1. Introduction and Data Controller
Welcome to the Graffiti Pop Arcade privacy policy. GRAFFITI POP ENTERTAINMENT LTD acts as the data controller for any information processed through this website. We are committed to protecting your privacy in accordance with the UK GDPR and the Data Protection Act 2018. This policy explains how we handle your data when you play our games.
2. Lawful Basis for Processing
Because Graffiti Pop Arcade requires no accounts or registration, our processing of personal data is minimal. Our lawful basis for processing any technical data (like IP addresses) is our legitimate interest in maintaining the security and functionality of the website. We ensure this interest does not override your fundamental rights.
3. Information We Collect
When you engage with titles like Mural Matcher or Paint Drop, we collect anonymous session data to keep your gameplay smooth. This includes your device type, browser information, and local storage data used to remember your Vibrance balance. We do not collect your name, email, or physical address as part of the core gameplay loop.
4. How We Use Your Information
The technical data collected is used solely to deliver the social casino experience. It allows us to save your progress in Tagging Spree and ensure your Vibrance balance remains accurate during your session. We also use aggregated, anonymised data to analyse site traffic and improve our game offerings.
5. Cookies and Local Storage
We utilise cookies and local browser storage to provide our services. Local storage is primarily used to track your in-game currency and ensure your Vibrance balance persists if you refresh the page. For detailed information on our tracking technologies, please refer to our dedicated Cookie Policy.
6. Data Sharing and Third Parties
Graffiti Pop Arcade does not sell, rent, or trade your personal data to third parties. We may share anonymised analytics data with our service providers who help us host and monitor the website. These providers are strictly bound by data processing agreements in compliance with UK law.
7. Data Retention
Because gameplay is session-based and does not require an account, session data and your Vibrance balance are stored locally on your device. Any server-side access logs containing IP addresses are automatically deleted after 30 days. You can clear your local data at any time by clearing your browser cache.
8. Your Data Protection Rights
Under UK data protection law, you have the right to request access to, rectification of, or erasure of your personal data. You also have the right to object to processing and request data portability. As we hold minimal identifiable data, we will do our utmost to assist with any valid requests sent to support@graffitipoparcade.com.
9. Complaints to the ICO
If you believe Graffiti Pop Arcade has mishandled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.