Privacy Policy

Last updated: 24 October 2026

1. Who runs this

(company number [TBD: company number]). Our registered address is [TBD: registered address]. We are the data controller for Slotara. If you need to reach us about anything privacy-related, write to support-sl@ionaroupix.resend.app.

2. What data we hold

When you create an account, we save your email address, the name you pick, and your date of birth. We use the date of birth to check you are 18 or over — the Service is not open to anyone younger, and we verify this at sign-up. As you play, we keep your level, chip balance, progress through missions, and your game history. If you use the friends feature, we store who you add and the gifts you exchange. We also save your language on your account (your profile and your sign-in details), so the site, our emails and our notifications reach you in it.

When you buy chips, we record what package you bought, the amount, currency, and a payment reference. We also save the billing name and address you enter, so you don’t have to type them again next time. Your full card number never reaches our servers - the payment provider handles that part on their own secure page and only tells us whether the charge went through.

We also keep basic technical data: what kind of device and browser you are on, roughly where you are connecting from, and server logs. If you turn on push notifications, we store the subscription data your browser gives us so we can actually send them.

If you came to us from one of our ads or links, we note on your account which campaign it was (the tags in the link, such as utm_source and utm_campaign), the page of our site you arrived on, and your country and language when you signed up. This uses no cookies and is not shared with anyone.

3. Why we do it

Most of what we collect is simply because the service needs it to work. Your progress, level, and chip balance have to live somewhere. Your email address is how you log in and how we reach you if something needs your attention. Payment records we keep because accounting rules say we have to.

We also do a small amount of fraud prevention - looking for patterns that suggest someone is abusing the platform. And push notifications, if you have turned them on, are there because you asked for them. You can turn them off any time in your device settings.

We also look at which of our ads and campaigns bring players: from the campaign tags above and, only if you accept on the cookie banner, with Meta’s ad measurement (section 4).

4. Who else sees your data

We lean on a handful of service providers to run the platform. They process data on our instructions and are not allowed to use it for anything else. The list: a hosting and content-delivery provider, a database and authentication provider, a payment processor (who, again, handles your card details directly and never shares them with us), and the game studio that serves the slot games you play. The studio gets a session identifier so it can load the right game for you - no personal details.

If you press "Accept" on the cookie banner, Google (Google Analytics) also receives visit and device data: the pages you view, your approximate location from your IP address, and your browser and device type. We use it only to measure visits. It applies only after you accept, and you can withdraw at any time with "Cookie settings".

If you press "Accept", Meta Platforms Ireland Ltd (the company behind Facebook and Instagram) also receives data so we can measure which of our ads bring players. The Meta Pixel in your browser sends the pages you view, your IP address, your browser and device type, and its cookies _fbp and _fbc. When you sign up or buy chips, our server also sends Meta, through its Conversions API, the fact that you did, the purchase value in US dollars, your email address and account number in hashed form (a code Meta can match to a Facebook or Instagram account but that does not show them), your IP address and your browser. Meta also uses this data under its own privacy policy. All of this happens only after you accept; if you withdraw with "Cookie settings", the pixel stops and our server sends Meta nothing about sign-ups or purchases you make after that.

5. Cookies and local storage

We use cookies that the service needs to work: the sign-in session cookies set by our authentication provider (their names start with sb-), a small cookie that says whether you are signed in so the public pages show the right button, and a language cookie that is set only if you choose a language. On your device we also keep, in local storage, your cookie choice, your game settings (such as sound) and the currency you used last time you bought chips. These do not need your consent.

If you press "Accept" on the cookie banner, we also use Google Analytics, a service from Google, which sets the cookies _ga and _ga_* to measure visits to the site. If you press "Reject" or do not choose, it is never loaded. You can change your choice at any time with "Cookie settings" in the footer or in Settings. If you accept, we also use the Meta Pixel, which sets _fbp and _fbc to measure which of our ads bring players, and our server tells Meta about your sign-up and purchases (section 4). Full details are on the Cookie Policy page.

6. Where your data goes

Some of the providers we use operate outside the European Economic Area. When data leaves the EEA, the transfer is covered either by an adequacy decision from the European Commission or by standard contractual clauses. If you want the specifics, email us and we will send them over.

7. How long we keep it

Your account and game data stick around as long as your account exists. When you delete your account we remove your personal data within 30 days, though we may keep anonymised or aggregated gameplay records (with no way to identify you) for analytics purposes. Purchase records and anything accounting-related stay for the period the law of [TBD: country] requires.

8. Your rights

Under the GDPR you have the right to ask us what data we hold on you, get a copy, ask us to fix mistakes, and in some cases ask us to delete it or stop processing it. You can also object to processing that relies on legitimate interest. Just email support-sl@ionaroupix.resend.app and we will sort it out.

If you are not happy with how we handle a request, you can take it to the [TBD: data protection authority] or the data protection authority in your own country.

9. US residents

If you live in California or another US state with privacy laws, you can ask to see the personal information we have about you or ask us to delete it. You will not be treated differently for exercising those rights. We do not sell your data for money. If you press "Accept" on the cookie banner, we share the data described in section 4 with Meta to measure our ads; California law may treat this as a "sale" or "sharing" of personal information for cross-context behavioural advertising. Without your consent we do not, and you can withdraw it at any time with "Cookie settings". To make a request, email support-sl@ionaroupix.resend.app.

10. Kids

Slotara is built for adults. We ask for your date of birth at sign-up. If that date says you are under 18, you cannot create an account. If we learn that someone under 18 has an account anyway, we close it and remove the data.

If you are a parent or guardian and think a minor has signed up, let us know. We will check and, if confirmed, delete the account. You can also ask us whether a particular email address has an account. The Terms of Service and Refund Policy cover how purchases by minors are handled.

11. Updates

If this policy changes, we will post the new version here. For anything significant, we will also let you know inside the app.