🔒 GDPR

Privacy policy

What data BROCKY Games keeps, why, and what your rights are. Short and clear.

🗓️ Last updated: 10/10/2026🇧🇪 GDPR / AVG / RGPD
👤

1. Who are we?

BROCKY Games is a free gaming platform created and run by Brayane T. (Belgium), who is responsible for processing your data. Contact: via the contact form.

📋

2. What data do we collect?

  • Account: first name, last name, username, e-mail address and password (stored only as a bcrypt hash).
  • Profile (optional): profile photo, bio and social media links.
  • Game data: scores, play time, XP, Brocks, achievements, shop purchases, friends and messages.
  • Technical: IP address and device type for each game (anti-cheat), and the time of your last activity.

We do not collect payment data, location or contacts.

🎯

3. What do we use it for?

  • Keeping your account and progress.
  • Running the leaderboard, your public profile and friends.
  • Detecting cheating and abuse.
  • Remembering your preferences (language, theme).
  • Answering contact form messages.

Your data is never sold or used for advertising.

⚖️

4. Legal basis (GDPR)

  • Contract (art. 6.1.b): providing your account and the games.
  • Legitimate interest (art. 6.1.f): security and anti-cheat.
  • Consent (art. 6.1.a): optional cookies and photo/bio — you can withdraw it at any time.
🧒

5. Minimum age

In Belgium you can create an account yourself from 13 years old. If you are younger, ask your parents or guardian for permission.

🤝

6. Who do we share data with?

Only the services needed to run the site:

  • Hostinger (hosting and database, EU servers).
  • Google Fonts: your browser downloads fonts from Google, which receives your IP address.

Other players only see public info: username, avatar/photo, bio, scores and achievements. You can make your profile private in the settings.

⏳

7. How long do we keep it?

As long as your account exists. If you delete your account it is deactivated immediately and disappears from the site and leaderboard. Contact messages are kept for at most 12 months.

🛡️

8. Security

  • Passwords are never stored in plain text (bcrypt).
  • Encrypted connection (HTTPS).
  • Secure sessions (HttpOnly, SameSite) and CSRF protection.
  • Login attempt limiting.
✅

9. Your rights

👁️AccessDownload all your data (JSON) in Settings → Account.
✏️RectificationEdit your profile in the settings.
🗑️ErasureDelete your account in Settings → Account.
📦PortabilityThe export is a standard JSON file.
✋ObjectionContact us via the form.
📣

10. Complaints

Not happy? Let us know first. You can also file a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels.

✉️

Questions?

Feel free to contact us — we reply as soon as possible.

✉️ Contact

Other documents