Privacy

Privacy and Cookie Policy

Last updated 9 July 2026

Welcome to VOIXRUNNER ("we", "our", "us"), operated by FARALA LTD (Company Number 17099027), registered office 128 City Road, London, EC1V 2NX, United Kingdom. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation ("EU GDPR"). This Privacy and Cookie Policy ("Policy") explains how we collect, use, store, transfer, and safeguard your personal data when you use the VOIXRUNNER website and browser game (the "Site"). By visiting or using the Site, including account creation, playing the game, or purchasing digital content such as virtual currency ("Gems") and cosmetic items, you acknowledge that you have read and understood this Policy.

1. Introduction

1.1 VOIXRUNNER is a free-to-play online game operated by FARALA LTD (Company Number 17099027), registered office 128 City Road, London, EC1V 2NX, United Kingdom.

We are committed to protecting and respecting your privacy in accordance with:

The UK General Data Protection Regulation ("UK GDPR");
The Data Protection Act 2018;
Where applicable, the EU General Data Protection Regulation ("EU GDPR").

1.2 By visiting or using the Site, including account creation, browsing, playing the game, or purchasing digital content, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information You Provide

When creating an account, purchasing Gems, or contacting support, we may collect:

Email address
Username / display name
Payment-related details (processed by secure third-party providers — we never see or store full card numbers)
Account preferences (such as equipped cosmetics)
Communications with support

2.2 Information Collected Automatically

We automatically collect certain technical and usage data, including:

IP address
Device type
Operating system
Browser type
Pages visited and time spent on pages
Game progress and gameplay data (for example: unlocked characters, danger tiers, best wave scores, and meta-currency balances), which we store so your progress follows your account across devices ("cloud save")

2.3 Information from Third Parties

We may receive limited data from:

Payment processors (e.g. Stripe)
Authentication providers (e.g. Clerk, and any social sign-in provider you choose to use)
Fraud prevention services

This data is used strictly for transaction processing, account security, fraud prevention, and legal compliance.

3. Legal Basis for Processing (UK GDPR & EU GDPR)

Under the UK GDPR and EU GDPR, we rely on the following lawful bases:

Contractual necessity – to process purchases, deliver Gems and digital items, and manage your account and game progress.
Legal obligation – to comply with tax, accounting, and regulatory requirements.
Legitimate interests – to maintain security, prevent fraud and cheating, and improve the game and the Site.
Consent – for marketing communications and any non-essential cookies.

4. Use of Information

We use your data to:

Process purchases and deliver Gems and digital items to your account
Manage your account and synchronise your game progress across devices
Provide customer support
Prevent fraud, cheating, and unauthorized access (including server-side verification of Gem balances)
Improve game balance, performance, and Site functionality
Send marketing communications (only with your consent)

5. Cookies and Similar Technologies

Cookies are small text files stored on your device to improve functionality, security, and analytics. You may manage cookie preferences via your browser settings. Disabling certain cookies may affect Site functionality — in particular, you cannot stay signed in without essential authentication cookies.

5.1 Main Cookies Used on the Site

Below is a non-exhaustive list of the main cookies used on our Site:

__session — Provider: VOIXRUNNER (via Clerk). Purpose: maintains your signed-in session and account security. Duration: up to 7 days.
__client_uat — Provider: VOIXRUNNER (via Clerk). Purpose: keeps the signed-in state consistent between browser tabs. Duration: persistent.
Stripe cookies (e.g. __stripe_mid, __stripe_sid) — Provider: Stripe. Purpose: payment processing and fraud prevention during checkout. Duration: session to 1 year.

We also use your browser's local storage to keep game settings and an offline copy of your game progress on your own device. We currently use no advertising cookies and no ad tracking. We may update this list periodically to reflect changes in cookies or service providers. Third-party providers such as Stripe and Clerk process data in accordance with their own privacy policies.

6. Data Protection and Storage

6.1 Security Measures

We implement:

SSL/TLS encryption for all traffic
Secure authentication mechanisms
Restricted internal access controls
Fraud detection systems and server-authoritative handling of currency balances and purchases

6.2 Data Retention

We retain personal data only as long as necessary for:

Contract performance (your account, purchases, and game progress)
Legal and tax compliance
Dispute resolution
Fraud prevention

When no longer required, data is securely deleted or anonymized.

7. International Data Transfers

Where data is transferred outside the UK or EEA (for example, to infrastructure or service providers), we ensure appropriate safeguards such as:

Standard Contractual Clauses (SCCs)
Transfers to countries with adequacy decisions
Contractual and technical protections

8. Your Rights Under UK GDPR and EU GDPR

You have the following rights:

Right of access – to obtain a copy of your personal data.
Right to rectification – to correct inaccurate data.
Right to erasure ("right to be forgotten").
Right to restrict processing.
Right to data portability.
Right to object to processing based on legitimate interests.
Right to withdraw consent at any time.

To exercise these rights, contact us using the details below. We may request verification of identity before fulfilling your request.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.

In the United Kingdom, this is:

Information Commissioner's Office (ICO). Website: https://ico.org.uk. Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

If you are located in the European Economic Area (EEA), you may contact your local data protection authority. We encourage you to contact us first so we can attempt to resolve your concern.

10. Data Protection Contact (DPO)

We have appointed a Data Protection Contact responsible for overseeing questions regarding this Policy.

Data Protection Contact, FARALA LTD, 128 City Road, London, EC1V 2NX, United Kingdom. Email: [email protected].

11. Children's Privacy

The Site is not intended for individuals under 13 years of age.

We do not knowingly collect personal data from children under 13. If such data is identified, it will be promptly deleted.

We may share personal data:

With payment providers (e.g. Stripe) for transaction processing
With authentication providers (e.g. Clerk) to operate secure sign-in
With hosting and database infrastructure providers that run the Site
With fraud prevention services
When legally required

We do not sell or rent personal data to third parties.

13. Updates to This Policy

We may update this Privacy and Cookie Policy periodically. The latest version will always be available on the Site. Continued use of the Site constitutes acceptance of the updated Policy.

14. Contact Information

For general inquiries:

FARALA LTD, 128 City Road, London, EC1V 2NX, United Kingdom.

Email: [email protected]. Support Hours: Monday – Friday: 09:00 – 18:00 (UTC).