Privacy policy

Who we are

Ludomo Gamestudio is an independent game studio from Mijdrecht, the Netherlands. It is the trade name of Kjell Ragnar 't Hoen, a sole proprietorship registered with the Dutch Chamber of Commerce (KvK) under number 30256081, at Amethist 7, 3643 AR Mijdrecht, the Netherlands. We are the controller of the personal data described in this policy.

Questions about privacy, or a request about your data: email us at [email protected].

Playing without an account

You can play the free part of every game without signing in. We don't ask for any personal data, and our visitor statistics are anonymous and work without cookies (see Technical data). Free play can include ads from Google, see Advertising below.

Your progress in a game is kept in your browser tab only (sessionStorage) and disappears when you close the tab. It never reaches us.

Signing in with Google

When you sign in with Google, we receive your name, email address, profile picture and a Google account ID. We use these to create your account, to show who is signed in, and to link your membership and saved progress to you.

Legal basis: providing the service you ask for (performance of a contract).

Membership and payments

Our online reseller Paddle.com (Paddle.com Market Ltd) sells the membership and is the Merchant of Record: Paddle handles the payment, the invoice and sales tax, and processes your payment details under its own privacy policy. We never see your card details.

From Paddle we receive what we need to run your membership: a customer and subscription number, the status of your membership, the end date of the current period, and your country.

Legal basis: performance of a contract. Paddle keeps transaction records for as long as tax law requires.

Saved progress for members

If you are a member, your game progress is stored with your account so you can continue on any device. We store only the save data the games send (for example which levels you completed).

Legal basis: performance of a contract.

Technical data

To deliver the site and the games and to protect them against abuse, our hosting provider processes technical data such as your IP address, browser type and the pages you request. These records are kept briefly and are not used to identify you.

To see how the site is used, we use Cloudflare Web Analytics: it counts page views and which games are started, and shows anonymous totals such as the country, the type of device and the website a visitor came from. It doesn't use cookies, doesn't store anything on your device and doesn't follow you across sites or visits.

The site loads its fonts from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address.

Legal basis: our legitimate interest in running a secure, working website.

Cookies and storage on your device

We don't use analytics cookies (our visitor statistics work without them). Apart from Google's advertising cookies for players without a membership (see Advertising), the site only stores what it needs to work:

• When you're signed in: a sign-in token in your browser's local storage, so you stay signed in. It is removed when you sign out.
• While you play: your progress and a few page settings (such as the game you played last) in the browser tab's session storage. These disappear when you close the tab.
• When you open the checkout: Paddle may set its own cookies, needed for the payment and to prevent fraud.

These are strictly necessary for the site to work, so we don't ask for consent for them. For advertising cookies we do ask, see below.

Who receives your data

• Supabase (accounts, memberships and saved progress; data stored in the European Union)
• Google (sign-in with your Google account, Google Fonts, and the ads for players without a membership)
• Paddle (the Merchant of Record: selling and administering the membership, as described above)
• Cloudflare (hosting and delivering the website and the games, and anonymous visitor statistics)
• Professional advisers such as an accountant, and authorities, but only when the law requires it

We never sell your personal data. Some of these companies are based in the United States. Where data leaves the European Economic Area, this happens under the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How we protect your data

All traffic to the site is encrypted (HTTPS). Our database only lets each signed-in person read their own membership and saved progress, the payment webhook is verified with a secret signature, and only Ludomo's owner has access to the administration of these services. We choose providers that protect data to a high standard.

Advertising

Playing for free is paid for by ads. If you play without a membership, a game can show an ad from Google (Google AdSense and its H5 Games Ads) at a natural break, for example between two levels. Members never see ads: for them the site doesn't load any of Google's advertising code at all.

Google and its advertising partners can use cookies and similar technologies to show these ads, to limit how often you see the same ad, to measure them and to prevent fraud. They receive technical data such as your IP address and information about your browser and device.

In the European Economic Area, the United Kingdom and Switzerland, we first ask for your choice through Google's consent message. Only with your consent are ads personalised, based on your interests and earlier visits. Without your consent, Google shows non-personalised or limited ads. You can change your choice at any time through the privacy and cookie settings link on the site.

How Google uses this data is explained in How Google uses information from sites that use its services. You can manage personalised advertising in Google's ad settings.

Legal basis: your consent for personalised ads and advertising cookies; our legitimate interest in funding free games where consent is not required by law.

How long we keep your data

We keep your account, membership details and saved progress for as long as you have an account. If you ask us to delete your account, we delete this data, except what we must keep by law.

Your rights

You have the right to access, correct or delete your personal data, to receive it in a portable format, to object to or restrict its use, and to withdraw consent you gave. Email [email protected] and we'll respond within one month.

You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), though we'd appreciate the chance to help you first.

Children

Our games are suitable for all ages, and playing without an account requires no personal data. To create an account or become a member you must be 16 or older, or have permission from a parent or guardian.

Changes to this policy

We update this policy when the site changes. The date at the top shows when it was last updated.