Privacy and cookies
Last updated: before launch (the game is not live yet)
Scam Town is run by Hoang Tran, Chapel Farm Road, London SE9 3HN, United Kingdom ("we"). We are responsible for the data described here. Contact: privacy@ardianic.com
The short version
- We keep a username, your password and recovery code in scrambled (hashed) form, and your game.
- We don't ask for an email, real name, phone number or contacts, and we don't store your IP address.
- Ads come from Google and are not personalised.
- You can delete everything at any time with Delete my account.
What we keep, and why
| What | Why | How long |
|---|---|---|
| Username | to show you to other players | until you delete the account |
| Password and recovery code, hashed (we can't read them) | to let you sign in and reset a password | until you delete the account |
| Your game: coins, level, letters, items, pins, settings | to run the game | until you delete the account |
| A sign-in cookie | to keep you signed in | until you sign out, or it expires |
| Reports you make or get | to keep the game safe | 30 days after they are dealt with |
We use this data to provide the game you signed up for, and to keep it safe and working. We don't sell it, and we don't use it to build advertising profiles.
Our legal reasons (under UK GDPR and EU GDPR):
- Contract: your account, your game and the sign-in cookie are needed to give you the game you signed up for.
- Legitimate interests: we keep reports to keep players safe and stop abuse.
- Consent: where the law asks for it, Google's ads and cookies run only after you agree in Google's consent message.
Who else is involved
- Cloudflare hosts the game and its database. It processes the data above on our behalf. Like any host, it also sees your IP address to deliver the pages and to block attacks. We don't store it.
- Google AdSense sees your IP address when it shows an ad, because the ad comes straight from Google.
We share no other data with anyone, unless the law requires it.
Data may be processed outside your country, including in the United States. Cloudflare and Google protect these transfers with the safeguards the law provides: the UK and EU standard contractual clauses, and the EU-US Data Privacy Framework and its UK extension, which both companies have joined.
Ads and cookies
- Ads are shown by Google AdSense in grey boxes marked "Advertisement". They are not personalised: they are chosen from the page you are on, not from what you do elsewhere.
- Google may still use cookies or similar storage to count ads, limit how often you see them and stop fraud.
- Visitors in the EU, the UK and Switzerland are asked first, in Google's own consent message. You can change your answer any time with Change my cookie choices in the game's menu.
- How Google uses data from sites that show its ads: https://policies.google.com/technologies/partner-sites
- The game also keeps your language and sound settings on your device. These are not sent to anyone.
Children
Scam Town is for players 13 and over. We don't knowingly keep data about children under 13. If you think a child under 13 has an account, tell us at privacy@ardianic.com and we will delete it.
Your rights
You can:
- delete your account and everything we keep about you, with Delete my account;
- ask for a copy of your data, or ask us to correct it, at privacy@ardianic.com;
- object to how we use it, or complain to your data protection authority (in the UK, the ICO; in the EU, your country's authority).
We have no email for you, so when you write to us, say your username. We may ask you to prove the account is yours from inside the game.
Changes
We may update this page. The date at the top shows the latest version. For a big change, we'll say so in the game.