we share it with

We share personal data only with vetted processors who act on our instructions: our cloud hosting provider in the EU, our transactional email provider, and our privacy-friendly analytics provider. We do not sell personal data, and we do not share it with advertising networks.

6. International transfers

Our primary infrastructure is located within the European Economic Area. Where a sub-processor is established outside the EEA, transfers are protected by the European Commission's Standard Contractual Clauses and supplementary measures where appropriate.

7. Your rights

You have the right to: access your data, request correction or deletion, restrict or object to processing, withdraw consent at any time, port your data, and lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es). To exercise any right, email [email protected]. We answer within one month.

8. Security

We apply technical and organisational measures appropriate to the risk, including TLS in transit, encryption at rest, least-privilege access, and regular vulnerability scanning. No method of transmission over the internet is 100% secure, however.

9. Children

The Service is for adults aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has shared personal data with us, contact us and we will delete it.

10. Updates

We may update this policy to reflect operational, legal, or regulatory changes. The "last updated" date below shows when the current version took effect.