πŸ”’
PRIVACY POLICY
Last updated: January 2025 Β· Save the Hormuz Β· GDPR Β· UK GDPR Β· CCPA Compliant
This Privacy Policy explains how Save the Hormuz ("we", "us", "our") collects, uses, and protects your information. We comply with the EU General Data Protection Regulation (GDPR), UK GDPR, the EU ePrivacy Directive, the California Consumer Privacy Act (CCPA), and other applicable privacy laws worldwide.
Contents
Data Controller 1. Information We Collect 2. Legal Basis for Processing (GDPR Art. 6) 3. How We Use Your Information 4. Advertising & Third-Party Services 5. Cookies & Consent 6. Data Retention 7. Your Rights 8. Right to Complain to a Supervisory Authority 9. Children's Privacy 10. International Data Transfers 11. Changes to This Policy
1. Information We Collect

Save the Hormuz is a browser-based game. We do not require registration and do not directly collect personally identifiable information through the game interface itself.

The following data may be passively collected through our hosting infrastructure and third-party services you consent to:

Data TypeSourcePurpose
IP address (anonymised where possible)Web server / CloudflareSecurity, fraud prevention
Browser type & versionWeb server logsTechnical compatibility
Device type & operating systemWeb server logsTechnical compatibility
Pages visited, time on siteGoogle Analytics (consent required)Usage improvement
Referring URLWeb server logsUnderstanding traffic sources
Geographic location (country level only)IP geolocationAggregate analytics
Advertising interaction dataGoogle AdSense (consent required)Ad serving & personalisation
Payment & donation dataBuy Me a Coffee / Stripe / PayPalProcessing voluntary donations

Analytics data is used in aggregate form only and is not used to personally identify individual visitors without their explicit consent.

3. How We Use Your Information

Any information collected is used solely for these purposes:

  • Site analytics: Understanding how visitors interact with the game to improve user experience β€” only after consent
  • Technical maintenance: Diagnosing errors, server issues, and performance problems
  • Security: Detecting and preventing abusive, fraudulent, or unauthorised access
  • Advertising: Serving contextual or personalised ads through Google AdSense β€” only after consent
  • Donation processing: Facilitating voluntary payments via Buy Me a Coffee

We do not sell, rent, trade, or otherwise transfer your personal data to any third parties for their independent marketing or commercial purposes.

4. Advertising & Third-Party Services

Google AdSense only activates after you have given explicit cookie consent via our consent banner. If you decline advertising cookies, no advertising cookies will be placed.

You can opt out of personalised advertising at any time by visiting Google Ad Settings or aboutads.info.
ServicePurposeData SentPrivacy Policy
Google AdSenseAdvertising (consent required)Cookies, browsing behaviourView β†—
Google AnalyticsUsage statistics (consent required)Anonymised usage dataView β†—
Google FontsTypographyIP address on font load *View β†—
Buy Me a CoffeeVoluntary donationsPayment data via Stripe/PayPalView β†—
CloudflareHosting, CDN, DDoS protectionIP address, request metadataView β†—
⚠️ Google Fonts: Google Fonts is currently loaded from Google's external servers, which transmits your IP address to Google on each page load. A German court ruled in 2022 that this constitutes a GDPR violation if done without consent. We are working to self-host our fonts to eliminate this transfer. This is disclosed here as required by GDPR transparency obligations.
5. Cookies & Consent

Under the EU ePrivacy Directive and GDPR, non-essential cookies require your explicit prior consent. Our cookie consent banner appears on your first visit and lets you accept or decline each category before any cookies are set.

CategoryExamplesRequires Consent?
Strictly NecessarySession security, load balancing, consent storageNo β€” exempt under ePrivacy Directive
AnalyticsGoogle Analytics (_ga, _gid, _gat)Yes β€” opt-in required
AdvertisingGoogle AdSense (IDE, DSID, NID)Yes β€” opt-in required

Managing Your Cookie Preferences

You can change your cookie preferences at any time by clicking "Cookie Settings" in the footer. You can also manage cookies through your browser settings β€” visit allaboutcookies.org for instructions per browser.

Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.

6. Data Retention

We retain personal data only for as long as necessary for its stated purpose:

Data TypeRetention PeriodReason
Web server access logs30 days maximumSecurity & technical diagnosis
Google Analytics data14 monthsUsage trend analysis (shortest available setting)
Cookie consent records12 monthsProof of consent β€” GDPR requirement
Donation transaction records7 yearsLegal / tax obligation
Data rights request records3 yearsLegal obligation / dispute resolution

After each retention period expires, data is permanently deleted or anonymised. We do not maintain any databases of personal user information beyond the above.

7. Your Rights

To exercise any right, contact us at developerreachpoint@outlook.com. We will respond within 30 days as required by GDPR Article 12. This service is free of charge.

RightWhat It MeansLegal Basis
Access (Art. 15)Request a copy of personal data we hold about youGDPR / UK GDPR / CCPA
Rectification (Art. 16)Request correction of inaccurate or incomplete dataGDPR / UK GDPR
Erasure (Art. 17)Request deletion of your personal data ("right to be forgotten")GDPR / UK GDPR / CCPA
Restriction (Art. 18)Request that we limit processing of your dataGDPR / UK GDPR
Portability (Art. 20)Receive your data in a structured, machine-readable formatGDPR / UK GDPR
Object (Art. 21)Object to processing based on legitimate interestsGDPR / UK GDPR
Withdraw ConsentWithdraw consent for cookie-based processing at any timeGDPR / ePrivacy
Non-DiscriminationNot be discriminated against for exercising your rightsCCPA
Opt-out of SaleOpt out of the sale of personal information β€” we do not sell dataCCPA
8. Right to Complain to a Supervisory Authority
GDPR Article 13(2)(d) β€” Required Disclosure: If you are in the EU/EEA or UK and believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your national Data Protection Authority (DPA) at any time β€” without needing to contact us first.

We would, however, appreciate the chance to address your concerns before you contact a DPA. Please email us at developerreachpoint@outlook.com.

Country / RegionAuthorityLink
All EU Member StatesYour national DPA (find via EDPB)Find your DPA β†—
United KingdomInformation Commissioner's Office (ICO)ico.org.uk β†—
GermanyBundesbeauftragte fΓΌr den Datenschutz (BfDI)bfdi.bund.de β†—
FranceCommission Nationale Informatique et LibertΓ©s (CNIL)cnil.fr β†—
NetherlandsAutoriteit Persoonsgegevens (AP)autoriteitpersoonsgegevens.nl β†—
California, USACalifornia Privacy Protection Agency (CPPA)cppa.ca.gov β†—
9. Children's Privacy

Under GDPR Article 8, the minimum age of digital consent in the EU/EEA is 16 years (some member states have set a lower minimum of 13 β€” the age applicable in the user's country governs). Under US COPPA, the threshold is 13 years.

We do not knowingly collect personal data from children below the applicable age of digital consent in their jurisdiction. If you are a parent or guardian and believe a child has submitted personal data to us, please contact us immediately at developerreachpoint@outlook.com and we will delete it promptly and notify the relevant authority where required by law.

10. International Data Transfers

Some of our third-party service providers process data outside the EU/EEA. Where such transfers occur, we ensure appropriate safeguards as required by GDPR Chapter V:

ServiceLocationTransfer Mechanism
Google (AdSense, Analytics, Fonts)USAEU-US Data Privacy Framework (DPF)
CloudflareUSA / Global CDNStandard Contractual Clauses (SCCs)
Buy Me a Coffee / Stripe / PayPalUSAStandard Contractual Clauses (SCCs)

You can request details of the specific safeguards in place for any transfer by contacting developerreachpoint@outlook.com.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology, or our practices. When we do:

  • The "Last updated" date at the top will be revised
  • For material changes affecting how we process your data, we will provide prominent notice on the site
  • Where required by GDPR, we will seek fresh consent before implementing changes that affect consent-based processing
⚠️ Unlike many policies, we do not treat your continued use of the site as acceptance of policy changes. Material changes will be actively communicated, and new consent will be obtained where required under GDPR β€” silence or inaction does not constitute valid consent under EU law.
← Back to Game