Privacy Policy
1. Who we are
RIDGWELL SERVICES LIMITED, 85 Great Portland Street, First Floor, London, England, W1W 7LT, United Kingdom, operates Top Video Games at topvideogames.games and is the controller of personal information it collects for accounts, customer service and operation of the Platform. Third-party game providers and payment providers may act as separate controllers for information they collect through their own systems. This notice explains our intended and currently identifiable processing; it must be updated before any additional analytics, advertising or payment technologies go live.
2. Scope and key principles
This notice covers visitors, registered users, and people who contact us. We aim to collect only information necessary for a specified purpose, explain its use, protect it, retain it no longer than needed, and honor applicable rights under UK GDPR, the Data Protection Act 2018 and, where relevant, EU GDPR and local privacy laws. The exact obligations may differ depending on your location and the services used.
3. Information you provide
When you register, we collect your email address and a password, which is stored as a one-way password hash rather than in readable form. If you contact us, we may receive your name, contact details, correspondence, and information you choose to share. If purchasing is enabled, we expect to receive transaction identifiers, selected package, amount, currency, payment status, and limited payment-provider metadata necessary to reconcile orders and handle disputes; we do not intend to receive full card numbers or CVC/CVV.
4. Information generated by the service
Our account system maintains an internal account identifier, account creation date, access tier, the first free game selected, and session records used to recognize authenticated users. Servers and hosting providers may process IP addresses, timestamps, request paths, browser or device information, error logs and security events as part of ordinary hosting and abuse prevention. The game catalogue may record requested game identifiers in normal application and infrastructure logs.
5. Third-party game frames and content
Games are supplied through third-party content, currently including GameArter. When you load a game, your browser may communicate directly with the third-party host and disclose technical data such as IP address, browser characteristics and referrer information according to browser settings. Third-party games may use cookies, local storage, advertisements, measurement tools or other technologies that we do not directly operate. Their processing may be governed by their own privacy notices. We should assess and configure third-party embeds and consent requirements before broad public launch; this notice does not assert that every third-party technology is strictly necessary.
6. Purposes and lawful bases
We use account details to create accounts, authenticate users, provide requested games and enforce access tiers (performance of a contract or steps requested before entering one). We use technical logs, security measures and limited fraud prevention to maintain a secure and reliable service (legitimate interests, balanced against user rights, and/or legal obligations where relevant). We respond to enquiries and complaints (contractual necessity or legitimate interests). If purchases are introduced, we will process transaction records to supply access, administer refunds, prevent fraud and meet accounting and tax obligations (contract, legitimate interests and legal obligations). We will seek consent where required for non-essential cookies, personalized advertising or optional marketing; we do not treat consent as the basis for processing strictly necessary account records.
7. Cookies and similar technologies
The current account system uses a session cookie named tvg_session to keep you logged in and a cookie named tvg_guest associated with guest/trial-related records. These are designed as HttpOnly cookies, with SameSite=Lax, and Secure enabled in production. Their intended maximum durations are approximately 30 days and 365 days respectively; actual retention and browser behavior may vary. The guest cookie may be issued when the account-status endpoint is used even if you are not logged in. Third-party game frames and any future analytics or advertising integrations may set additional cookies or use similar technologies. We must obtain any required prior consent for non-essential technologies and provide suitable controls before enabling them. Browser settings can block cookies, but doing so may affect login and access.
8. Payments and financial information
Checkout is not currently enabled. If it becomes available, a payment service provider such as Mollie or another selected provider may collect card details through its own secure fields and process payment authentication, anti-fraud checks and settlement. The provider's own privacy policy will describe its processing and retention. We will store only the information reasonably needed to confirm payment, grant access, provide support, meet accounting duties and manage disputes. The actual provider and a link to its notice should be confirmed and added before live payments begin.
9. Advertising and analytics
The Platform may display advertising contained within third-party games. We do not currently make a verified claim that all such advertising is non-personalized or cookie-free. If we add our own analytics, advertising pixels, remarketing, profiling or marketing tools, we will identify the providers, purposes, lawful bases, retention, international transfers and applicable consent choices in an updated notice and cookie interface before activation.
10. Who receives information
We may share relevant information with infrastructure and database hosting providers, security and technical support providers, payment processors if enabled, professional advisers, and competent authorities where legally required. Third-party game hosts receive information directly from your browser when their content loads. Providers acting as processors are expected to be subject to appropriate contractual and security obligations. We do not sell registered users' email addresses or passwords as part of the current business model.
11. International transfers
Our Company is established in the United Kingdom, and hosting, game content and future payment services may involve processing in other countries. Where UK or EU data-protection law requires safeguards for international transfers, we will rely on an applicable adequacy decision or an appropriate transfer mechanism, such as approved contractual clauses and supplementary measures where necessary. We cannot accurately identify every destination without confirming the current hosting and third-party provider configurations.
12. How long we keep data
Account details are ordinarily kept while the account remains active and for a limited period afterward where needed for security, disputes or legal obligations. Session records expire after approximately 30 days under the current application design; expired database records may remain until housekeeping removes them. Guest-trial records and technical logs require a documented deletion schedule before production launch. If sales begin, financial and transaction records may need to be retained for statutory accounting, tax, chargeback and legal limitation periods. We will not retain personal data indefinitely merely because it is convenient. Exact schedules should be documented and implemented operationally.
13. Security
We use reasonable technical and organizational safeguards, including hashed passwords, server-side sessions and restricted access to database credentials. No online service can guarantee absolute security. We recommend unique passwords and caution against sending sensitive information by email. If a personal-data breach occurs, we will investigate and make notifications to regulators and affected individuals where required by applicable law.
14. Your rights
Depending on applicable law and circumstances, you may have rights to access your data, correct inaccurate information, request deletion, restrict or object to processing, receive certain data in a portable format, and withdraw consent where consent is used. These rights may be subject to lawful exceptions, including retention for legal obligations or defense of claims. We will verify identity where necessary and respond within the statutory period. You may submit requests to our published privacy contact method or by writing to our registered address.
15. Complaints to regulators
You may raise privacy concerns with us first, but you also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If EU GDPR applies to your situation, you may also have rights to complain to a competent supervisory authority in the European Economic Area. Nothing in this notice limits those rights.
16. Children
The Platform is not intended to solicit personal information from children below the applicable age of digital consent. If a parent or guardian believes a child has provided personal data without the consent required by law, they should contact us. We will assess the request and delete or restrict information as legally appropriate. Games may have their own age ratings or content considerations, which guardians should review.
17. Automated decisions and profiling
The current access logic checks account status, selected free game and package tier to determine whether a game may be opened; this is an ordinary contractual access rule, not intended as a decision producing legal or similarly significant effects under data-protection law. We do not currently describe any independent automated credit scoring or personalized advertising profiling by our Company. Payment providers may use automated fraud systems if payment services are enabled, as described in their notices.
18. External websites and links
Our Platform may link to external websites, games, advertisements or services. We are not responsible for those operators' privacy practices. Review their notices before providing information or using their services. A link does not mean that the third party acts on our behalf.
19. Changes to this notice
We may revise this Privacy Policy when our services, providers, technologies or legal requirements change. The effective date will be updated. Where a change materially affects how personal data is processed, we will provide additional notice or seek consent when required.
20. Contact
Data protection enquiries, access requests and complaints may be sent by post to: RIDGWELL SERVICES LIMITED, 85 Great Portland Street, First Floor, London, England, W1W 7LT, United Kingdom. A dedicated, monitored privacy email address should be published here before the service is promoted or payment functionality is activated. Do not include passwords or full payment card details in correspondence.