Privacy Policy

Controller: Naralimon S.C. — Spanish tax identification number (CIF) ES J01837269.

Address: Calle Tamarindos 7, Mijas Costa, 29651 (Málaga), Spain.

Email for privacy enquiries and rights requests: naralimongroup@naralimon.com.

Personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR); Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD); and other applicable Spanish and European Union legislation.

Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE) also applies where relevant, including to cookies and similar technologies.

The games on naralimon.es are free and can be played without creating an account, providing a name or supplying an email address.

During visits, the hosting provider may process technical connection information such as IP addresses, access dates and times, browser information, and error or security logs. Such data is used to deliver the site, prevent abuse, resolve incidents and maintain security.

The application uses browser local storage to remember consent choices and, where applicable, progress within the mysteries. This information remains on the visitor’s device and does not create a user account.

Only where the visitor expressly accepts analytics may Google Analytics 4 collect online identifiers and usage information such as pages visited, sessions and game interactions to produce statistics and improve the experience.

If you contact us by email, we process the details you voluntarily provide and the content of your message in order to respond and handle related communications.

Optional analytics is based on consent (Article 6(1)(a) GDPR), which may be refused or withdrawn at any time.

Technical information necessary for security, abuse prevention and site maintenance is processed on the basis of the controller’s legitimate interest in providing a secure, available service (Article 6(1)(f) GDPR), with regard for users’ rights. Processing strictly necessary to deliver a requested feature is carried out for that purpose in accordance with applicable law.

Emails sent voluntarily are handled in order to respond to the request, relying as appropriate on steps requested by the sender or the legitimate interest in responding and maintaining communication.

Hosting and infrastructure providers necessary to operate and protect the site may have access to technical data. The project uses Vercel hosting services.

If analytics consent is given, Google (Google Ireland Limited and other group entities, subject to their terms) may process information through the Google Analytics 4 service.

Personal data is not sold. Information may be disclosed to competent authorities when legally required.

Technology providers may process data outside the European Economic Area. Where applicable, such transfers rely on a European Commission adequacy decision or other GDPR-recognised safeguards, including standard contractual clauses. Further information may be requested at naralimongroup@naralimon.com.

Consent preferences and saved game progress held in browser local storage remain there until the visitor deletes them, restarts the relevant game or the applicable data version is replaced.

Technical hosting logs are retained for the provider’s operational and security periods, limited to what is necessary for those purposes.

Where Google Analytics 4 is authorised, user-level and event-level data is subject to the retention period set for the Analytics property, which may be 2 or 14 months for standard properties; aggregate reporting information may remain available for longer. Analytics cookies have separate lifetimes described in the Cookie Policy.

Email correspondence is retained for as long as needed to respond and, where applicable, for legally required periods relating to potential liabilities.

Where applicable, you may request access to, rectification or erasure of your data, object to or restrict processing, and request data portability. You may withdraw analytics consent at any time without affecting processing carried out lawfully before withdrawal.

To exercise a right, email naralimongroup@naralimon.com identifying the request. Additional information may be requested only where necessary to verify your identity.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

We do not ask children to register or provide personal information in order to play. If a future feature requires consent to process children’s data, applicable Spanish rules on age and parental authorisation will be followed.

Links to Instagram, naralimon.com and other third-party sites lead to services with their own privacy policies. Their data processing is not governed by this policy.

Naralimon may update this policy when its services, providers or legal obligations change. The version published here applies from the date it is posted.