Privacy Policy

1. Introduction

Xylum Games ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at xylumgames.com (the "Site") or use our games and services (collectively, the "Services"). Please read this policy carefully. By using our Services, you consent to the practices described in this policy.

2. Data Controller

The data controller responsible for your personal data in connection with the Services is Xylum Games. For questions about this policy or our data practices, you can contact us using the details in the Contact section below.

3. Information We Collect

We may collect the following categories of information:

• Information you provide: When you contact us (e.g. via email or a contact form), we may collect your name, email address, and the content of your message.
• Automatically collected information: When you access the Site, we may automatically collect certain information such as your IP address, browser type, device type, and general usage data. We do not use cookies or similar tracking technologies unless explicitly stated in this policy or in a cookie notice on the Site.
• Local game data: Our games may save progress, settings, and preferences locally on your device (e.g. in your browser's local storage). This data is stored only on your device and is not transmitted to our servers unless a specific game clearly states otherwise.

4. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide support.
• Operate, maintain, and improve the Site and our games.
• Comply with legal obligations and protect our rights.
• Send you updates or communications only if you have opted in and where permitted by law.

We do not sell your personal information to third parties. We do not use your information for targeted advertising on the Site.

5. Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following bases:

• Consent: Where you have given clear consent (e.g. for optional communications).
• Contract: Where processing is necessary to provide the Services you request.
• Legitimate interests: Where we have a legitimate interest (e.g. responding to contact requests, improving our Services) that is not overridden by your rights.
• Legal obligation: Where we must process data to comply with the law.

6. Data Retention

We retain your information only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. Contact form and email correspondence may be retained for a reasonable period to handle follow-ups and support. Local game data on your device remains until you clear it or uninstall.

7. Sharing and Disclosure

We may share your information in the following circumstances:

• Service providers: We may use third-party services (e.g. contact form providers, hosting) that process data on our behalf. These providers are bound by contractual obligations to protect your data and use it only as we instruct.
• Legal requirements: We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.
• Business transfers: In the event of a merger, sale, or transfer of assets, your information may be transferred as part of that transaction, subject to this policy.

We do not share your personal information with third parties for their marketing purposes.

8. Cookies and Similar Technologies

Our Site may use only strictly necessary cookies or similar technologies required for the Site to function (e.g. session or security-related cookies). We do not use non-essential cookies, analytics cookies, or advertising cookies unless we update this policy and, where required by law, obtain your consent. You can control cookies through your browser settings.

9. International Data Transfers

Your information may be processed in countries other than your country of residence. Where we transfer data from the EEA or UK to countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards (such as standard contractual clauses) in accordance with applicable law.

10. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Restriction: Request that we limit how we use your data in certain cases.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where we rely on consent, you may withdraw it at any time.
• Complain: Lodge a complaint with a supervisory authority in your country.

To exercise these rights, please contact us using the details below. We will respond within the timeframes required by applicable law.

If you are in California, USA, you may have additional rights under the CCPA (e.g. right to know, delete, opt out of sale). We do not sell personal information as defined under the CCPA.

11. Children's Privacy

Our Services are not directed at children under 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it promptly.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the Internet or electronic storage is completely secure; we cannot guarantee absolute security but we strive to protect your information in line with industry practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may be communicated via a notice on the Site or, where required by law, by other means. Your continued use of the Services after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, or wish to exercise your rights, please contact us:

• By email: [email protected]
• Via the contact section on our website

We will respond to your request as required by applicable law.