Privacy Policy

This Privacy Policy explains how Verbomatico ("we"), the data controller, processes your personal data when you use Verbomatico. Data protection contact: privacy [arroba] verbomatico [punto] com.

Data we process

Account data (email, username, password hash); gameplay data (progress, points, rankings, purchases); technical data (IP address, approximate location derived from IP to pick your language, device/browser info, logs); and communications you send us. Payment card data is processed directly by Stripe — we do not receive or store card numbers.

Why we process it (legal bases)

To provide the Service and your account, and to process purchases and subscriptions (performance of a contract); to keep the Service secure and prevent fraud/abuse (legitimate interests); to send service emails such as verification and password reset (contract); and to comply with legal, tax and accounting obligations (legal obligation). Where we rely on consent, you may withdraw it at any time.

Processors and sharing

We share data with service providers who act on our instructions: Stripe (payments), our email/SMTP provider (transactional email), our hosting/database provider (Hostinger), and Google (Google Analytics for audience measurement and Google AdSense for advertising). We do not sell your personal data. Some providers may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

Retention

We keep account data while your account is active and as needed afterwards for legal and accounting purposes (billing records are typically retained for the period required by Spanish tax law). You can request deletion as described below. Guest sessions are different: if you play as a guest without creating an account, we keep that guest account and what you do in it, together with its IP address, the country derived from it and your device and browser, so we can understand how visitors use the Service and improve it. We keep it until you ask us to delete it as described below. Inside the app we also keep, per account, a record of which screens you open, for how long you actively use them and the approximate location (city and country, derived from your IP address, which is not stored) of each session, so we can improve the app; this record is deleted after 90 days.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. To exercise these rights contact privacy [arroba] verbomatico [punto] com. You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, AEPD).

Cookies, advertising and consent

We use strictly necessary local storage to keep you signed in and remember preferences (such as your language and session token). These are essential and always active.

We use Google AdSense to display advertising. Google and its advertising partners may set and read cookies or similar identifiers to serve and measure ads. Where required by law — including the EEA, UK and Switzerland under the GDPR, and applicable US state privacy laws — a certified consent message from Google asks for your permission before any non-essential or advertising cookies are used, and lets you choose personalised ads, non-personalised ads, or refuse. You can change or withdraw your choice at any time: Manage privacy settings. For details on how Google uses data, see how Google uses information from sites that use its services.

We also use Google Analytics to measure how the Service is used — pages and features visited, approximate location derived from your IP, and device or browser type — so that we can improve it. We do not use it to identify you personally, and your IP address is anonymised. Analytics storage is switched off by default: no analytics cookies or identifiers are stored until you allow them in the consent message above, so the legal basis is your consent and you can withdraw it at any time using the same link.

Children

The Service is not intended for children below the age of digital consent without parental authorisation (14 in Spain).

Changes

We may update this Policy; material changes will be notified in the app or by email.