Privacy Policy
What data we gather, our reasons, where it lives and what you can do about it. We have limited this to what the site genuinely does.
Last updated: 7 October 2026
1. Who is responsible
Responsibility for the data handled on iotarabi.com sits with the operator of this website, who is the data controller. To reach us, use the contact form. Any privacy request can be sent to us by email [email protected] or our contact form.
2. What we collect
If you only browse and play
- Your age confirmation (“I’m 18 or over”) is held in your browser’s local storage and never reaches us.
- Your browser alone holds a list of the games you opened lately and a visit timer (the Cookie Policy has the details).
- For security and to keep the site running, the servers of our hosting provider record routine technical logs, for example IP address, time, requested pages and browser type.
If you create an account with email
- Your first name, last name, email address and date of birth, with the date of birth used to confirm you are 18 or older.
- Your password, which is kept solely as a one-way scrambled “hash” and never in the form you typed it.
- Technical records about the account: the date you joined, your latest sign-in, how many sign-in attempts failed (five incorrect tries pause sign-in for 15 minutes) and, whenever a reset is waiting, a hashed reset code with its expiry time.
If you use Google sign-in
- Pressing “Continue with Google” makes your browser load Google’s sign-in script, and you then sign in inside a Google window. We receive your name, verified email address and Google account ID from Google, and our server confirms the sign-in directly with Google.
- After that we ask for your date of birth and your confirmation that you are 18 or over and in the UK, then store the details listed above, though no password is involved.
If you write to us
- Using the Contact or Support forms means we gather your name, email address, topic and message, which are emailed to our support inbox.
- For every attempt, our server writes a brief log entry holding the date, the form used, the topic and whether sending succeeded. Your name, email address and message are not recorded in it.
- Requesting a password reset results in a reset link, valid for one hour, being emailed to the address on the account.
Card and bank details are never requested or stored, as nothing on the site costs anything.
3. Where it’s kept and for how long
- Account details sit on our server in a protected file (there is no database) that cannot be opened through the web. They remain until you delete the account in My account or ask us to.
- Messages you send arrive by email and stay in our support inbox only for as long as we need them to handle your request and anything that follows.
- Browser storage (age confirmation, recent games, notice choice) remains on your device until you clear it, whereas the visit timer disappears once you close the tab.
- Server logs are held by our hosting provider for a limited time, following its own routines.
4. Why we use it
| Purpose | Information | Legal basis (UK GDPR) |
|---|---|---|
| Operate your account and let you sign in | Name, email, password hash, Google ID, sign-in records | Carrying out our agreement with you |
| Confirm that you are 18 or older | Date of birth, age confirmation | Legitimate interests (keeping the site for adults only) and legal obligations |
| Answer messages and reset passwords | Name, email, topic, message | Legitimate interests (responding to you) and carrying out our agreement |
| Protect the site and keep it running | Failed-sign-in counts, server logs, session cookie | Legitimate interests |
| Keep your age check and recent games on your own device | Browser storage | Strictly necessary / your own device settings; see the Cookie Policy |
5. Who we share it with
- Email delivery provider. An SMTP email service (Brevo) carries form messages and reset emails so that they get to our inbox and yours.
- Google, but only when you pick Google sign-in, in which case Google’s own privacy policy applies.
- Game developers. Their games open within our pages from our own domain and might store their own settings or credit balances in your browser. Your account details are not handed over to them.
- Hosting provider, which holds the site and its logs on our behalf.
- Public authorities, where the law demands it.
A few of these providers could process data outside the UK. If so, they ought to apply the protections that the law requires.
6. What we don’t do
- We run no advertising, and there are no advertising cookies or trackers.
- We use no analytics tools and carry out no profiling.
- Your information is never sold, and we send no marketing emails. The only emails you get from us are replies to your messages and password resets you asked for.
- We use no third-party fonts, since the fonts come from our own domain.
7. Your rights
UK data protection law lets you request to see what we hold about you, have it fixed or erased, limit or object to the way it is used, and obtain a portable copy. Deleting your account is something you can do yourself whenever you like in My account, and that takes it off our server. For all other requests, get in touch through email [email protected] or our contact form (pick “Privacy question”).
Should you be unhappy about how we deal with your information, you are entitled to complain to the Information Commissioner’s Office at ico.org.uk.
8. Age limit
Adults of 18 and above are the only people the site is for. We do not knowingly gather information from anyone younger. Tell us if you believe an under-18 holds an account, and we will remove it.
9. Changes
This page will be updated if the site’s handling of your information changes. The date at the top shows the newest version.