iLuckyStones
Gioca

Privacy notice

This notice explains which personal data the website iluckystones.com and the game iLuckyStones process, why, for how long and what your rights are, under Article 13 of Regulation (EU) 2016/679 («GDPR») and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).

1. Data controller

The data controller is BMDNET S.r.l., Milan (Italy), VAT and tax code 14398790965, which runs the website and the game. For any question about your data you can write to info@bmdnet.it.

2. Which data we process

Browsing data. As with any website, the hosting server automatically logs some technical data about requests: IP address, date and time, requested page, browser and operating system. They are needed to run the website and the game and to protect them from abuse, and are kept by the hosting provider for the time required by its security systems.

Website visit statistics. The website counts page views without cookies and without storing the IP address. To avoid counting the same person twice on the same day, a non-reversible fingerprint is calculated; it changes every day, cannot be traced back to the visitor and is deleted after nine days. Only overall figures remain.

Game usage statistics. The game never asks for your name, email or location and uses no cookies. It only reports anonymous events (game opened, game started, level cleared, game over, installed as an app) together with the device type, the controls used and the language. To count the day's players without recognising them, a non-reversible fingerprint is calculated; it changes every day and is deleted after two days. To limit abuse, an encrypted fingerprint of the IP address is kept for at most two hours, never the address itself.

Verified games. To keep scores fair, at the start of each game the server assigns a random code and records level and points using the server clock. The code does not identify the player. Games are kept for 90 days; valid games above 20,000 points for up to 400 days, as records.

Sponsor spots. For each spot shown we record, without personal data, whether it was watched to the end, for how many seconds and whether the sponsor's button was tapped. These working data are deleted after seven days; only overall figures remain. Sponsors only receive aggregate statistics, never personal data. If you tap a sponsor's button you open their website, which has its own privacy notice.

Records and preferences. Your record, language and sound settings are stored only in your browser's memory, on your device: they never reach us.

Data you send us. If you write to us using the contact form or by email, we process the data you provide: name, email address, the type of request you choose and the content of the message. Please do not include unnecessary data and, in particular, health data or other special categories of data.

Ideas for the game. If you suggest an idea for the game (for example for a new level) and tell us how you would like to be credited, we will use that name, nickname or town only to credit you publicly if we use your idea. If you leave the field empty, we will not credit you. You can ask us to remove the credit at any time.

Press area requests. If you request the press kit or an interview, we use the name, email address and publication you give us only to send you the link to the material and to reply to you. We will not send you other press releases or updates without your consent.

3. Why we process them and on what legal basis

  • Answering your requests (questions about the game, reports about spots, sponsorship proposals): pre-contractual measures taken at your request and our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
  • Running the website and the game, protecting them from abuse and verifying scores: legitimate interest (Art. 6(1)(f) GDPR).
  • Aggregate statistics on visits, game usage and spots: legitimate interest in improving the service and keeping it sustainable thanks to sponsors (Art. 6(1)(f) GDPR).
  • Complying with legal obligations, where applicable: Art. 6(1)(c) GDPR.

We do not use your data for profiling or automated decision-making and we never sell them.

4. Providing data

You don't need to provide any data to play. Providing data in the contact form is optional, but without a name and an email we cannot reply.

5. Minors

The game asks for no personal data and can be used by everyone. The contact form is meant for people aged 14 or over: if you are younger, ask a parent to write to us for you.

6. Who may process the data

Data are processed by the controller and by persons authorised by it. On behalf of the controller and as data processors (Art. 28 GDPR), they may be processed by the providers of the necessary technical services: the hosting provider and the BMDnet platform, where contact requests and statistics are recorded. We do not disclose data to anyone else, unless required by law.

7. Transfers outside the European Union

The website's pages do not send data to third-party services: they use no external analytics, social network buttons or third-party hosted fonts. Should a technical provider process data outside the European Union, the transfer would only take place towards countries covered by an adequacy decision of the European Commission or with the safeguards provided for by Articles 44-49 GDPR.

8. How long we keep data

  • Contact requests: for the time needed to reply and to manage any relationship that follows, and in any case no longer than 24 months from the last contact, unless the law requires otherwise.
  • Website statistics fingerprints: nine days. Game fingerprints: two days. Encrypted IP fingerprint against abuse: two hours.
  • Spot outcomes: seven days. Verified games: 90 days (records above 20,000 points: 400 days).
  • Browsing data in server logs: for the period set by the hosting provider for security purposes.

9. Cookies

Neither the website nor the game uses cookies: no technical, statistics, profiling or marketing cookies. That is why there is no cookie banner. Should we introduce non-essential cookies in the future, this notice will be updated and your consent will be asked before installing them.

10. Your rights

At any time you can ask the controller to: access your data; rectify or complete them; erase them; restrict their processing; receive them in a commonly used format (portability); object to processing based on legitimate interest (Articles 15-22 GDPR). We reply within one month of the request.

If you believe the processing breaches the law you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

11. How to exercise your rights

Write to info@bmdnet.it stating your request.

12. Changes

This notice may be updated: the valid version is always the one published on this page. Last updated: 7 October 2026.