1. Who we are
This Privacy Policy explains how Tadlele (“we”, “us”) collects and uses personal data when you visit tadlele.com, play our games, create an account or contact us. We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Controller: .
You can contact us about privacy by email at [email protected], or through our contact form or the Player Care form at the bottom of every page, choosing the topic “Privacy question”.
2. What we collect
| When | What we collect |
|---|---|
| Creating an account (email) | Username, first and last name, email address, UK phone number, and your password, which is stored only as a one-way hash. We also confirm you are 18+ and in the UK. |
| Continue with Google | Your name, verified email address and Google account ID, sent to us by Google. We never receive your Google password. |
| Using your account | Coin balance, XP, level, games played, daily bonus time, sign-up date and last sign-in, and failed sign-in counts (for security). |
| Contact & Player Care forms | Your name, email address, topic and message. |
| Security logs | Date and time, the action (for example sign-in or sign-up), whether it worked, the email address used and your IP address. Passwords are never logged. |
| On your device | A session cookie while you're signed in, and browser storage for your age check and cookie choice (see our Cookies Policy). |
We do not ask for or store payment details, because Tadlele has nothing to buy.
3. How and why we use it
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, balance and level | Contract (providing the service you asked for) |
| Answering messages and Player Care requests, including breaks and restrictions | Legitimate interests (helping players) and, for account requests, contract |
| Keeping Tadlele secure, preventing misuse and checking eligibility (18+, UK) | Legitimate interests and legal obligations |
| Remembering your age check and cookie choice | Legitimate interests / strictly necessary |
We don't sell your data, we don't use it for advertising profiles and we don't make automated decisions about you that have legal or similar effects.
4. How we keep your data safe
- Passwords are stored only as a strong one-way hash using PHP's built-in password hashing. Nobody, including our team, can read them.
- Account files are kept in a private server folder that is blocked from web access, and each file is protected so it cannot be opened in a browser.
- No exposed data: account records are never placed in our web pages, never shown in tables and no database queries are visible to visitors.
- Sign-in uses a single HttpOnly, SameSite session cookie that scripts can't read, and accounts lock for 15 minutes after five wrong passwords.
- Emails from our forms are sent from our server through an encrypted (TLS) connection to our email provider.
- Logs are stored in a web-blocked folder and are only used for security and to fix problems.
5. Who we share it with
We only share personal data with service providers who help us run Tadlele and who act on our instructions:
- Our web hosting provider, which stores the website, account files and logs;
- Our email delivery provider (Brevo), which delivers messages from our contact and Player Care forms to our team;
- Google, only if you choose Continue with Google, to confirm your identity.
We may also share data if the law requires it, or to protect the rights and safety of our players and team. If a provider processes data outside the UK, we make sure suitable safeguards such as UK adequacy regulations or the UK International Data Transfer Addendum are in place.
6. How long we keep it
- Accounts: until you delete your account. We may remove accounts that have not been used for 24 months.
- Messages: up to 24 months after we've answered them, so we can follow up.
- Security logs: up to 12 months.
- Session cookie: until you sign out or close your browser.
When you delete your account from My account, your account file is removed from our server immediately.
7. Your rights
Under UK GDPR you have the right to access your data, have it corrected, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. To use any of these rights, contact us by email at [email protected], or through our contact form or the Player Care form at the bottom of every page. We'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Under-18s
Tadlele is only for adults aged 18 or over. We don't knowingly collect data from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it.
9. Embedded games and links
Our games are hosted on our own domain and shown inside the page. They may use your browser's storage to remember game settings. Links to other websites (for example support charities) are covered by those websites' own privacy policies.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date at the top shows the current version, and we'll highlight significant changes on the site.