Your data, explained simply
What we collect, the reasons, where it is kept and what you can do about it.
Last updated 19 October 2026
Who is responsible for your data
The data controller is the operator of Web Directory Book. Email: [email protected]. You can also use the contact form.
What we collect
Only browsing and playing? We don’t ask who you are and we build no profile of you. The site carries no advertising or analytics trackers.
| Situation | Data | Purpose |
|---|---|---|
| You sign up with email | First and last name, screen name, email address, date of birth, a password (kept only as a one-way hash), sign-up date, last sign-in, failed-attempt count and any lock time, plus when you accepted the Terms and Privacy Policy. | To run your account, confirm you are 18+ and keep it secure. |
| You sign in with Google | Your name, verified email and Google account ID, as supplied by Google and checked by our server. We then ask for a screen name and date of birth. | To sign you in and confirm you are 18+. |
| You contact us | Your name, email address, topic and message. | To read your message and reply. |
| You ask for a password reset | Your email and a single-use reset code (kept as a hash, valid for one hour). | So that you can choose a new password. |
| You sign in or send any form | A short-lived counter linked to a one-way hash of your IP address. | To stop spam and password guessing. Counters expire by themselves. |
We never request or store card or bank details, and we do not use your data for advertising or profiling.
Where it is kept
- Accounts are stored on our web server as protected files that cannot be opened from the web. There is no separate database. They remain until you delete your account or ask us to remove it.
- Messages sent through our forms are emailed by our server, using an email delivery service (SMTP), to our support inbox. We also keep a protected delivery log containing only the date, result, form used and any technical error, with no names, email addresses or message text.
- In your browser we store your age answer, your cookie-notice choice and the time your visit began (for the timer), plus a sign-in cookie when you log in or use a form. See the Cookie Policy.
- Our hosting provider may keep routine technical logs (for example IP address and page requested) for security and operational reasons.
Other parties involved
- Email delivery service. Sends the messages from our forms and password-reset emails.
- Google Sign-In. Used only when enabled and chosen by you. Loading the Google button on the sign-in and sign-up pages connects your browser to Google, whose privacy policy then applies.
- The games. Games load inside our pages from files hosted on webdirectorybook.com and may use your browser’s storage to work. We receive no payment or identity details from them.
- Hosting provider. Hosts and delivers the site.
We never sell personal data.
How we use it
- Running and protecting your account.
- Checking that you are 18 or over, because the site is for adults.
- Answering your messages and requests.
- Preventing misuse of the site and its forms.
Your rights
Depending on where you live (for instance under the GDPR, the UK GDPR or US state privacy laws), you may have the right to access, correct or erase your data, object to or restrict its use, receive a copy, or complain to a data protection authority. You can delete your account yourself at any time on the account page, which removes it from our server. For anything else, please use the contact form.
Children
The site is meant for adults aged 18 and over, not children. If you believe a child has given us information, get in touch and we will delete it.
Changes
If this policy changes, we will update this page and the date at the top.