Privacy Policy

When you interact with Plentyspins, we collect technical signals necessary to deliver personalized game feeds and maintain platform security.

• Device signals: Screen dimensions, browser type, operating system, GPU tier, and timezone settings.
• Telemetry & interactions: Game swipe activity, session duration, click patterns, and feature usage.
• Consent records: Cryptographic hashes of your accepted tracking scopes under GDPR/CPRA regulations.

Your data is processed strictly in accordance with your explicit consent preferences:

• Exactplay Acquire engine: Powering personalized real-time game recommendations and bonus offer placements.
• Fraud & security shield: Detecting automated bot traffic, multi-accounting, and security threats.
• Platform analytics: Aggregating anonymous performance metrics to refine game catalog curation.

To keep play time and the Swipe Report honest, we check that a person (not a bot) is playing: when a game session starts and every 15 minutes while it runs. These checks use Cloudflare Turnstile in invisible mode, so you won't see a puzzle or a box to tick.

• What Turnstile reads: Technical signals from your browser and connection, such as your IP address, browser and device characteristics, and the site you are on.
• Why: Telling people apart from bots and blocking automated traffic. This is a security measure we rely on our legitimate interest for (GDPR Art. 6(1)(f)), so it runs regardless of your cookie choices.
• Who: Cloudflare, Inc. processes these signals on our behalf to run the check, and as an independent controller to improve its bot detection.
• What we keep: Only whether a check passed. If a check fails, the play session stops counting; your game keeps working.

Cloudflare's use of this data is described in the Cloudflare Turnstile Privacy Addendum and the Cloudflare Privacy Policy.

The weekly Swipe Report is built from swipes, ratings and play sessions on Plentyspins. It only ever shows totals, rankings and percentages; no report names or identifies a player.

• Play time: Counted only while a game is on screen. With each session we store the game, the country of your network, your device type and a keyed hash of your IP address (never the address itself), to stop one person counting several sessions at once.
• The longest session: Only players who accepted Exactplay tracking can hold the weekly record. For the ten longest sessions of the week, we look up the Exactplay tracking ID in Exactplay’s bot score to make sure the record wasn’t set by an automated script.
• Your week: Your own numbers on a report (swipes, favorites, play time) are fetched for your browser only, using the random ID stored on your device, and nobody else can see them.

Regardless of your region, you maintain full control over your personal data:

• Right to withdraw consent: You can modify or withdraw optional consent at any time on our Cookie Policy page.
• Right to erasure (data subject rights): Request full deletion of your session subject key and telemetry logs.
• Data access: Request a copy of your stored tracking identifiers and consent audit logs.

All data in transit is encrypted using standard TLS/WSS connections. Telemetry events stored in our analytics database are pseudonymized using secure cryptographic hashing (SHA-256) to ensure no plain-text personal identity is exposed.