Last updated 4 September 2026 — this version adds the advertising cookie described below
Privacy notice
You are about to type someone else's name into a form on the internet. This page explains exactly what happens to it. It is written to be read.
The short version. We keep two things: your name and email, so we can help if something is wrong, and the game you designed, so its link keeps working. We have never sold anything to anybody and we never will. There is one exception to the "no trackers" this page used to promise, and we would rather you heard it here than found it: we pay for adverts on Facebook and Instagram, and we use Meta's advertising cookie to find out which of those adverts led to a gift. It only loads if you say yes to it, saying no costs you nothing, and it never sees the names you type into the form. The whole of it is below. Ask us and we delete the lot.
Who is responsible
Regalito Games is a personal project, not a company. The data controller is Ofer Chama, an individual based in Spain. Questions, corrections and deletions go to pixelgamehello@gmail.com — we answer people, not tickets. There is one of us.
What we collect, and why
| What | Why we have it | Lawful basis | How long |
|---|---|---|---|
| Your name and email (the buyer) |
To send your link again if you lose it, and to reach you if something in the game needs fixing. | Performance of a contract (Art. 6(1)(b) GDPR) — it is how we deliver what you asked for. | 2 years from the order, then deleted automatically. |
| The game you designed (recipient's name, pet, dedication, the names and looks of up to six people) |
It is the product. The game is rebuilt from this every time someone opens the link. | Performance of a contract (Art. 6(1)(b)); for the names of third parties, our legitimate interest in providing a gift you asked us to make (Art. 6(1)(f)). | For as long as we run the service, because we promise the link keeps working. Deleted whenever you ask. |
| Server logs (IP address, time, page) |
Kept by our hosting provider. We use them to stop abuse and to find faults. | Legitimate interest in keeping the service up and un-abused (Art. 6(1)(f)). | As retained by the host, currently up to 30 days. |
| Which advert an order came from (a short campaign tag such as ad1_gift, when there is one) |
If we have paid to show you an advert, we would like to know which one was worth paying for. The tag rides in the address bar and is filed with your order. It describes the advert, never you. | Legitimate interest in knowing which of our own adverts works (Art. 6(1)(f)). | Filed with your contact details, so 2 years. |
| How often a gift link is opened (a count and a few dates, per gift) |
So we know whether the gifts we make actually arrive — the one thing we otherwise have no way of telling. It is our own server counting requests it is already answering. | Legitimate interest in knowing the service does what it says (Art. 6(1)(f)). | Held with the game, and deleted when the game is. |
| That you visited, and what you did here (only if you agreed to the advertising cookie: the pages you opened on this shop, whether you reached the form, and whether you bought — sent to Meta with the identifier in their _fbp cookie) |
To find out which of the adverts we pay for actually leads to a gift, and to let Meta show our adverts to people more like the ones who buy. This is the only thing on this site that works this way, and it is the only thing we ask your permission for. | Your consent (Art. 6(1)(a) GDPR), given by the banner and withdrawable at any time. Nothing loads and nothing is sent before you agree. | Meta's own retention applies once it has left us — currently up to 2 years for the advertising identifier. We keep no copy. |
| Your game's progress | Saved by the game in the browser it is played in, so the player can pick up where they left off. | Strictly necessary for a service the user asked for. | Stays on that device. It never reaches us and we cannot read it. |
Two things we deliberately keep apart
The game and the buyer's contact details are stored as separate records. Anyone who is forwarded a gift link can load the game — that is what a gift link is for — but the link reveals nothing about who bought it, what they paid, or how to reach them.
About the names of other people
Most of the personal data here is not yours. It belongs to the person the gift is for and to the friends and family you put in their world, and they have not filled in any form. So we hold ourselves to the following:
- We ask for a first name and a look. We never ask for an address, a birthday, a phone number or a photograph, and there is nowhere to put one.
- Names are used inside that one game and nowhere else. They are never used to build a profile, never matched against anything, and never shared with a third party for any purpose of their own.
- When you place an order you confirm that you are happy for these names to be used this way. If the person in the game would rather not be, tell us and we will delete the game.
- Anyone named in a game has the same rights listed below as you do, and can write to us directly to use them.
Who else touches your data
We keep this list as short as we can, and it is complete.
| Who | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting the website and running the order endpoint. | EU region, with an EU–US data transfer framework in place. |
| Upstash | The database the games are stored in. | EU region. |
| Resend | Sending you your gift link, and sending us the order notification. | EU/US, with standard contractual clauses. |
| Stripe Payments Europe, Ltd. | Taking the payment. You enter your card details on Stripe's own page — they never reach us, and we never hold them. Stripe receives your email address and the order reference so it can send you a receipt, and it is a data controller in its own right for what it does to prevent fraud and to meet its own legal obligations. | Ireland, with group transfers under standard contractual clauses. |
| Meta Platforms Ireland Ltd. | The advertising cookie, and only if you agreed to it. It tells Meta that somebody who saw one of our adverts came here, reached the form, or bought — so that we can tell which advert was worth paying for. We are joint controllers with Meta for that one act of collection, under a controller addendum Meta publishes; what Meta then does with it inside its own advertising system, it does as a controller in its own right, on terms we do not set. It is never given a name, an email address, an order, or anything out of a game. | Ireland, with group transfers under standard contractual clauses. |
That is the whole list. There is no analytics broker and no CRM. Meta is the one entry that is there for our benefit rather than yours, it is the one entry you can refuse, and refusing it changes nothing about the gift you get.
While an order is being paid for it sits in our storage for up to 25 hours with your name, your email address and the game itself in it, waiting for the payment to be confirmed. If the payment never completes, it deletes itself and nothing further is kept. If it does, it becomes the two records described above and the same retention applies.
We keep a record that you ticked the box asking for the game to be delivered immediately, because we have to be able to show it was you who asked. Spanish tax law also requires us to keep the invoice records for a sale for several years — that obligation sits above our own two-year limit, and it covers the sale, not the contents of the game.
Cookies and tracking
One cookie here is optional, and everything else on this page happens without one. The fonts are served from our own domain rather than a font network, so loading a page still tells nobody else that you did.
The advertising cookie
We pay Meta to show adverts for this shop on Facebook and Instagram. Money spent on an
advert nobody responds to is money that could have gone into the games, and the only way
to tell one from the other is to know which advert a purchase came from. Meta's pixel is
how that is measured, and it works by putting an identifier — a cookie called
_fbp — on your device and reporting back to Meta that you opened a page here.
We are not going to dress that up. It is a third-party advertising tracker, it is the only one on this site, and it is there for our benefit rather than yours. So:
- Nothing loads until you say yes. Not the script, not the cookie, not a single request to Meta. Until you answer the banner, Meta does not know this page was opened. This is stricter than the usual arrangement, where the tracker loads immediately and merely promises to behave.
- Saying no is one press, in the same place, on a button the same size. There is no second screen, no list of two hundred "partners", and no design that makes the honest answer the tiring one.
- Nothing changes if you refuse. The shop works identically, the game is identical, and we cannot tell afterwards who refused.
- It never sees the contents of an order. Meta is told that a step happened — a page was opened, the form was reached, something was bought — and what the order was worth. It is never given your name, your email address, the recipient's name, or anything else out of a game. Those are not passed to it and there is no code here that could.
- We remember your answer, either way, in your browser's local storage
under
rg.consent. That is how we avoid asking you again on every page. It holds the word "yes" or "no" and nothing else, it is never sent anywhere, and it is not a cookie.
Changing your mind. Use this link, or the
one in the footer of every page, and the question comes back. Withdrawing takes effect on
the next page you load — a script already running in a page cannot be unloaded — and Meta's
own _fbp cookie is removed by clearing this site's data in your browser
settings, which we cannot do from here. You can also ask Meta directly what it holds, at
accountscenter.facebook.com.
Consent is asked for on the shop's own pages. A gift link carries no pixel and no banner — whoever you send it to never asked us for anything, and they are not going to be measured for our benefit.
The game itself stores your progress in your browser's local storage. That is not a cookie, it is never sent anywhere, and clearing your browser data removes it.
When you go to the payment page, the order form writes your own half-finished answers into your browser's session storage, so that pressing back returns you to a filled-in form instead of an empty one. It holds nothing but what you typed, it is never sent to us, it is scoped to that one tab, and it disappears when you close it. It identifies nobody.
How we count, separately from all of that
We use no analytics product. What little we count, we count ourselves, on our own server, and only ever as totals: how many people opened each page of this shop, how many times a gift link has been opened, and which of our own adverts an order came from. There is no identifier anywhere in it, so there is no way for us to pick you out of it or follow you from one page to the next — and nothing is written to your device to collect it, which is why this part is not what the banner is asking about, and happens whether you accept it or refuse it.
Neither of them puts anything on your device, neither involves an identifier, a session or a profile of any kind, and neither leaves our own storage. The count on a gift cannot tell us who opened it, where they were, or whether two openings were two people or one person twice — and we have built it so that it cannot. If that ever changes, this page will say so before it does.
Your rights
Under the GDPR you can ask us to:
- Show you everything we hold about you.
- Correct anything wrong — including a misspelled name in a game.
- Delete it. We will remove the game and your contact details. Be aware this permanently breaks the link, so make sure the recipient is finished with it.
- Restrict or object to what we do with it.
- Take it with you, as a machine-readable file.
- Withdraw your consent to the advertising cookie, at any moment and as easily as you gave it — here, or from the footer of any page. Withdrawing does not make what happened before it unlawful, and it does not affect anything else on this page, none of which runs on consent.
Write to pixelgamehello@gmail.com. Quote your order reference if you have it. We will reply within 30 days and, realistically, within a couple of days. There is no charge.
If we handle it badly you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos. We would rather you told us first.
Security
Everything is served over HTTPS. A game's address is a random 60-bit string, so it cannot be found by guessing, and the endpoint that serves games is rate-limited to keep it that way. Games are not indexed by search engines and are not listed anywhere.
What that means in practice: anyone holding the link can open the game. It is a gift, meant to be forwarded, so it works like a shared document link rather than an account. Do not put anything in a game you would mind a stranger reading.
Children
The shop is not aimed at children and we do not knowingly take orders from anyone under 14. A game may of course be a present for a child, bought by an adult.
Changes
If this notice changes materially we will date the new version at the top of the page. The service is still young and changing quickly, so it is worth a re-read if you are ordering again months later.