Who we are
This policy explains how Cucarecu uses personal information when you visit cucarecu.com, create an account or contact us.
The data controller is , .
What we collect
- When you sign up: first name, last name, email address, UK phone number and a password. Your password is turned into a one-way scrambled code (a hash) before it is saved, so it isn't stored as you typed it.
- Account activity: the date you joined, your last sign-in, failed sign-in attempts (five wrong tries pause sign-in for 15 minutes), your coin balance, XP, level, daily bonus time and recently opened games.
- If you use Google: your name, verified email address and Google account ID, which our server checks with Google. We ask for your phone number separately.
- When you contact us: your name, email, topic and message.
- Security records: account events such as sign-ups, sign-ins and deletions, with the date and your IP address, so we can spot misuse.
Where it's kept
Your account is stored on our server in protected storage that can't be opened from the web. It stays there until you delete your account from My account or ask us to delete it.
Messages you send through the contact or Player Care forms are emailed from our server to our support inbox by encrypted connection, and a copy is kept in a protected log on our server so we can reply and check messages arrived.
We never ask for or store card or bank details.
Why we use it
- To run your account, coins and levels (to provide the service you asked for).
- To check you are 18 or over and in the UK (legitimate interests and legal requirements).
- To reply when you contact us and handle breaks, restrictions and deletion requests.
- To keep Cucarecu secure and prevent misuse (legitimate interests).
We don't sell your information and we don't use it for advertising.
How long we keep it
- Account details: until your account is deleted.
- Contact and Player Care messages: until your request has been dealt with, then deleted within 12 months.
- Security records: up to 12 months.
Who we share it with
- Our email delivery provider, which sends contact and Player Care messages to our inbox.
- Our hosting provider, which runs the server the website is on.
- Google, only if you choose Google sign-in. Google's own privacy policy applies.
We may also share information if the law requires it.
Your rights
Under UK data protection law you can ask to see, correct or delete your information, ask us to limit how we use it, or object to how it's used. You can delete your account yourself at any time from My account, which removes it from our server.
Send any request through the contact form or email . You can also complain to the Information Commissioner's Office at ico.org.uk.
Under 18s
Cucarecu is not for anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete its information.
Changes
We'll update this page if anything changes. The date at the top shows the latest version.