Privacy Policy.

Who we are

Suitape (suitape.com) is a free-to-play games website for adults 18+ in the UK. We are the controller of the personal information described here.

The data controller is , .

What we collect

• When you sign up with email: first name, last name, email address, UK phone number and a password. Your password is turned into a one-way hash before it's saved, so it is never stored as you typed it. We also record when you joined, your last sign-in and a count of failed sign-in attempts (five wrong tries lock the account for 15 minutes).
• When you sign up with Google: your name, verified email address and Google account ID, which our server checks directly with Google. We ask for your phone number separately.
• When you play while signed in: your coin balance, XP, level, the number of games you've opened, your recently played games and when you last collected the daily bonus.
• When you contact us: your name, email, topic and message.
• Form log: for every form submitted (sign-up, sign-in, contact, Player Care) our server records the date, which form, the outcome, and the name, email and phone entered, with a shortened IP address. Passwords are never logged.

We don't ask for and never store payment, card or bank details.

Where it's kept and how it's protected

Everything is handled on our own server. We don't use a public database, and nothing you submit is ever shown in pages, tables or search results that other people can see.

• Accounts are stored as individual protected files on our server. Each file is named with a scrambled code (a hash) of your email, and the folder is locked so it can't be opened from the web.
• Messages from the contact and Player Care forms are sent from our server to our support inbox through a secure email provider, and a copy is kept in a protected log so we can reply.
• Logs are kept in a locked folder on the server that can't be opened from the web.
• The whole site uses HTTPS encryption, and sign-in uses a secure, HTTP-only session cookie.

Why we use it (lawful bases)

We don't use your information for advertising and we don't make automated decisions about you.

Who we share it with

• Our hosting provider, which runs the server your account is stored on.
• Our email delivery provider, which sends contact and Player Care messages to our inbox.
• Google, only if you choose "Continue with Google" — Google's own privacy policy applies to that sign-in.

We never sell your information. We'd only share it with others if the law requires it.

How long we keep it

• Account: until you delete it (from My account or by asking us). Accounts with no sign-in for 24 months may be deleted.
• Messages: deleted once your request is dealt with, and within 12 months at most.
• Form logs: kept for up to 12 months, then deleted.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask to see, correct, delete or move your information, or object to how it's used. You can delete your account yourself at any time from My account. To make any other request, contact us through our contact form or Player Care, or by email at [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.

Children

Suitape is only for adults aged 18 or over. We don't knowingly collect information from anyone under 18. If you think a child has given us information, contact us and we'll delete it.

Cookies

We use a small number of strictly necessary cookies to keep you signed in. See our Cookies Policy for the full list.

Changes to this policy

We'll update this page if anything changes. The date at the top always shows the latest version.