Privacy policy
Last updated:
This policy explains, in plain language, what data El juego de la cabra processes when you play, who processes it and what rights you have. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
, owner of the website (hereinafter, “the owner”).
Contact for any privacy matter: .
Postal address:
2. What data we process and why
The game has no accounts, passwords or sign-up. We only process what is strictly needed for you to play:
| Data | Purpose | Legal basis | How long it is kept |
|---|---|---|---|
| The nickname you type and the avatar you choose | So that the players in the room recognise each other | Providing the service you request (art. 6.1.b GDPR) | While the room exists (see section 4) |
| The characters you write, your bids, your votes and the game actions | To be able to play the game | Providing the service you request (art. 6.1.b) | While the room exists |
| A random anonymous identifier (Firebase Authentication, “anonymous sign-in”) | To recognise your browser during the game, prevent anyone from impersonating you and let you rejoin the room if the connection drops | Providing the service (art. 6.1.b) and legitimate interest in the security of the service (art. 6.1.f) | In your browser until you clear its data. It is not linked to your name, email or phone |
| Technical connection data: IP address, browser type, date and time | To deliver the website, keep it secure and prevent abuse or attacks | Legitimate interest (art. 6.1.f) | Kept by the providers in section 5, normally for a few days or weeks |
| Anonymous counters (number of rooms, games and host handovers) | To know whether the game works well | Legitimate interest (art. 6.1.f) | They contain no personal data |
What we do not do: we do not ask for your real name, email, phone or location; we do not show personalised advertising; we do not use analytics or third-party cookies; we do not sell data; we do not make automated decisions or build profiles.
3. Who sees what you write
The players in your room see your nickname, avatar, characters, team, bids and votes. In addition, anyone who knows a room's code could read its contents while it exists. That is why we ask you to:
- use a nickname, not your full name;
- not write anyone's private data (phone numbers, addresses, health data, etc.). Characters are for playing and joking affectionately: celebrities, fictional characters, “your cousin”…;
- share the link or code only with the people you want to play with.
4. How long we keep the data
- When the host closes the room, all of its contents are deleted.
- A room expires 3 hours after it is created and can no longer be opened.
- Rooms that someone abandons without closing are removed automatically when new rooms are created and, in any case, the owner reviews and empties the database at least every 30 days.
5. Who else is involved (processors and transfers)
To work, we use two providers, which process data on our behalf as data processors:
- Cloudflare, Inc.: hosts the website and delivers it quickly and securely. It sees technical connection data (IP, browser). More information: cloudflare.com/privacypolicy.
- Google (Firebase): stores the rooms in a database located in the European Union (Belgium, region europe-west1) and provides anonymous sign-in. More information: firebase.google.com/support/privacy.
These providers may process technical data outside the European Economic Area (for example, in the US). They do so with appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. The fonts are included in the website itself: they are not loaded from third-party servers.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to . We will reply within one month at the latest.
Since we do not know your real name, to locate your data we will need you to tell us the room code, the nickname and the approximate time of the game. If it is not possible to identify you with that information, we will tell you (art. 11 GDPR). The data of a room that has already been closed or has expired will have been deleted.
If you believe your data is not being processed properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).
7. Minors
The game is suitable for all audiences. We do not ask anyone for personal data: no real name, email or phone, and the nickname can be made up. If you are a parent or guardian and want us to delete something related to a minor, write to us at .
8. Security
The connection is encrypted (HTTPS). Each player uses a different anonymous identifier; the database only allows each player to do what they need in order to play and limits how often actions can be sent. Even so, no system is infallible: if a security breach occurred that put your rights at risk, we would notify the competent authority within the legal deadline.
9. Changes to this policy
If we change something important (for example, if one day we show advertising or add analytics), we will update this page and the date above, and we will ask for your consent when the law requires it.