1. Data controller
The controller responsible under the General Data Protection Regulation (GDPR) is Well Done Games UG, Rednitzstraße 18, 90449 Nürnberg, Germany (registered in the commercial register of the Local Court of Nürnberg under HRB 39511). Contact for all data-protection matters: privacy@partyplaypalace.com.
2. Core principle: your data stays on your device
PartyPlay Palace is designed so that essentially no personal data is transmitted to a server. Any account and your game state are stored only in your browser's storage (localStorage). This data stays on your device and is not transmitted to us.
The following is stored in localStorage:
- Account data: email address and display name (only if you create an account).
- Game state: your virtual points balance and progress.
- Preferences: language choice, age confirmation (18+) and your cookie-consent choice.
3. What we do not collect
We do not collect payment data — no payments are possible on PartyPlay Palace. We use no advertising cookies, no analytics or tracking scripts, no social-media plugins and no fingerprinting. We do not sell personal data.
4. Google Fonts
This site uses the "Fredoka" and "Poppins" typefaces. When a page loads, your browser may send a request to Google's servers (Google Fonts), during which your IP address may be transmitted to Google. This serves solely to display the site consistently. The legal basis is our legitimate interest in an attractive presentation (Art. 6(1)(f) GDPR).
5. Legal bases (Art. 6 GDPR)
Local storage of account and game data is based on your consent and on performance of the usage relationship (Art. 6(1)(a) and (b) GDPR). Storing your language setting, age confirmation and cookie choice is based on our legitimate interest in the proper operation of the site (Art. 6(1)(f) GDPR). The inclusion of Google Fonts is based on Art. 6(1)(f) GDPR.
6. Your rights (Art. 15–21 GDPR)
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21). Because your account and game data are stored entirely in your own browser, you can exercise access, rectification and erasure yourself at any time — by viewing, editing or clearing your localStorage or browser data, without contacting us. For any other request, write to privacy@partyplaypalace.com.
7. Retention
Account and game data are stored only in your browser and remain there until you delete them yourself (for example by clearing your browser data). We keep no server-side copies. Any email correspondence you send us is retained only as long as needed to handle your request and then deleted.
8. Security and breach notification
All traffic is encrypted via HTTPS. Should a personal-data breach nevertheless occur, we will as a rule notify the competent supervisory authority within 72 hours of becoming aware of it (Art. 33 GDPR) and inform affected individuals without undue delay where there is a high risk (Art. 34 GDPR).
9. Supervisory authority
You have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
10. Children
PartyPlay Palace is intended solely for persons aged 18 and over. We do not knowingly collect data from minors.
11. Changes
Significant changes to this policy will be noted at the top with a new "Last updated" date.
Server registration log
When you create an account, in addition to the data stored locally in your browser we keep a minimal record on our server: your email address, the time of registration, your display name, and a shortened, irreversibly hashed form of your IP address. Your password is never transmitted to or stored on the server. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in managing accounts and preventing misuse. You may request deletion of this record at any time at privacy@partyplaypalace.com.