Privacy Policy

This policy explains what personal data Horus Games processes when you visit horusgames.com and play our games, why we need it, how long we keep it and how you can control it. We collect as little as possible: you can play as a guest without giving us your name or email address.

1. Who we are

Horus Games (“we”, “us”) operates the website horusgames.com and the games on it, and is the controller responsible for the personal data described in this policy. For any question or request about your personal data, write to [email protected]; for other questions, write to [email protected].

This policy covers the website, the lobby and the games, whether you play as a guest or with an account, as well as the messages you send us and the emails we send you. Please read it together with our Cookie Policy and Terms of Use.

2. Our approach

Horus Games is a free social casino with no money involved, so we have no reason to collect much about you. We follow a few simple rules:

You can play as a guest without giving us your name or email address.
There is no advertising, no analytics and no tracking on our website or in our games.
We use no third-party scripts or content delivery networks: all images, fonts and code are served from horusgames.com.
We do not sell personal data and do not share it with advertisers.
We send no marketing emails and have no newsletter.
There are no payments, so we never process card or bank details.
Sign-in through Google, Facebook or Apple is not available, so we receive no data from those services.

All the data described below comes directly from you or from your browser. You do not have to give us any personal data to play: an email address and a password are needed only if you want an account.

3. What data we process and why

The table lists the personal data we process, the purpose, the legal basis and how long we keep it. We do not use personal data for any other purpose, such as advertising.

Data	Purpose	Legal basis	Retention
Account details: email address, password hash, explorer name, preferred language	Creating and running your account, signing you in, sending service emails in your language	Contract	Until you delete the account; unconfirmed accounts are deleted after 30 days
Account history: dates of registration, last sign-in and email confirmation; welcome-bonus status	Managing the account and giving the welcome bonus only once	Contract	Until you delete the account
Cloud save: balance, spins, wins, bonus timers, settings and the state of both games	Keeping your progress and restoring it on any device after you sign in	Contract	Until you delete the account
Security records: IP address and time of sign-in, sign-up, password-reset and contact-form attempts	Only to stop abuse, such as password guessing and spam	Legitimate interest in protecting the service and your account	24 hours
Standard access logs of the hosting server: technical records of requests, such as IP address, time and requested page	Delivering the website and keeping it running and secure	Legitimate interest in operating the service	According to the server’s standard log rotation
Support messages: name, email address, topic, text, language; account ID if you are signed in	Answering your question and handling your request	Legitimate interest in answering you; contract if the request concerns your account	Up to 12 months after the request is answered
Session cookie hg_session	Keeping you signed in	Contract (strictly necessary)	Up to 30 days; the session ends when you sign out
Game data in your browser storage (localStorage)	Running the games, keeping guest progress, remembering your language and choices	Strictly necessary for the service you request	On your device until you clear browser data; signing out resets it to a fresh guest profile

“Contract” means that the processing is needed to provide the service you asked for under our Terms of Use. “Legitimate interest” means that we process the data for a justified purpose that does not override your rights; you can object to this processing at any time (see section 12).

4. Playing as a guest

When you choose “Play as guest”, you do not register and do not give us your name or email address. Your progress (balance, levels, rewards, settings and the state of the games) is saved only in your browser’s storage on your device. We do not receive this data, so we can neither see it nor restore it.

Clearing your browser data deletes your guest progress. To keep a copy, download the backup file from your profile: it is saved on your device, and you can restore your progress from it later. Even as a guest, your browser’s requests to our website appear in the hosting server’s access logs, and if you use the contact form, the rules above for security records and support messages apply.

5. Your account

You can create an account with an email address only. We store:

your email address, to sign you in, confirm your address and send you service emails;
a hash of your password: the result of a one-way transformation from which the password cannot be recovered. We never store the password itself;
your explorer name, if you choose one (otherwise the default name Explorer is used), and your preferred language;
the dates of registration, last sign-in and email confirmation, and whether you have received the welcome bonus;
your cloud save: balance, spins, wins, bonus timers, settings and the state of both games.

The cloud save syncs in the lobby, every few seconds during play and when you close a page, so you can continue on any device after signing in. If a device already holds guest progress and your account also has progress, you choose which one to keep. When you sign out, the device returns to a fresh guest profile, while your account progress stays on our server.

On the account page you can change your explorer name and password, sign out on all devices and delete your account. We use your email address only for the service emails described in section 7.

6. Cookies and browser storage

We use a single cookie, hg_session. It is strictly necessary: it keeps you signed in, is set only when you sign in, is valid for 30 days and is marked HttpOnly, so scripts on the page cannot read it. We use no analytics, advertising or social media cookies, so there is nothing to switch on or off. You can delete cookies at any time in your browser settings; deleting hg_session simply signs you out.

The games also use your browser’s local storage (localStorage) for your game profile, the state of each game, rank and blessing rewards, your language, your choice to play as a guest, the link to your cloud save and the notices you have dismissed. This data stays on your device. Our Cookie Policy lists every name and purpose.

7. Emails we send

We send only service emails:

a link to confirm your email address after you sign up (valid for 24 hours);
a link to reset your password when you ask for one (valid for 1 hour);
security notices about your account;
replies to your support requests.

We send no marketing emails and no newsletter, and service emails go out only when your account or your request needs them. They are delivered by our email delivery service (see section 8).

8. Processors

Your data is stored on our server. Three service providers (processors) process personal data on our behalf and only on our instructions:

the hosting provider, which runs the server that holds the website, the database and the access logs;
Cloudflare, Inc., the network that delivers and protects the website: your browser’s requests to the website pass through its servers, which see the technical details of each request (such as your IP address and the page address) in order to deliver the website quickly and protect it from attacks;
the email delivery service, which delivers our service emails.

We do not sell personal data or share it with advertisers. Apart from these processors, we disclose data only to public authorities, and only when the law requires it.

9. International transfers

Our processors may process data in a country other than the one where you live. Personal data is transferred only to the three processors listed above, and only with the appropriate safeguards required by data protection law, such as an adequacy decision or standard contractual clauses. You can ask for details of these safeguards at [email protected].

10. How long we keep data

We keep personal data only as long as we need it for the purposes described above:

Account data and cloud save: until you delete the account. Deletion removes them from our live database immediately; server backups, if any, roll over within 30 days.
Accounts with an unconfirmed email address: deleted after 30 days.
Security records (IP address and time of attempts): deleted after 24 hours.
Support messages: up to 12 months after the request is answered.
The hg_session cookie: up to 30 days.
Browser storage: on your device until you clear it.

11. Security

Passwords are stored only as hashes, never in readable form.
All connections to horusgames.com are encrypted with HTTPS.
Rate limiting stops repeated sign-in, sign-up, password-reset and contact-form attempts.
The session cookie is HttpOnly, and “Sign out on all devices” ends every session at once.
Links in confirmation and password-reset emails expire after 24 hours and 1 hour respectively.
Our pages load no third-party scripts.

No system is completely secure. If a security incident affects your data, we will inform you and the competent authority as the law requires. Use a unique password for your account, and write to [email protected] if you suspect that someone else has accessed it.

12. Your rights

Wherever you live, you have the following rights, modeled on the European Union’s General Data Protection Regulation (GDPR):

Access: find out what data we hold about you and get a copy.
Correction: change your explorer name on the account page, or ask us to correct other data, such as your email address.
Deletion: delete your account yourself with the button on the account page (this is permanent and requires your password), or ask us to delete your data.
Portability: download your progress as a backup file from your profile, and receive your account data on request.
Restriction: ask us to limit the processing of your data while a question about it is being resolved.
Objection: object to processing based on our legitimate interest.
Complaint: lodge a complaint with a data protection authority, in particular in the country where you live.

Guest data never reaches us, so you control it directly: it is stored only in your browser, and clearing your browser data deletes it. To keep a copy, use the backup file in your profile.

To use these rights, write to [email protected], preferably from your account’s email address. We may ask you to confirm your identity so that we do not disclose your data to someone else. We answer within 30 days.

13. Children

The service is not intended for anyone under 18, or under the age of majority in their country if it is higher. We do not knowingly collect personal data from minors, and if we learn that an account belongs to a minor, we delete it. If you believe a child has created an account, please tell us at [email protected]. Parents and guardians can also turn on the parental controls of their devices so that children cannot open the games.

14. Changes to this policy

We may update this policy when the service or the law changes. The date at the top of the page shows the current version, and we will announce important changes on the website before they take effect.

15. Contact

Questions and requests about personal data: [email protected]. Other questions about the games and your account: [email protected] or the Help center.