Privacy Policy

1.Who we are and what this policy covers

This Privacy Policy explains how HYRO GAMES - FZCO (“HYRO GAMES”, “we”, “us”, “our”) handles personal information when you visit our website at https://hyrogames.com (the “Website”). It also explains the choices you have. Our address and email are in section 13.

This policy covers the Website only. Our games are played on platforms run by other companies, and each game has its own privacy policy, available in the game or on its listing. This policy does not cover playing our games.

The Website has no user accounts and shows no ads. We do not sell your personal information.

2.What we collect

2.1 Messages you send us

If you use the contact form, we receive what you enter: your name, your email address, what your message is about, your company if you give one, and your message.

The Website does not store your message. Cloudflare delivers it by email to our Google Workspace mailbox, contact@hyrogames.com, with your email address as the reply address, so that we can answer you.

If you email us directly, we receive your email address and whatever you write to us.

2.2 Spam protection

The contact page uses Cloudflare Turnstile to check that a message comes from a person and not an automated program. Turnstile runs a check in your browser, and Cloudflare receives your IP address and technical information about your browser to do it. When you send the form, the Website asks Cloudflare to confirm the check and includes your IP address in that request.

To stop the form being misused, the Website also limits how many messages can be sent in a short time. It counts messages using a code calculated from your IP address (a one-way hash). We never store or log your IP address for this.

2.3 Your country

Cloudflare works out from your IP address which country you are visiting from. The Website uses it only to adapt its content to your country. Apart from Cloudflare's short technical logs (section 2.4) and Cloudflare Web Analytics (section 2.5), it is not stored.

2.4 Hosting and security

The Website runs on Cloudflare. To deliver the Website to you and protect it from attacks, Cloudflare processes your IP address and the details of each request your browser makes, such as the page asked for, the time and the type of browser. Cloudflare also keeps short technical logs of requests for us (section 7). When you send the contact form, our code adds to these logs only a reference number and the outcome (for example, sent or blocked), never your message or your email address.

2.5 Analytics

The Website uses Cloudflare Web Analytics to count visits and to see how quickly its pages load. When you open a page, a small script from Cloudflare sends Cloudflare a report about that page view: the address of the page, the page that linked to it, an ID made for that page view only, and measurements of how the page loaded, such as how quickly it loaded and responded, how much its layout moved while loading and how much memory it used. Like any request, the report reaches Cloudflare with your IP address and your browser's details.

From these reports, Cloudflare shows us totals only, such as the number of page views and visits for each page, each linking site and each country, and for each type of device, browser and operating system. We cannot see who you are, and we cannot follow you from page to page.

Cloudflare states that Web Analytics uses no cookies, stores nothing in your browser and reads nothing stored there; that it does not use your IP address or browser details to fingerprint you; that it discards your IP address at the Cloudflare data centre nearest to you; that it does not log the part of a page address after a “?”; and that it does not track people across the websites of its customers.

We do not use analytics for advertising.

3.How we use information and our legal bases

We use the information in section 2 only to:

• answer your messages and keep a record of our conversations;
• protect the Website and its contact form from spam, abuse and attacks;
• adapt the Website's content to your country;
• understand how the Website is used and how well it works, and improve it (analytics);
• comply with the law and respond to lawful requests.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Legitimate interests: to answer your messages, protect the Website and its contact form, adapt the Website's content to your country, and understand how the Website is used and how well it works. You can object to this (see section 8).
• Legal obligation: where we must keep or share information by law.

4.Cookies and similar technologies

Cookies are small text files that a website stores in your browser. Local storage and session storage work in a similar way: local storage stays until it is deleted, and session storage is deleted when you close the tab.

The Website's own code sets no cookies and stores nothing in your browser. Its analytics, Cloudflare Web Analytics, work without cookies (section 2.5).

4.1 What is stored in your browser

cf.turnstile.u is stored only on the contact page, under Cloudflare's own domain (challenges.cloudflare.com). Turnstile loads there for every visitor, because the contact form uses it to block spam. Cloudflare's documentation does not describe this item or say how long it is kept.

4.2 Blocking and deleting cookies

Most browsers let you see, delete and block cookies and other site data, including third-party cookies, in their settings. Your browser's help pages explain how.

5.Who we share information with

We do not sell your personal information. We share it only with the following companies:

• Cloudflare, which hosts the Website, protects it from attacks, runs Turnstile on the contact page, delivers the contact form's messages to our mailbox and provides Cloudflare Web Analytics. Privacy policy: https://www.cloudflare.com/privacypolicy/ and, for Turnstile, https://www.cloudflare.com/turnstile-privacy-policy/
• Google, which provides our mailbox (Google Workspace). Google processes the messages in our mailbox under its data processing terms for Google Workspace. Privacy policy: https://policies.google.com/privacy

We may also share information when required by law, or to protect our rights, our visitors or the public. If our business, or part of it, is sold or merged, the new owner would have to respect this policy.

6.International transfers

We are based in the United Arab Emirates. Cloudflare and Google may process information in the United States and other countries whose data protection laws differ from yours.

For information from the European Economic Area, the United Kingdom and Switzerland, each of them states that it relies on the EU–U.S. Data Privacy Framework, with its UK Extension and the Swiss–U.S. Data Privacy Framework, or on the European Commission's Standard Contractual Clauses. Their privacy policies, linked in section 5, explain how.

7.How long we keep information

• Contact messages and our replies: up to 2 years after the conversation ends.
• Cloudflare Web Analytics, as Cloudflare states it: all reports for 7 days, and after that a sample of about 10% of them. Cloudflare does not say how long it keeps that sample. We can see the totals for the last six months.
• Technical request logs in our Cloudflare account: up to 7 days.

Cloudflare keeps the information it processes to deliver and protect the Website, including Turnstile's checks, as its own privacy policy describes (section 5).

8.Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to its use, and receive a copy in a portable format.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to complain to your local data protection authority.

To use any of these rights, email privacy@hyrogames.com. We answer within one month, or within the time your local law requires. We will not treat you differently for using your rights.

9.Children

The Website is not directed to children under 13, or under 16 in the EEA and UK (or the age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us at privacy@hyrogames.com and we will delete it.

10.Security

We use reasonable measures to protect information, such as encrypted connections and limited access. No system is completely secure, so we cannot guarantee absolute security.

11.Links to other sites

The Website links to websites and services run by other companies, such as the platforms where our games are played. Those companies have their own privacy policies, and we are not responsible for how they handle your information.

12.Changes to this policy

We may update this policy. When we do, we will change the “Last updated” date at the top.

13.Contact us

For questions that are not about privacy, email contact@hyrogames.com.