Privacy Policy
What information we collect, why we collect it, where it is stored and what you can do about it. It covers only what the site actually does.
Last updated: 17 October 2026
1. Data controller
The operator of this website is the data controller for personal data handled on cloudzleisure.com. You can contact us through the contact form, and any privacy request can be sent by email [email protected] or our contact form.
2. Information we collect
When you simply browse and play
- Your “I’m 18 or over” confirmation is kept in your browser’s local storage and is never sent to us.
- A list of games you opened recently and a visit timer are held only in your browser (see the Cookie Policy for more).
- To keep the site secure and running, our hosting provider’s servers keep routine technical logs, such as IP address, time, pages requested and browser type.
When you register with email
- Your first and last name, email address and date of birth, the last of which is used to check that you are 18 or over.
- Your password, stored only as a one-way scrambled “hash” and never as you typed it.
- Technical account records: when you joined, your most recent sign-in, the number of failed sign-in attempts (five wrong tries pause sign-in for 15 minutes) and, while a reset is pending, a hashed reset code with its expiry time.
When you sign in with Google
- Clicking “Continue with Google” is what makes your browser load Google’s sign-in script, and you then sign in in a Google window. Google passes us your name, verified email address and Google account ID, and our server checks the sign-in directly with Google.
- We then ask for your date of birth and your confirmation that you are 18 or over and in the UK, and store the same details as above, with no password involved.
When you contact us
- If you use the Contact or Support forms, we collect your name, email address, topic and message, and email them to our support inbox through PHPMailer.
- For each attempt, our server records a short log entry containing only the date, the form used, the topic and whether sending worked. Your name, email address and message are not written to that log.
- If you ask for a password reset, a link valid for one hour is emailed to the address on the account.
We never ask for or store card or bank details, because nothing on the site costs money.
3. Storage and retention
- Account details are held on our server in a protected file (we do not use a database) that cannot be opened from the web. They stay until you delete the account in My account or ask us to.
- Messages reach us by email and remain in our support inbox only while we need them to deal with your request and any follow-up.
- Browser storage (age confirmation, recent games, notice choice) stays on your device until you clear it, while the visit timer disappears when you close the tab.
- Server logs are kept by our hosting provider for a limited period under its own routines.
4. Purposes and legal bases
| Purpose | Information | Legal basis (UK GDPR) |
|---|---|---|
| Running your account and letting you sign in | Name, email, password hash, Google ID, sign-in records | Performing our agreement with you |
| Checking that you are 18 or over | Date of birth, age confirmation | Legitimate interests (keeping the site adults-only) and legal obligations |
| Replying to messages and resetting passwords | Name, email, topic, message | Legitimate interests (responding to you) and performing our agreement |
| Keeping the site secure and working | Failed-sign-in counts, server logs, session cookie | Legitimate interests |
| Remembering your age check and recent games on your own device | Browser storage | Strictly necessary / your own device settings; see the Cookie Policy |
5. Recipients of your data
- Email delivery provider. An SMTP email service (Brevo) delivers form messages and reset emails to our inbox and yours.
- Google, only if you choose Google sign-in, in which case Google’s own privacy policy applies.
- Game developers. Their games run inside our pages from our own domain and may keep their own settings or credit balances in your browser. We do not pass your account details to them.
- Hosting provider, which stores the site and its logs for us.
- Public authorities, where the law requires it.
Some of these providers may process data outside the UK. Where they do, they should apply the safeguards that the law requires.
6. What we never do
- We show no advertising, and there are no advertising cookies or trackers.
- We use no analytics tools and do not profile you.
- We never sell your information or send marketing emails. The only emails you receive are replies to your messages and password resets you requested.
- We load no third-party fonts, as our fonts are served from our own domain.
7. Your rights
Under UK data protection law you can ask to see the data we hold about you, have it corrected or erased, restrict or object to its use, and receive a portable copy. You can delete your account yourself at any time in My account, which removes it from our server. For any other request, contact us by email [email protected] or our contact form (choose “Privacy question”).
If you are unhappy with how we handle your information, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.
8. Age restriction
The site is intended solely for adults aged 18 and over, and we do not knowingly collect information from anyone younger. If you think someone under 18 has an account, let us know and we will remove it.
9. Updates to this policy
We will revise this page if the way the site handles your information changes, and the date at the top shows the latest version.