Privacy policy

1. Data controller

• Controller: Alejandro Fernández
• Address: Paseo Marítimo 9, 15002 A Coruña, España
• Contact email: pablopsplay13@gmail.com

2. What data we process and why

Contact form. If you write to us from the contact page, we receive your name (if you give it; it's optional), your email, the reason and your message. Along with them, the page you're writing from, your browser and device (the “user agent”), the site's language and the date and time are sent automatically. We use them only to read your message and reply to you.

Error report form. If you report an error from a game, we receive the type of error, your description and your email (if you give it; it's optional). Technical data is also added automatically to locate the problem: the game, the menu, the challenge number, the difficulty, whether the game was finished, the page (URL), the screen size, your browser and device, the site's language and the date and time. We use it to review and fix the error and, if you leave your email, to reply to you.

IP address when sending a form. To prevent spam, each form accepts at most 5 submissions per hour from the same IP address. To count them, the IP is kept only in the server's memory for a maximum of one hour: it is not included in the emails or stored in any database.

Hosting technical logs. Like any web server, our hosting provider's (Vercel) logs the requests it receives (including the IP address) so that the site works and stays secure. Those logs are temporary and we don't use them to identify anyone.

Visit statistics. We use Vercel Web Analytics to know how many people visit the site and which games work best: pages visited, referring site, country, device type, browser and operating system, and game events (for example, which game is started or finished, at what difficulty and with what result). It uses no cookies, stores nothing in your browser and collects data in aggregate, without identifying anyone.

Your moves. To check your answers, your browser sends the server the guesses of the game in progress. They contain no personal data and the server doesn't store them: it only replies whether they're correct.

Images from other websites. Posters and photos are loaded directly from TMDB's servers (image.tmdb.org) and, in the Anime menu, AniList's (s4.anilist.co). As with visiting any website, those servers receive your IP address and technical data about your browser, and process them under their own privacy policies. MovieRoyale doesn't send them any other data.

Advertising. To fund the site we show Google AdSense ads. To show and measure them, Google and its advertising partners receive from your browser your IP address, technical data about your device and browser, the page you're visiting and, if you give your consent, identifiers stored in cookies, which they may also use to personalise ads based on your interests. Your choice is collected with Google's certified consent management platform. The owner does not receive that data: only aggregated revenue reports. More information on how Google uses information from sites that use its services.

Data that stays in your browser. Your progress, games, streaks, records and chosen language are saved only on your device (in your browser's local storage and in a language cookie). They are not sent to any server and the owner has no access to them. We explain this in the cookie policy.

MovieRoyale has no user sign-up or accounts, and the owner does no profiling and makes no automated decisions about you. If you accept personalised advertising, Google and its partners may build profiles for advertising purposes.

3. Legal basis

• Your consent (article 6.1.a GDPR) for the data in the contact and error report forms, which you give by ticking the box before sending them. You can withdraw it at any time by writing to us, without affecting the processing carried out before.
• Your consent (article 6.1.a GDPR and article 22.2 of the Spanish LSSI-CE) for advertising cookies and, where applicable, personalised advertising, which you give or refuse in Google's consent notice. You can change or withdraw it at any time from the “Manage cookies” link in the footer, without affecting the processing carried out before. If you don't give it, Google may show non-personalised or limited ads, without advertising cookies.
• Our legitimate interest (article 6.1.f GDPR) in keeping the site secure and protected against spam (submission limit per IP and technical logs) and in knowing anonymously how it's used in order to improve it (visit statistics).

4. Who receives your data

We don't sell your data to anyone or share it, unless required by law. For the site to work, some providers process data on the owner's behalf, as data processors:

• Vercel Inc. (United States): website hosting and visit statistics.
• Resend (United States): sending the form messages by email.
• Google (Gmail): the email service where those messages are received and answered.

In addition, for advertising, data from your browser goes directly to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which provides the Google AdSense service and the consent platform, and, if you accept, to its advertising partners, listed in the consent notice. Google and those partners process the data as controllers under their own policies (Google's privacy policy and how Google uses information from sites that use its services).

These providers, Google and its advertising partners may process data in the United States and other countries outside the European Economic Area. Those international transfers are covered by appropriate safeguards: the EU-U.S. Data Privacy Framework (which Google LLC and Vercel Inc., among others, have joined) or, failing that, the standard contractual clauses approved by the European Commission.

5. How long we keep your data

• Contact messages and error reports: kept in the owner's email for as long as needed to handle them (reply to you or fix the error) and then deleted, at most one year after the last communication. Resend may keep a technical copy of the email for a limited time, under its own policy.
• IP address for the submission limit: one hour at most, only in the server's memory.
• Visit statistics: kept in aggregate, without identifying anyone.
• Data in your browser: until you delete it yourself (see the cookie policy).
• Advertising data: the periods set by Google and its partners in their policies; those of each advertising cookie are in the cookie policy.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent, by writing to pablopsplay13@gmail.com. Tell us which right you want to exercise and the email you wrote to us from; if needed to verify your identity, we'll ask you for some additional information. We'll reply within one month at most.

If you believe we haven't handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Minors

Anyone can play, but the forms are not intended for children under 14: if you're under 14, don't send us personal data without permission from your parent or guardian. If we find out that we've received data from a child under 14 without that permission, we'll delete it.

8. Security

The site always runs over an encrypted connection (HTTPS) and only the owner has access to the messages received. We apply reasonable measures to protect your data against unauthorized access.

9. Changes to this policy

If the way we handle data changes (for example, because the site adds new features), we'll update this policy and the date at the top of the page.