DpolleraLast updated: 26 October 2026
In short: we collect as little as possible, we never sell your data, we never ask for payment details, and your account is stored in protected files on our own server. Passwords are stored only as a one-way hash.
Who we are
Dpollera (dpollera.com) is the data controller for personal data collected through the site. You can reach us about privacy at [email protected] or through our contact form (choose "Privacy question").
What we collect
We only collect what we need:
| When | What | Why |
|---|---|---|
| You play as a guest | Nothing that identifies you. Your browser stores your age confirmation and cookie choice. | So we don't ask again on every page. |
| You create an account | Username, email address, password (stored as a hash only), sign-up date, sign-in method | To create and secure your account. |
| You sign up with Google | Your verified email address and Google account ID. We never receive your Google password. | To sign you in with Google. |
| You play while signed in | Coin balance, XP, level, games opened and when | To run coins, levels and your recently played list. |
| You contact us | Name, email, topic and message | To reply and help you. |
| Any form is sent | Date, form name, email/username and a shortened IP address (last part removed) | Security, preventing abuse and keeping a record of requests. |
We do not collect payment details, phone numbers, addresses or ID documents.
Our legal basis
- Contract: to provide your account and the features you sign up for.
- Legitimate interests: to keep the site secure, prevent abuse and improve our games.
- Legal obligation: where the law requires us to keep or share information.
- Consent: for any optional cookies, which you can withdraw at any time.
How your data is stored and protected
Your account and form data are handled on our server, not in your browser and not in any public list:
- Every form (sign-up, sign-in, contact and Player Care) is processed server-side.
- Each account is kept in its own protected file in a folder that is locked against web access. Even if someone guessed the address, the server refuses to show it.
- Passwords are stored only as a strong one-way hash. Nobody, including our team, can see your actual password.
- Your details are never placed in page code, web addresses (URLs) or anywhere other visitors could see them.
- Sign-in uses a secure, HttpOnly session cookie that page scripts can't read, sent over an encrypted (HTTPS) connection.
- Repeated wrong passwords pause sign-in for 15 minutes to stop guessing attacks.
- Contact messages are sent to our team by encrypted email (TLS).
Who we share it with
We never sell or rent your data. We only share it with service providers who help us run the site, under contracts that protect it:
- our web hosting provider (stores the site and account files)
- our email delivery provider (delivers contact and Player Care messages)
- Google, only if you choose to sign in with Google
We may also share data if the law requires it.
How long we keep it
- Account data: until you delete your account, or 24 months after your last sign-in.
- Contact and Player Care messages: up to 24 months, so we can follow up.
- Form logs: up to 12 months.
- Self-exclusion requests: as long as needed to honour them.
Your rights
Under UK GDPR you have the right to:
- access a copy of your data
- correct anything that's wrong
- delete your data (you can delete your account yourself from My account)
- restrict or object to how we use it
- receive your data in a portable format
- withdraw consent for optional cookies
To use any right, email [email protected]. We'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Under 18s
Dpollera is only for adults. We don't knowingly collect data from anyone under 18. If we learn that we have, we'll delete it.
International transfers
If a provider processes data outside the UK, we make sure suitable safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.
Changes to this policy
We'll update this page if anything changes and show the new date at the top. Significant changes will be announced on the site.