Privacy Policy

Last updated: October 8, 2026

This policy explains what GameBox.az ("we", "the site") collects when you play, why, who else receives it, and how you can see, export or delete it. Questions: contact@gamebox.az.

1. What we collect

Without an account

• Progress and settings in your browser. Language, theme, sound, game progress and similar settings are kept in your browser's local storage. They stay on your device; clearing the site's data removes them.
• A guest profile. Once you finish a game worth keeping, the site creates a guest profile on our server with a random ID and an automatically generated name, so your progress, coins and achievements can be saved. It contains no email or real name.

With an account

• Sign-up with email: your email address, a password (stored only as a one-way hash, never in readable form), your username, avatar and — if you choose one — your country.
• Sign-in with Google or Facebook: the account ID, name, email address and profile picture link that the provider shares with us. We never receive your Google or Facebook password.
• Signed-in devices: a device name and platform, so you can see and sign out your devices.

When you play

• Game results, scores, statistics, achievements, coins and items bought with in-game coins, daily rewards and missions.
• Online rooms: the nickname you enter, your moves, and what you type or draw during the game (for example, guesses in the drawing game). These are visible to the other players in the room.
• Friends: friend requests and your friends list.

Technical data

• Your IP address and browser type, kept with your session and used to keep the site secure and to stop abuse (for example, limiting repeated requests).

2. Why we use it

• To run the games, save your progress and sync it between your devices.
• To show leaderboards, profiles and online rooms.
• To protect accounts and the site from fraud, cheating and abuse.
• To understand which games are played and improve them (analytics).
• To show advertising that keeps the site free.

Legal bases (where the GDPR applies): performing our service to you (games, accounts), our legitimate interest (security, improving the site), and your consent (analytics and personalised advertising cookies in the EEA, the UK and Switzerland).

3. What other players see

Leaderboards and public profiles show your username, avatar, country (only if you picked one), scores and achievements. In Profile → Privacy you can choose whether your profile, statistics, achievements, activity, country and online status are visible to others. Your email address is never shown to other players.

4. Cookies and similar technologies

• Necessary: a session cookie and a security (CSRF) cookie that keep you signed in and protect forms; local storage for your settings and progress. These are needed for the site to work.
• Analytics: Google Analytics uses cookies (such as _ga) to count visits and see how the site is used.
• Advertising: see the next section.

Visitors from the EEA, the UK and Switzerland are asked for consent before analytics and advertising cookies are used, and can change their choice at any time with the "Cookie settings" link at the bottom of the page.

5. Advertising (Google AdSense)

We use Google AdSense to show ads.

• Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
• How Google uses data from sites that use its services: policies.google.com/technologies/partner-sites.

If you do not consent or opt out, you will still see ads, but they will not be personalised.

6. Who else receives data

• Google — Analytics, AdSense and "Continue with Google" (Google Privacy Policy).
• Meta — only if you choose "Continue with Facebook" (Meta Privacy Policy).
• Our hosting provider, which stores the server and database on our behalf.
• kofe.al — the "Buy us a coffee" link opens that site; any donation happens there under its own terms. We receive no payment details.

We do not sell your personal data. We disclose it to authorities only when the law requires it.

7. How long we keep it

• Guest profiles are deleted automatically after 30 days without use (an empty one after 24 hours).
• Online rooms are deleted a few hours after the game ends (unfinished rooms after 48 hours).
• Account data is kept until you delete the account.

8. Your rights and choices

• Export: download everything we hold about your account as a file (Profile → Manage).
• Correct: change your name and country at any time (Profile → Manage → Profile).
• Delete: delete your account and its data permanently (Profile → Manage → Delete account).
• Ask us about, object to or restrict the use of your data by writing to contact@gamebox.az. If you are in the EEA or the UK you may also complain to your local data protection authority.

9. Children

The site is made for a general audience. To create an account you must be at least 13 years old, or older where your country's law sets a higher age (for example 16 in some EU countries). Younger children may play without an account with a parent's permission. If you believe a child has given us personal data, write to us and we will delete it.

10. Security

Connections are encrypted (HTTPS), passwords are stored as hashes, and access to the data is limited. No system is completely secure, so please use a password you do not use anywhere else.

11. Changes

We may update this policy. The date at the top shows the latest version; for important changes we will also show a notice on the site.