Privacy at ValsValley

Who is responsible

ValsValley is operated by Mark Axiaq, based in Malta. Mark Axiaq is the data controller responsible for personal information processed in operating ValsValley.

For privacy questions, contact [email protected] . For general enquiries, contact [email protected] .

Playing without an account

You can currently play without registering, signing in or creating a profile. Our games do not ask children to provide their name, email address, date of birth or home address.

Parents and guardians are welcome to contact us on behalf of their children. Please avoid sending unnecessary information about a child, including health details, photographs or identification documents.

Game activity statistics

We collect basic game activity counts to understand which games are played and completed, and to help us improve the website.

Our statistics database stores daily totals grouped by:

• The date, measured in UTC.
• The game and difficulty level.
• An approximate country derived from the network request.
• The number of rounds started and completed.

The database does not store player names, email addresses, IP addresses, persistent player identifiers or individual answers. These figures count rounds, not individual people.

The network request used to send a game event still involves technical information, including an IP address, being processed by our hosting infrastructure. The IP address is not saved in our game statistics table.

We do not use these counts to identify children, build individual profiles or track players across other websites.

Hosting and technical information

We use Cloudflare to deliver the website, run server functions, store game statistics and protect restricted administrator pages.

When you visit, technical information such as your IP address, requested URL, browser information and request timing may be processed to deliver the service, detect abuse and investigate technical problems.

Pages Functions debugging logs can be viewed during a live troubleshooting session. That live log stream is not a persistent history. Separate hosting, security and administrator-access records may be processed by Cloudflare under its applicable service terms and privacy information.

You can read more in Cloudflare’s Privacy Policy .

When you email us

If you contact us, we receive your email address, any name shown in your message, the message contents and any attachments you choose to send.

We use this information to respond, investigate the issue you raise and keep a record of the correspondence. Providing this information is voluntary, but we may be unable to answer a request without sufficient details or a working reply address.

We use third-party email forwarding, mailbox and outgoing-email services to receive, store and deliver correspondence. These services process message contents and delivery information as part of handling email.

We do not enable email open tracking or link-click tracking in our outgoing support emails.

Why we use information

Where personal information is involved, we rely on our legitimate interests in operating a reliable website, preventing misuse, understanding basic game usage and answering enquiries.

These purposes must be balanced against visitors’ privacy rights, with particular care for children. We limit game statistics to daily totals and do not create player profiles.

We also process information where necessary to meet applicable legal obligations, including responding to valid data protection requests.

Cookies and administrator access

Our game counters do not use analytics cookies or persistent player identifiers.

Restricted administrator pages use Cloudflare Access authentication, including cookies that maintain an authorised session. Players do not need an administrator login to play.

Hosting security features may also use necessary cookies when checking requests or protecting the service.

Spoken instructions

Some games use your browser or device’s text-to-speech feature to read instructions aloud. Our games do not request microphone access or record your child’s voice.

Speech generation depends on your browser, device and selected voice. Some voices run locally, while others may use an online service provided by the platform.

How long information is kept

• Game statistics: daily totals are kept for 12 months. A daily cleanup is configured to remove records older than that period.
• Email correspondence: our retention policy is to delete correspondence within 12 months after an enquiry is closed, unless it is needed longer for a legal obligation or a dispute.
• Technical and security records: retention depends on the service and the purpose of the record, including troubleshooting, abuse prevention and security investigations. These records are separate from our game statistics.

Deleted information may remain temporarily in provider backups or recovery systems until those copies expire under the provider’s deletion procedures.

Who receives information

Information is handled by the operator and the service providers involved in website hosting, security, database storage and email delivery or storage.

We may also disclose relevant information where required by law or where necessary to establish, exercise or defend legal claims. We do not sell personal information or use it for targeted advertising.

International processing

Our hosting and email providers operate internationally. Information may be processed outside Malta and the European Economic Area, including in the United States.

Applicable transfer arrangements depend on the provider and service. Cloudflare publishes its standard contractual clauses for relevant customer data transfers.

Contact [email protected] for information about the providers involved in your correspondence and their applicable privacy and transfer terms.

Your privacy rights

Depending on the information and circumstances, you may have rights to access, correct or delete personal information, restrict its use, object to processing or request data portability.

In particular, you may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you may withdraw that consent.

To make a request, email [email protected] . We may ask for information necessary to verify your identity or your authority to act for a child.

Our game totals do not contain a player identifier, so we cannot normally identify an individual child’s rounds within those totals.

You may lodge a complaint with Malta’s Information and Data Protection Commissioner , or with the relevant data protection authority where you live or work.

As ValsValley grows

This notice describes the current website. We will update it when our information practices change, including before introducing accounts, subscriptions, multiplayer features or mobile apps that involve different processing.

The date at the top shows when this notice was last updated.