This Privacy Policy explains how ARCELLE LIMITED ("we", "us", "our"), 71 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, processes personal data when you use GameVira. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
1. Data we collect
- Account data — display name, email address and a one-way hash of your password (never the password itself), plus account metadata such as creation date, role and last sign-in.
- Support data — messages you send through the contact form or by email, and game reports you submit.
- Security data — failed sign-in counters on your account, and short-lived, hashed (non-reversible) identifiers derived from IP addresses that we use to rate-limit sign-in and form submissions. These expire within hours.
- Technical data — standard web server logs (IP address, browser type, pages requested) used for security and troubleshooting.
We do not collect payment data (the Service is free), and we do not run advertising or analytics trackers.
2. How we use your data and lawful bases
- Providing the Service (account, sign-in, game access) — performance of a contract.
- Security, abuse prevention and rate limiting — legitimate interests.
- Responding to support requests and game reports — legitimate interests.
- Meeting legal obligations (for example, responding to lawful requests) — legal obligation.
3. How data is stored
Application data is stored in private server-side files outside the publicly accessible web directory, protected by filesystem permissions, file locking and access controls. Passwords exist only as strong one-way hashes, and password-reset tokens are stored only as hashes. Access is limited to authorised administrators.
4. Games and third parties
We do not sell your data. Game thumbnails are served from our own servers, so browsing the catalogue does not contact third parties. When you launch a game, your browser connects to the third-party provider hosting that game; the provider receives the technical data any web request carries (such as your IP address), but we do not send them your account details. We may disclose data where required by law.
5. Retention
Account data is kept while your account is active. Support messages and reports are kept for up to 24 months. Rate-limiting identifiers expire within hours, and server logs are rotated regularly. When you delete your account, your account data and any pending reset tokens are removed immediately; see Account Deletion.
6. Your rights
You have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any right, contact support@gamevira.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
We use a single strictly necessary session cookie, created only when you sign in or use a form, and remember in your browser whether you dismissed the cookie notice. Details: Cookie Policy.
8. Children
The Service is not directed at children under 13 (or the applicable digital-consent age). If you believe a child has created an account, contact us and we will delete it.
9. Changes
We may update this policy; material changes will be reflected in the "Last updated" date above.
10. Contact
Data protection enquiries: support@gamevira.com, or by post to ARCELLE LIMITED, 71 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.