Privacy Policy

19 Jul 2026

Privacy Policy – H9.Games

Last Updated: 20 July 2026

1. Introduction
H9.Games ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and play our HTML5 games. It also informs you of your rights under the General Data Protection Regulation (GDPR) (EU) 2016/679 and the UK GDPR.

2. Data Controller
H9.Games Ltd. is the data controller for the purposes of GDPR.
Contact: info@h9.games

3. What Data We Collect
We collect only the minimum data necessary to provide and improve our services:

  • Automatically Collected Data (via cookies and analytics):

    • IP address (anonymised where possible)

    • Browser type and version

    • Device type and operating system

    • Referring/exit pages and game interactions (e.g., levels completed, scores)

    • Date and time of visit

  • Data You Provide Voluntarily:

    • If you contact us via email: your name, email address, and any message content.

    • If you participate in optional surveys or feedback forms: your responses.

  • We DO NOT collect:

    • Sensitive personal data (health, racial/ethnic origin, political opinions, etc.)

    • Payment or financial information (we do not process payments directly).

    • Precise geolocation (only country‑level).

    • Data from children under 13 (we do not knowingly target or collect from minors).

4. Legal Basis for Processing (GDPR)
We process your data under the following lawful bases:

  • Legitimate Interests (Article 6(1)(f)): To operate, analyse, and improve our website and games; to ensure security; and to prevent fraud.

  • Consent (Article 6(1)(a)): For non‑essential cookies (e.g., marketing, analytics) and optional surveys—you can withdraw consent anytime.

  • Contractual Necessity (Article 6(1)(b)): To respond to your enquiries or provide requested support.

5. How We Use Your Data
We use collected data to:

  • Deliver and optimise game performance

  • Analyse user behaviour to improve game design and user experience

  • Monitor and prevent technical issues or security breaches

  • Respond to your communications

  • Comply with legal obligations

We never sell or rent your personal data to third parties.

6. Cookies and Tracking Technologies
We use essential and analytics cookies. You can manage your cookie preferences via our cookie banner or your browser settings.

 
 
Cookie Type Purpose Duration
Essential Required for site functionality (e.g., session management) Session / Persistent
Analytics (e.g., Google Analytics, anonymised IP) Understand user engagement and improve content Up to 2 years
Functional Remember user preferences (e.g., language, volume) Up to 1 year

You may opt out of non‑essential cookies at any time through our consent manager or by disabling cookies in your browser.

7. Data Sharing and Transfers
We may share anonymised aggregate data with:

  • Service providers (e.g., cloud hosting, analytics platforms) who process data on our behalf under strict contractual terms.

  • Legal authorities when required by law.

All data transfers outside the UK/EEA are protected by Standard Contractual Clauses (SCCs) or adequacy decisions.

8. Data Retention

  • Automatically collected data: retained for 12 months for analytics, then anonymised or deleted.

  • Contact enquiries: retained for 2 years after last interaction, unless a legal obligation requires longer.

  • You may request deletion at any time (see Section 9).

9. Your GDPR Rights
Under GDPR, you have the following rights:

  • Right to Access – Request a copy of your personal data we hold.

  • Right to Rectification – Correct inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten") – Request deletion of your data.

  • Right to Restriction – Limit how we use your data while we resolve a dispute.

  • Right to Data Portability – Receive your data in a structured, machine‑readable format.

  • Right to Object – Object to processing based on legitimate interests or direct marketing.

  • Right to Withdraw Consent – Withdraw consent at any time where we rely on it.

  • Right to Lodge a Complaint – File a complaint with your local Data Protection Authority (e.g., ICO in the UK).

To exercise any right, email info@h9.games with "GDPR Request" in the subject. We will respond within 30 days at no charge.

10. Data Security
We implement appropriate technical and organisational measures, including:

  • Encryption (TLS/SSL) for data in transit

  • Access controls and regular security audits

  • Pseudonymisation where feasible

11. Children's Privacy
Our service is not directed to children under 13. If we learn we have collected personal data from a child without parental consent, we will delete it promptly.

12. Changes to This Policy
We may update this policy periodically. The latest version will always be available on this page with the "Last Updated" date. Material changes will be notified via a banner on our website.

13. Contact
For any privacy‑related questions, please email: info@h9.games