Privacy policy
What we collect, why, who sees it, how long we keep it and how to use your rights.
Last updated 18 October 2026
Who we are
Ossmann Law (we, us) runs ossmannlaw.com and is the controller of the personal data described here. Our company details are in the footer and on the contact page, and you can email us at [email protected]. This policy follows UK data protection law (UK GDPR and the Data Protection Act 2018).
What we collect
| When | What |
|---|---|
| You create an account | User name, email address, a scrambled (hashed) version of your password, or your Google ID if you use Google, the date you joined and last logged in. |
| You use your account | Coin balance, level, XP, number of games opened and the date you last collected your daily coins. |
| You send a message | The name, email, topic and message you type into the contact or care form. |
| You use the site | Small items kept in your browser: your age confirmation, cookie choice and recently opened games. See the cookies policy. |
We don't ask for payment details because nothing on the site costs money. We don't ask for your phone number or address.
Why we use it, and our legal basis
- To run your account (log you in, show your balance and level): needed to provide the service you asked for.
- To answer your messages and handle break, restriction, deletion and privacy requests: our legitimate interest in supporting you, and our legal duties.
- To keep the site safe (spot misuse, lock accounts after repeated wrong passwords, keep a record of form submissions): our legitimate interest in security.
- To remember your age check and cookie choice: our legal duty to keep the site for adults, and your consent where the law requires it.
We don't sell your data and we don't use it for advertising.
Who we share it with
- Email delivery provider: when you send a message, it is passed through an email service that delivers it to our team.
- Google: only if you choose to sign up or log in with Google. Google tells us your name and verified email address.
- Our hosting provider, which stores the site on our behalf.
- Authorities where the law requires it.
Some of these providers may process data outside the UK. Where they do, we rely on safeguards the law recognises, such as UK-approved transfer terms.
How long we keep it
- Account details: until you delete your account.
- Messages and form records: up to 12 months after we finish dealing with your message, unless we need them longer for a legal reason.
- Browser items: until you clear your browser, or the period shown in the cookies policy.
How we protect it
Sign-up, login and contact forms are processed on our servers, not in your browser. Connections use HTTPS. Passwords are stored only in scrambled form, so nobody on our team can read them. Accounts are locked for a short time after repeated wrong passwords. Account records are stored in a protected area that can't be opened from the web. No system is perfectly secure, but we take reasonable steps to protect your data.
Your rights
You can ask us to: see the data we hold about you, correct it, delete it, restrict or object to how we use it, or give you a copy to move elsewhere. You can delete your account yourself from your account page. For anything else, contact us and choose Privacy question. We'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
The site is for adults aged 18 and over. We don't knowingly collect data from anyone under 18. If you think a child has made an account, please tell us and we'll remove it.
Changes
We'll update this policy when we change how we use data. The date at the top shows the latest version.