Last updated: 9 November 2026
Who we are
Lapetite Design runs lapetitedesign.com, a free-to-play gaming website for adults aged 18 and over. We are responsible for the personal information described in this policy, which explains what we collect, why, where it is kept and your rights under applicable data protection laws.
What we collect
- When you create an account: username, first name, last name, email address, an optional phone number and a password. Your password is turned into a one-way scrambled code (a hash) before it is saved, so it is never stored as you typed it and nobody, including us, can read it. We also record when you joined, your last log-in and a count of failed log-in attempts (five wrong tries lock the account for 15 minutes).
- If you sign up with Google: your name, verified email address and Google account ID, which our server checks directly with Google. We never see your Google password.
- While you play (signed in only): your play coins, XP, level, the number of games you have opened, your recently played games and the date you last collected the daily bonus.
- When you contact us: your name, email address, topic and message.
- Form records: for security, each form submission is recorded with the date, form name, result, email address and IP address. Passwords are never recorded.
We never ask for, and never store, bank or card details.
Where it is kept
Your account is stored on our own web server as a protected file. It is not kept in a public table or shared database and the file is blocked from being opened from the web. It stays there until you delete your account from My account or ask us to delete it.
Messages you send through the contact or Player Care forms are emailed from our server to our support inbox through a secure email service, and a copy is kept in a protected log on our server so we can reply and confirm the message arrived. We delete it once your request is dealt with, and at the latest after 12 months.
Form records are kept in a protected log on our server for up to 12 months to help us spot misuse.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, play coins and level | Contract (providing the service you asked for) |
| Checking you are 18 or over | Legal obligation and legitimate interests |
| Replying to your messages and Player Care requests | Legitimate interests |
| Keeping the Website and accounts secure, preventing misuse | Legitimate interests |
We do not sell your information, use it for advertising profiles, or make automated decisions about you.
Who we share it with
- Our hosting provider, which stores the Website and account files for us.
- Our email delivery provider, which sends contact-form messages to our inbox.
- Google, only if you choose Google sign-in. Google's own privacy policy applies to that.
- Authorities, if the law requires it.
Where a provider processes data in another country, we make sure suitable safeguards are in place.
How we protect it
- All pages and forms use an encrypted HTTPS connection.
- Sign-up, log-in and contact forms are processed on our server. Nothing about your account is stored in a public database or shown in the browser.
- Passwords are hashed with a strong, salted algorithm.
- Account files and logs are kept in folders that are locked from web access.
- Log-in sessions use a secure, HTTP-only cookie.
How long we keep it
Account information is kept while your account is open. When you delete it, the account file is removed from our server straight away. Messages and form records are kept for up to 12 months. Backups are overwritten on a rolling basis.
Your rights
Depending on where you live, you may have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. You can delete your account yourself at any time from My account. To make any other request, use our contact form or email [email protected]. We will reply within one month.
You also have the right to complain to the data protection authority in your country.
Children
The Website is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, please contact us and we will delete it.
Cookies
We use a small number of cookies and similar technologies. See our Cookies Policy for full details.
Changes
We will update this page if anything changes. The date at the top shows the latest version.