Privacy Policy

1. Introduction and Data Controller

Welcome to the privacy policy of Caramel Crunch Arcade. Confectionary Games Entertainment Ltd acts as the primary data controller under the UK Data Protection Act 2018 and the UK GDPR. We respect your privacy and are committed to protecting any minimal data collected while you explore the Great Confectionary Engine.

2. Data We Collect

Because Caramel Crunch Arcade requires no accounts or registration to play Sugar-Spun Cogs or Toffee Drop, we do not collect personally identifiable information such as names, addresses, or banking details. We only process anonymous, non-identifying technical data such as IP addresses and browser types to ensure the smooth operation of our games and to secure your virtual balance of Caramel Cogs during your session.

3. Lawful Basis for Processing

We process this minimal technical data under the lawful basis of 'Legitimate Interests' as defined by the ICO. This allows us to provide a functional website, remember your local Caramel Cogs balance via your browser, and defend our systems against malicious activity.

4. Data Sharing and Third Parties

Caramel Crunch Arcade does not sell, trade, or otherwise transfer your technical data to outside parties for marketing purposes. We may share anonymised analytical data with trusted service providers who assist us in operating our website, provided those parties agree to keep this information confidential and comply with UK data protection laws.

5. Data Retention

Any technical session data generated while you earn Caramel Cogs is retained only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal or reporting requirements. Session data is typically purged automatically within 30 days.

6. Cookies and Tracking

Our website uses essential cookies to remember your game progress in Sugar-Spun Cogs and Toffee Drop. For detailed information on how we use these technologies and how you can manage your preferences, please refer to our dedicated Cookie Policy.

7. Your Data Subject Rights

Under UK GDPR, you have the right to request access to, rectification of, or erasure of your personal data. Because we do not hold accounts, fulfilling these requests may require you to provide specific technical identifiers. You also have the right to object to processing and request data portability where applicable.

8. Complaints to the ICO

If you believe Caramel Crunch Arcade has mishandled your data, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the ICO.