- Home
- Privacy Notice
Privacy Notice
What we process, why, on what legal basis, and the rights you have. Written to meet the UK GDPR and the EU GDPR.
This notice explains what personal data Spinzy Club (the operator of spinzyclub.com) processes when you use spinzyclub.com, why, on what legal basis, and what rights you have. It is written to meet the UK GDPR and the EU General Data Protection Regulation.
1. Who is responsible
The controller for the processing described here is the operator of spinzyclub.com. You can reach us about any privacy matter at privacy@spinzyclub.com. Full contact details are on our imprint page.
2. What we process, why, and on what basis
Server logs
Data: IP address, date and time, page requested, referring page, browser and operating system identifiers. Purpose: delivering the site, security and fault diagnosis. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a working, secure site. Retention: logs are kept by our hosting provider on its standard rotation and are not used to build profiles.
Your free account
Data: display name and email address. Where it is stored: in your own browser's local storage on your own device — this demo account system does not transmit these details to us or store them on our servers. Legal basis: Art. 6(1)(b) GDPR, performance of the service you asked for. Retention: until you clear your browser's data for this site.
Messages you send us
Data: your name, email address and the contents of your message. Our contact form opens a pre-addressed message in your own email application; nothing is transmitted until you send it yourself. Purpose: answering you. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in responding to enquiries. Retention: as long as needed to resolve your enquiry and a short period afterwards.
Google Ads measurement
Data: online identifiers and cookie data processed by Google to measure advertising. Purpose: measuring whether our advertising works. Legal basis: Art. 6(1)(a) GDPR — your consent, and nothing else. The Google tag is not loaded and no data reaches Google unless you press “Accept” on our cookie banner. You can change your mind at any time using the link in the footer. Recipient: Google Ireland Limited, and Google LLC in the United States. Transfer basis: the EU Commission's adequacy decision for the EU–US Data Privacy Framework, together with Google's standard contractual clauses. Retention: per Google's own retention periods.
The games
Games are embedded from their provider and load in a window on our pages. When you launch one, your browser contacts the provider directly, which necessarily discloses your IP address and technical details to it. That processing is governed by the provider's own privacy policy. Legal basis: Art. 6(1)(b) GDPR, providing the service you requested.
3. What we do not do
We do not sell, rent or trade personal data. We run no analytics product, no advertising networks beyond the consent-gated Google Ads measurement described above, and no cross-site profiling. We serve our fonts from our own server, so no font provider receives your IP address. We do not knowingly process data from anyone under 21 or from anyone outside our eligible territories (21+, residing in Canada (excluding Quebec and Ontario), Germany or Australia).
4. Cookies and local storage
Strictly necessary storage: your cookie choice itself, and your demo account details, both held in your browser's local storage. Consent-based: the Google Ads cookies described above. There are no other cookies. Clearing site data for spinzyclub.com in your browser removes everything we hold on your device.
5. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and the right to withdraw consent at any time without affecting processing already carried out (Art. 7(3)). Our GDPR page explains how to exercise each one and will prepare the request for you. We answer within one month.
You also have the right to complain to a supervisory authority. In Germany you may complain to the authority for your federal state; a list is published by the BfDI.
6. Automated decision-making
None. We carry out no profiling and no automated decision-making producing legal effects.
7. Changes
If this notice changes we will update the date below and, for significant changes, say so on the site.
Last updated: 5 November 2026.