Privacy Policy

This Privacy Policy explains how Verbomatico ("we"), the data controller, processes your personal data when you use Verbomatico. Data protection contact: privacy [arroba] verbomatico [punto] com. The Service is provided by Brick Lane Entertainment S.L. Full provider details are in the Legal Notice.

Data we process

Account data (email, username, password hash); gameplay data (progress, points, rankings, purchases); technical data (IP address, approximate location derived from IP to pick your language, device/browser info, logs); and communications you send us. Payment card data is processed directly by Stripe — we do not receive or store card numbers.

Why we process it (legal bases)

To provide the Service and your account, and to process purchases and subscriptions (performance of a contract); to keep the Service secure and prevent fraud/abuse (legitimate interests); to send service emails such as verification and password reset (contract); and to comply with legal, tax and accounting obligations (legal obligation). Where we rely on consent, you may withdraw it at any time.

Processors and sharing

We share data with service providers who act on our instructions: Stripe (payments), our email/SMTP provider (transactional email), our hosting/database provider (Hostinger), and Google (Google Analytics for audience measurement and Google AdSense for advertising). We do not sell your personal data. Some providers may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses).

Retention

We keep account data while your account is active and as needed afterwards for legal and accounting purposes (billing records are typically retained for the period required by Spanish tax law). You can request deletion as described below. Guest sessions are different: if you play as a guest without creating an account, that temporary account and everything in it is deleted automatically within 24 hours. We keep only an anonymous record of the visit — country and dates, with no IP address or location — so we can measure how many visitors go on to register.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to certain processing. To exercise these rights contact privacy [arroba] verbomatico [punto] com. You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos, AEPD).

Cookies, advertising and consent

We use strictly necessary local storage to keep you signed in and remember preferences (such as your language and session token). These are essential and always active.

We use Google AdSense to display advertising. Google and its advertising partners may set and read cookies or similar identifiers to serve and measure ads. Where required by law — including the EEA, UK and Switzerland under the GDPR, and applicable US state privacy laws — a certified consent message from Google asks for your permission before any non-essential or advertising cookies are used, and lets you choose personalised ads, non-personalised ads, or refuse. You can change or withdraw your choice at any time: Manage privacy settings. For details on how Google uses data, see how Google uses information from sites that use its services.

We also use Google Analytics to measure how the Service is used — pages and features visited, approximate location derived from your IP, and device or browser type — so that we can improve it. We do not use it to identify you personally, and your IP address is anonymised. Analytics storage is switched off by default: no analytics cookies or identifiers are stored until you allow them in the consent message above, so the legal basis is your consent and you can withdraw it at any time using the same link.

Children

The Service is not intended for children below the age of digital consent without parental authorisation (14 in Spain).

Changes

We may update this Policy; material changes will be notified in the app or by email.