Privacy Policy

Data controller

The controller for personal data processed through umberdock.com is the operator of umberdock.com. Contact: [email protected].

What your account holds

Item	Why	Retention
Nickname	Naming you in the game	Until you delete the account
Email address	Identifying the account so you can log back in	Until you delete the account
Password hash	Letting you log in without us ever holding the password	Until you delete the account
Sign-up date	Support and abuse handling	Until you delete the account
Google account identifier	Only if you chose to sign in with Google, so we recognise you next time	Until you delete the account

That is the complete list. No real name, no address, no date of birth, no phone number, no payment detail — there is nothing on this site to pay for. Your password is kept as a one-way hash only. Lawful basis: performance of a contract, meaning the account you asked us to make. Deleting it from your account page removes everything immediately.

What stays in your browser

Item	Purpose	Retention
Coin balance, level, missions, game settings	Continuing your game	Until you clear browser data
Age confirmation	Not asking again on every page	Until you clear browser data
Cookie choice	Remembering your consent	Until you clear browser data

All of it remains on your device and is never passed to us.

If you sign in with Google

Google is one way in and the email form is the other; both end at the same account. Take the Google route and you approve the request at Google, which then returns three things: a permanent identifier for your Google account, your email address, and your first name, which we offer you as a nickname. Nothing else is asked for — not contacts, not calendar, not Drive, not a profile photo, not any power to act for you — and your password never passes through us. Google's own privacy policy governs what Google does with it.

Stored: the identifier, the email address, the nickname you confirm. Nothing further. Account deletion removes all three immediately. Access can be revoked at any time through "Third-party apps with account access" in your Google account, leaving the games intact and sign-in by email and password available. No Google script is present on these pages, so nothing goes to Google unless the Google button is pressed. Lawful basis: performance of a contract.

Google tags (only with consent)

Under "Accept all" we use Google Analytics and Google Ads tags to measure visits and whether advertising led to play — the first spin being the usual marker. Google receives your IP address, device information and those events. Under "Essential only" the tags run in consent mode, which sets no cookies and no advertising identifiers. Lawful basis: consent.

Server logs

Our host keeps the usual request logs for a short period, for security. Lawful basis: legitimate interests.

What we will not do

Collect payment data: there is nothing on this site to buy.
Send marketing email you did not ask for.
Sell or rent your data to anyone.
Share anything with gambling operators, or carry affiliate links.

Your rights here

You can see what is stored, have it corrected or erased, restrict or object to how it is processed, and withdraw consent at any time. The delete button on your account page removes the account data immediately; clearing this site's data in your browser removes the rest. You can complain to the ICO at ico.org.uk.