Privacy Policy

1. Information Collection and Sources

PlayUntilItWorks Iberia S.A. ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you. We collect information directly from you when you interact with our platform, automatically through tracking technologies as you navigate the site, and occasionally from trusted third-party partners who assist in providing our ad-supported services.

2. Account Registration Data

When you register for a free account to save your progress and claim daily Aura Sparks, we require certain basic information. This typically includes your chosen username or display name, a valid email address for account recovery and vital communications, and an encrypted password. We do not require, nor do we store, any financial information, real-money payment details, or highly sensitive personal data as our platform operates strictly on a free-to-play model without cash transactions.

3. Gameplay Analytics and Telemetry

To ensure our games function flawlessly and to understand how our community interacts with the MirageWorks Oasis, we collect telemetry data. This includes which games you play (such as Dune Roulette or Mirage Reels), the duration of your sessions, the frequency of your logins, your virtual Aura Sparks balance fluctuations, and your interactions with site features like the Mirage Caches. This data is aggregated and anonymized where possible, used strictly to improve platform performance, balance game mechanics, and detect any anomalous or fraudulent behavior.

4. Explicit Consent Framework

We rely on your explicit consent for specific data processing activities, particularly concerning non-essential cookies and targeted advertising. Upon your first visit, you are presented with clear options to accept or decline these tracking mechanisms. You have the right to withdraw your consent at any time without facing any detriment to your core ability to play our free games. We maintain transparent logs of consent choices to ensure compliance with relevant data protection regulations.

5. Third-Party Service Providers

Our ad-supported model means we partner with select third-party advertising networks to keep the platform free. These providers may collect data regarding your browsing habits across different websites to serve relevant ads. Furthermore, we may use third-party analytics services, hosting providers, and customer support ticketing systems. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

6. Cross-Border Data Transfers

PlayUntilItWorks Iberia S.A. is based in Spain. However, some of our external third parties are based outside the European Economic Area (EEA), so their processing of your personal data will involve a transfer of data outside the EEA. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission, or we use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

7. User Rights and Data Portability

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to request access to your personal data (a "data subject access request"), request correction of the personal data that we hold about you, request erasure of your personal data, object to processing of your personal data, request restriction of processing of your personal data, and request the transfer of your personal data to you or to a third party (data portability). If you wish to exercise any of the rights set out above, please contact our support team.

8. Account Deletion and Right to be Forgotten

We recognize your right to be forgotten. If you wish to permanently delete your account and associated personal data, you may submit a request to our support email. Upon verification of your identity, we will securely erase your account details, wipe your virtual Aura Sparks balance, and remove identifiable telemetry data from our active databases, subject to any legal obligations that require us to retain specific records for a mandated period.

9. Security Protocols and Encryption

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. All data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL protocols. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

10. Data Breach Notification Procedures

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Our security operations center continuously monitors for unauthorized access attempts. In the unlikely event of a significant data compromise affecting your rights and freedoms, we will communicate the nature of the breach, the potential consequences, and the mitigation steps we are taking.

11. Age Verification and Child Protection

Play Until It Works is strictly for adults aged 18 and over. We do not knowingly collect data relating to children. Our registration process includes age affirmation, and our marketing efforts are never directed at minors. If we become aware that we have inadvertently collected personal data from anyone under the age of 18, we will take immediate steps to delete that information from our records and terminate the associated account.

12. Policy Update Mechanisms

We keep our privacy policy under regular review. This version was last updated recently. We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make significant changes, we will notify you through a prominent notice on our website or via email if you have an active account. We encourage you to periodically review this page for the latest information on our privacy practices.

13. Data Protection Officer (DPO) Contact Info

If you have any questions about this privacy policy or our privacy practices, including any requests to exercise your legal rights, please contact us using the details provided below:
Email address: [email protected]
Postal address: Paseo de la Castellana 259, Torre de Cristal, 28046 Madrid, Spain.