Legal

Privacy Policy

Last updated: April 15, 2026

1. Introduction

Toro Games S.L. ("we", "us", "our") operates ToroGames.io and its games (Kartwars.io, DragonWars.io, SnakeWars.io, Rockets.io, Capman and others). This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish law (LOPDGDD).

2. Data We Collect

• Account data: username and email address when you register.
• Social login data: public profile name and unique ID when you sign in via Google or Facebook. We do not store passwords for social logins.
• Game data: score, kills, coins, achievements, vehicle inventory, and play sessions — used to power rankings and progression.
• Technical data: IP address, browser type, device type, and connection timestamps — collected automatically for security and performance purposes.
• Cookies: session cookies for authentication and preference cookies (nickname, control type) stored locally in your browser.

3. How We Use Your Data

• To provide, maintain and improve the game service.
• To display your nickname and stats on the in-game leaderboard.
• To process in-game purchases and unlock content across the platform.
• To detect and prevent fraud, cheating or technical abuse.
• To send transactional emails (e.g. password reset) — no marketing emails without explicit consent.

4. Legal Basis for Processing

• Performance of a contract (Art. 6(1)(b) GDPR): providing the game service to registered users.
• Legitimate interests (Art. 6(1)(f) GDPR): security monitoring, anti-cheat, and service analytics.
• Consent (Art. 6(1)(a) GDPR): non-essential cookies and optional social login.

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Social login providers (Google, Facebook) only as necessary to authenticate your account.
• Hosting and infrastructure providers who process data on our behalf under data processing agreements.
• Law enforcement when required by applicable law.

6. Data Retention

Account and game data is retained for as long as your account is active. If you request account deletion, we will erase your personal data within 30 days, subject to legal retention obligations.

7. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to certain processing activities.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at 902 35 45 25 or write to the address above. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

8. Cookies

We use the following cookies:

• kw_token (localStorage): your authentication token — strictly necessary.
• nick (cookie): your last-used nickname — functional, stored locally.
• ctrl (cookie): your preferred control scheme — functional, stored locally.

We do not use third-party advertising cookies. You can clear all cookies by logging out or clearing browser storage.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and token-based authentication. No internet transmission is 100% secure; we cannot guarantee absolute security.

10. Children

ToroGames.io and its games are not directed at children under 16. We do not knowingly collect data from users under 16. If you believe a child has provided us with personal data, please contact us for immediate removal.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

Toro Games S.L.  ·  c/ Oliva nº18, 28231 Las Rozas de Madrid, Madrid, España  ·  902 35 45 25