PRIVACY POLICY

Last Updated: August 10, 2026

Welcome to DrunkPals. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you, including under the UK/EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

1. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you, grouped as follows:

Account Data: if you register an account, we collect your email address and a securely hashed password.
Technical Data: includes your internet protocol (IP) address, browser type and version, and operating system.
Approximate Location Data: when you create or join a game, we derive your country, and sometimes region/city, from your IP address (via your network provider or CDN-supplied headers). We do not collect precise GPS location, and this is never more precise than city level.
Gameplay/Usage Data: information about how you use our games — session codes, game mode, number of players, round counts, wins/losses, and session duration. This is used to generate the aggregate statistics shown on our internal admin dashboard, which only authorized administrators can access.

2. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you (e.g. running your game session, managing your account).
Where it is necessary for our legitimate interests in operating, securing, and improving the Service (e.g. aggregate gameplay analytics, fraud/abuse prevention) and your interests and fundamental rights do not override those interests.
Where we have your consent (e.g. optional analytics cookies — see Section 3).
Where we need to comply with a legal or regulatory obligation.

Approximate location and gameplay data described above are collected automatically as part of operating the Service itself and are not dependent on your cookie choice below — that data is not stored via a cookie at all, it is derived server-side from the request that creates or joins a game.

3. Cookies and Tracking

We only set the following cookies and browser storage. Non-essential (analytics) technologies are not loaded or set until you actively choose "Accept All" in our cookie banner, or are set to "Essentials Only" automatically if your browser sends a Global Privacy Control (GPC) signal.

Name	Type	Purpose	Duration
dp_session	HTTP cookie (strictly necessary)	Keeps you signed in and maintains your game session. Exempt from consent as it is essential to the Service.	30 days
cookie_consent	Browser localStorage (strictly necessary)	Remembers your cookie preference so we don't ask again.	Until you clear site data
legal_age_confirmed	Browser localStorage (strictly necessary)	Remembers that you confirmed you are of legal drinking age in your jurisdiction.	Until you clear site data
_ga, _ga_*	HTTP cookie (analytics — Google Analytics 4)	Distinguishes visitors to generate aggregate, anonymised usage statistics. Only set if you click "Accept All".	Up to 13 months

We use Google Analytics 4 (Google Ireland Ltd. / Google LLC) for aggregate analytics only. We do not use Google Ads, Google Signals, or any cross-site advertising features, and we do not sell or share your personal information with third parties for cross-context behavioural advertising. If you enable Global Privacy Control in your browser, we automatically treat this as an opt-out request and never load analytics cookies. You can also withdraw analytics consent at any time by clearing your browser's site data for this domain, which will show the cookie banner again.

Because Google Analytics data may be processed on servers outside the UK/EU (including in the United States), such transfers are made under Google's Standard Contractual Clauses and equivalent safeguards.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. Passwords are stored using strong salted hashing (Argon2) and never in plain text. Our admin dashboard, which shows aggregate gameplay statistics, is restricted to authenticated administrator accounts only.

5. Your Rights (UK/EU GDPR)

If you are located in the UK or EEA, you have the right to: access the personal data we hold about you; request correction or erasure of it; restrict or object to our processing of it; request a portable copy of it; and withdraw consent at any time where we rely on consent (e.g. analytics cookies). To exercise any of these rights, contact us at the email address below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local EU supervisory authority.

6. Your Privacy Rights (California & other US residents)

If you are a California resident, the CCPA (as amended by the CPRA) gives you the right to: know what personal information we collect and how it is used; request deletion of your personal information; correct inaccurate personal information; and opt out of the "sale" or "sharing" of personal information. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We honour the Global Privacy Control (GPC) signal as a valid opt-out-of-sale/share preference signal, as required under CCPA regulations and similar laws in other US states. To exercise your rights, email us at the address below; we will not discriminate against you for doing so.

7. Data Retention & Your Requests

We keep account data for as long as your account is active, and gameplay/analytics data only for as long as necessary for the aggregate statistics described in Section 1. To request deletion of your account or gameplay data at any time, email us at the address below and we will action your request.

Company Details

MARKETIC GROUP LTD
Registered office address:
Bartle House, 9 Oxford Court, Manchester, England, M2 3WQ

Email: hello@marketic.co.uk