Privacy policy

In short

• You can play every game without an account. We don't ask for your name or email to play.
• In the EU/EEA, the UK and Switzerland, we use statistics and advertising cookies only if you agree.
• No personalised ads on games made for kids, and no chat or comments on Hyperoza.
• We don't sell your personal data, and game makers don't get it.
• Favourites, recently played games and guest saves stay in your browser.

1. Who is responsible

The controller is Farkas Ronald Zoltán e.v. (Hyperoza), 9730 Kőszeg, Gábor Áron utca 8., Hungary, legal@hyperoza.com. Details: Imprint.

2. What we process, why, and on what legal basis

What happens	Data	Legal basis (GDPR)	How long
Showing you the site and games, keeping them secure	IP address, browser and device details, the pages and files requested	our legitimate interest in running a secure service (Art. 6(1)(f))	we don't store IP addresses in our own databases; our hosting provider processes them to deliver and protect the site
Basic statistics without identifiers (page views, plays, loading time, device type, country)	events without any ID; the country is derived from the IP address, which is then discarded	legitimate interest in knowing which games work (Art. 6(1)(f))	aggregated counts kept indefinitely; they don't identify anyone
Detailed statistics (returning players, playtime, retention)	an anonymous random ID (hz_aid) and session ID stored in your browser, with the events above	your consent in the EU/EEA, UK and Switzerland (Art. 6(1)(a) and the ePrivacy rules); elsewhere our legitimate interest, with an opt-out	raw events up to 13 months; aggregated statistics indefinitely
Searches on the site	the search words (we drop anything that looks like an email address or phone number)	legitimate interest in improving search (Art. 6(1)(f))	90 days, then only counts
Likes and dislikes	your vote and a random like token in your browser	legitimate interest in fair ratings (Art. 6(1)(f))	as long as the game is on Hyperoza
Ads	through Google and its partners: cookies and device IDs, IP address, the page you're on	for personalised ads, and for ads that store data on your device in the EU/EEA, UK and Switzerland: your consent; Google and its partners decide for themselves how they use the data	see the partners' policies
Remembering your privacy choices	your consent choices	legal obligation to keep proof of consent (Art. 6(1)(c))	up to 13 months, then we ask again
Reports and legal notices	your name, email, the report and our decision	legal obligation under the Digital Services Act and Hungarian law (Art. 6(1)(c))	5 years after the decision
Emails you send us	your email address and the message	legitimate interest in answering you (Art. 6(1)(f))	up to 5 years after the matter is closed

Ads in more detail. Ads pay for the free games. Google, our ad partner, is responsible for its own processing: how Google uses data from sites that use its services. Our partners are listed in Privacy choices. If you reject ads cookies in the EU/EEA, UK or Switzerland, we don't request ads that store anything on your device. On games made for kids, ads are never personalised and Google is told the page is directed at children.

What stays in your browser. Favourites, recently played games, your theme and guest saves are kept only in your browser. We never receive them. You can clear them on the Favorites page.

3. Games and game makers

Games run on a separate domain (hyperoza-games.com) inside a sandbox. A game can't read your hyperoza.com data. Our rules forbid games from collecting personal data or running their own tracking or ad tools. A game only learns whether personalised ads are allowed and whether the game is for kids. Game makers don't receive personal data about players, only aggregate statistics.

4. Who receives data

Recipient	What for	Where
Cloudflare, Inc.	hosting, delivery and security of hyperoza.com and hyperoza-games.com, collecting statistics events, forwarding emails sent to legal@hyperoza.com	worldwide network; USA
Supabase, Inc.	our database (statistics, likes, reports)	EU (Frankfurt)
Google Ireland Ltd. and Google LLC	ads and the consent tool (Google acts for itself for ads); the mailbox that receives forwarded emails	EU, USA
Authorities and courts	only when the law requires it	—

We use these providers under data processing terms. We don't sell personal data.

5. Transfers outside the EU

Some providers are based in the USA or process data there. We rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

6. Your rights

You can ask us for access to your data, a copy, correction or deletion, to restrict processing, and you can object to processing based on our legitimate interest. You can withdraw consent at any time in Privacy choices; that doesn't affect what happened before. Write to legal@hyperoza.com. We answer within one month. Because you play without an account, we often can't link data to you; an anonymous ID can be deleted by clearing your choices or site data.

You can complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11., postal address 1363 Budapest, Pf. 9., ugyfelszolgalat@naih.hu, naih.hu, or to the authority where you live or work.

7. Children and parents

Hyperoza is for everyone, and children play here. That's why:

• there are no player accounts for now, and we don't ask anyone for their name, email or age to play;
• there is no chat, no comments and no messaging;
• games made for kids never show personalised ads;
• games may not collect personal data.

Parents can ask us anything, or ask us to delete data, at legal@hyperoza.com.

8. Security and breaches

We use encrypted connections, separate the games from the site, limit who can access data, and keep only what we need. If a personal data breach is likely to put people at risk, we report it to the authority within 72 hours, and we inform you without undue delay if the risk to you is high.

9. Changes

We'll update this policy when our services change and show the date at the top. Material changes are announced on the site before they take effect.