Privacy Policy
We are committed to protecting your personal data and respecting your privacy.
1. Data Controller
NebulaWhirls Entertainment Labs Oร (Reg. No. 14872310), Narva mnt 5, Tallinn 10117, Estonia. Contact: [email protected]
2. Information We Collect
We collect the following categories of personal data:
- Account Data: nickname and email address if you choose to register
- Usage Data: pages visited, whirls performed, session duration, in-game actions
- Technical Data: IP address, browser type, operating system, device identifiers
- Cookie Data: as described in our Cookie Policy
3. Legal Basis for Processing
We process your data on the basis of: (a) your consent where required; (b) performance of a contract (providing the Platform); (c) our legitimate interests in improving the Platform and preventing fraud.
4. How We Use Your Information
- To operate, maintain, and improve the Platform
- To personalise your experience
- To analyse usage trends and Platform performance
- To communicate service updates and announcements
- To detect, investigate, and prevent fraudulent activity
- To comply with legal obligations
5. Data Sharing
We do not sell your personal data to third parties. We may share data with: trusted service providers who assist in operating the Platform (under strict confidentiality agreements); analytics services (with anonymised data only); legal authorities when required by law.
6. Data Retention
We retain personal data for as long as necessary to provide the service or as required by law. Inactive accounts are anonymised after 24 months of inactivity.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request deletion of your data ("right to be forgotten")
- Restrict processing of your data
- Data portability
- Object to processing based on legitimate interests
- Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)
To exercise any of these rights, contact [email protected].
8. Children's Privacy
The Platform is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us immediately at [email protected].
9. Data Security
We implement industry-standard security measures including TLS/SSL encryption, access controls, and regular security audits to protect your data from unauthorised access.
10. International Transfers
If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on the Platform.