This policy explains what information Vayu Games ("we", "us") collects when you use vayugames.com, how we use and share it, and the choices and legal rights you have. We have tried to keep this short and readable — if anything is unclear, email us at support@vayugames.com.
Who we are
Vayu Games is the operator of the website at https://www.vayugames.com. Vayu Games operates from Indiaand, under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), acts as the Data Fiduciary for personal data processed through this site. For questions about this policy, to exercise your rights, or to contact our Grievance Officer, email support@vayugames.com. We aim to acknowledge every grievance within 72 hours and resolve it within 30 days.
Information we collect
Vayu Games does not require an account. We do not ask for your name, email, or payment details to play our games. The information we receive falls into three groups:
- Automatic technical data — your IP address, browser type and version, operating system, referring URL, the page you visited, and the time of the request. Most of this is standard web-server information captured in access logs.
- Advertising data— information used to serve ads (see "Advertising partners" below), including information collected via cookies and similar technologies. This may include a pseudonymous identifier, approximate location derived from IP, and interaction data (e.g. which ads were shown, clicked, or dismissed).
- Analytics data— aggregate, pseudonymised page-view and engagement measurements collected through Google Analytics 4 with IP anonymisation enabled. We use this only to understand which games are popular and to improve the site. No analytics cookies are set before you accept them in the cookie banner; before that, GA operates in Google's cookieless "Consent Mode" and only anonymous pings are sent.
- Voluntary information — anything you choose to send us by email (for support, bug reports, or feedback).
Some small pieces of information (your list of favourite games, per-game high scores, and UI preferences) are stored in your browser's local storage, on your own device. This data stays on your device and is never sent to our servers.
Legal basis for processing
For visitors in India: under the DPDP Act, 2023, we process personal data only for specified, lawful purposes — on the basis of your consent (for non-essential cookies and personalised advertising) or for other grounds specifically permitted by the Act (such as performing the service you request, responding to medical or legal emergencies, and meeting legal obligations).
For visitors in the EU / UK: under the GDPR and UK GDPR, we rely on the following legal bases:
- Legitimate interests — for security, fraud prevention, service operation, and non-personalised advertising that funds the free games.
- Consent — for personalised advertising cookies and any analytics cookies. You can give or withdraw consent at any time via the cookie banner or your browser settings. Where you do not consent, we serve non-personalised ads instead.
- Legal obligation — to respond to lawful requests from authorities.
How we use information
- To keep the site running, fast, and secure.
- To debug problems and understand which games need tuning.
- To serve advertising that funds the free games.
- To respond to messages you send us.
- To comply with legal obligations and enforce our Terms of Service.
Analytics partners
We use Google Analytics 4to understand aggregate traffic patterns and improve the games library. Analytics is configured with IP anonymisation and with Google's remarketing / advertising-signal features disabled — we use it purely for site improvement, not for targeted advertising. Google may retain aggregated analytics data for up to 14 months.
Analytics cookies are set only if you accept them in the cookie banner. If you decline, GA4 runs in cookieless Consent Mode: only anonymous, aggregated pings are sent, and no identifiers are stored on your device.
Advertising partners
We use Google AdSense and, for in-game placements, Google H5 Games Ads. Google and its partners may use cookies and similar technologies to serve ads based on your visits to this and other sites on the Internet.
If you are in the European Economic Area, the UK, or Switzerland, we use Google's consent management tools to collect your consent before personalised advertising cookies are set. If you decline, we serve non-personalised ads (NPA), which are based only on the content of the page and coarse location, not on your profile.
You can learn more and control how Google uses your data at policies.google.com/technologies/ads. Google's own privacy policy is available at policies.google.com/privacy.
Cookies and similar technologies
For the full list of cookies — what sets them, what they do, and how to control them — see our Cookie Policy.
International data transfers
Our advertising partners (Google) are based in the United States and operate globally. When we share data with them for the purposes above, it may be transferred to and processed in the United States and other countries whose data-protection laws may differ from yours. Google uses the EU's Standard Contractual Clauses and participates in the EU–US Data Privacy Framework where applicable, so that data transferred from the EEA / UK receives a comparable level of protection.
Data retention
- Server access logs: up to 30 days, then deleted automatically.
- Email correspondence: kept for up to 24 months after the last message, so we can reference context if you write back.
- Advertising data: held by Google per its retention policies.
- Local-storage data on your device: kept until you clear it (we never see it).
Your rights (EU / UK)
Under the GDPR and UK GDPR, you have the right to:
- Access — ask what personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure— ask us to delete your personal data ("right to be forgotten").
- Restriction — ask us to stop processing while a dispute is resolved.
- Portability — receive your data in a portable format.
- Objection — object to processing based on legitimate interests, including profiling for advertising.
- Withdrawal of consent — withdraw any consent you gave us at any time (this does not affect past lawful processing).
- Complaint — lodge a complaint with your local data protection authority. EU residents can find their authority via edpb.europa.eu; UK residents can contact the ICO.
To exercise any of these rights, email support@vayugames.com. We reply within 30 days and free of charge.
Your rights (California / US state privacy laws)
If you are a California resident, the CCPA/CPRA gives you additional rights:
- Right to know what categories of personal information we collect and share.
- Right to delete personal information we have collected from you.
- Right to correct inaccurate personal information.
- Right to opt outof the "sale" or "sharing" of personal information for cross-context behavioural advertising. Use the "Do Not Sell or Share My Personal Information" control in the cookie banner, or email us.
- Right to non-discrimination — you will not receive different service for exercising any of these rights.
Similar rights exist under the privacy laws of Colorado, Connecticut, Virginia, Utah, and other US states. The same controls apply nationwide.
Your rights (India — DPDP Act 2023)
If you are located in India, the Digital Personal Data Protection Act, 2023 ("DPDP Act") gives you the following rights as a Data Principal:
- Right to information — ask for a summary of the personal data we process about you and the processing activities.
- Right to correction and erasure — request correction of inaccurate data or erasure of data that is no longer needed.
- Right to grievance redressal — raise any grievance with our Grievance Officer at support@vayugames.com. If your grievance is not resolved within a reasonable period, you may escalate to the Data Protection Board of India once it is constituted.
- Right to nominate — nominate another individual who can exercise these rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time. Withdrawal does not affect the lawfulness of processing done before the withdrawal, but may limit features that depend on that consent.
To exercise any of these rights, email support@vayugames.com. We will respond within the timeframes set by the DPDP Act and its rules.
Children
Our games are suitable for most ages, but Vayu Games is not directed at children. The definition of "child" varies by jurisdiction:
- India (DPDP Act): any individual under 18years of age. We do not process children's personal data without verifiable parental or lawful-guardian consent, and we do not monitor children's behaviour or target advertising at them.
- United States (COPPA): any individual under 13. We do not knowingly collect personal information from children under 13.
- European Economic Area (GDPR): any individual under 13 to 16, depending on the member state. We apply the higher local standard where known.
If you believe a child has shared personal data with us, contact support@vayugames.com and we will delete it promptly. We do not serve personalised advertising to users we know to be under the applicable minimum age.
Security
Vayu Games is served over HTTPS. We limit access to server logs and email to the small team that operates the site. No online service is perfectly secure — but we take reasonable, industry-standard precautions to keep your data safe.
Changes to this policy
If this policy changes materially, we will update the "Last updated" date at the top of this page and, where appropriate, notify you on the site. Continued use after the effective date constitutes acceptance of the updated policy.
Contact
Questions or requests about this policy: email support@vayugames.com or visit our Contact page.