Privacy Policy

Last updated: June 20, 2026

EloGames is operated by EloLin FZ-LLC ("EloLin", "we", "us"), a company incorporated in the United Arab Emirates. This Privacy Policy explains how we collect, use, and share information about you when you use EloGames ("the Service").

1. Information We Collect

We collect only the minimum data needed to operate the Service:

• Account data: Email address (if you register or sign in).
• Game data: Scores, session duration, and game-session identifiers.
• Technical data: A one-way hash (SHA-256) of your IP address, used solely for anti-abuse purposes. The raw IP is never stored. Hashes are deleted after 90 days.
• Anonymous identifiers: A random UUID stored in your browser's localStorage to associate scores with guest sessions. No cross-site tracking occurs.

We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.

2. How We Use Your Information

• To display your scores and position on leaderboards.
• To detect and prevent cheating or abuse.
• To respond to support requests.
• To comply with applicable law.

3. Data Retention

• IP hashes: 90 days.
• Game scores and sessions: retained while your account is active; deleted upon account deletion.
• Email address: retained until you delete your account or request deletion.

4. Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Cloudflare, Inc. — CDN and hosting infrastructure (United States). Data processed per Cloudflare's DPA.
• Supabase, Inc. — Database hosting (United States, AWS us-east-1). Data processed per Supabase's DPA.
• Law enforcement — only when required by valid legal process under UAE law.

5. Cookies

We use only strictly necessary cookies: a session cookie for authenticated users (deleted on sign-out) and localStorage for anonymous game state. We do not use advertising or analytics cookies.

6. Children

EloGames is a general-audience service. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal information, contact us at support@elolin.com and we will delete it promptly.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data. Use Settings → Delete Account or email us.
• Portability — request an export of your data in machine-readable format.
• Object to processing based on legitimate interests.

To exercise any right, email support@elolin.com. We respond within 30 days.

8. Security

We use TLS 1.2+ in transit and AES-256 at rest. Access to production databases is restricted to service accounts with the minimum required permissions. We perform periodic security reviews.

9. International Transfers

Your data may be processed in the United States (Cloudflare, Supabase). These transfers are covered by standard contractual clauses or equivalent safeguards.

10. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Disputes are subject to the exclusive jurisdiction of the courts of Dubai, UAE.

11. Changes

We may update this policy. Material changes will be announced at least 14 days in advance via the email address on your account.

12. Contact

EloLin FZ-LLC
Dubai, United Arab Emirates
support@elolin.com