Who we are
UGB Arcade is a trading name used by UGLY BOY LTD, a private limited company registered in England and Wales under company number 17193588.
UGLY BOY LTD decides how and why the personal data described here is used, which makes it the data controller. When this policy says "we", "us" or "our", it means UGLY BOY LTD trading as UGB Arcade.
We are an independent game studio. We design short arcade games for Android phones and publish them on Google Play.
Our registered office is recorded against company number 17193588 on the public register kept by Companies House.
This policy explains which personal data reaches us, what we do with it, how long we keep it, which outside organisations help us and how you can exercise your rights.
Apps this policy covers
No mobile apps are currently published under the UGB Arcade name. This policy therefore applies to the ugb-arcade.fyi website and to contact with us by post.
When we release a future app on Google Play, that app will receive a separate policy page on this website, at an address beginning ugb-arcade.fyi/privacy/ followed by the name of the game.
Each app policy will give the app's name and exact package name, follow its Google Play Data Safety answers, name every software development kit in the released build and list each Android permission the build requests.
We will add a link to every app policy on this page as each game is released, so the right notice is always one click away.
Information we collect
You can browse ugb-arcade.fyi without creating an account or giving us your name. The site has no forms, sign-ups, comment areas, newsletters or payment pages.
To deliver pages, our hosting provider processes standard connection data on our behalf: your IP address, the page you asked for, the time of the request, your browser and device type and, where your browser supplies it, the page that sent you here.
We run no analytics, advertising, tracking pixels, fingerprinting or session-recording tools on the website.
If you write to us, we receive the contents of your letter together with your name and return address, plus any other contact detail you choose to include, such as an email address or telephone number for a reply.
Please leave bank details, passwords, official identity documents and health information out of your letters. We do not need them, and anything of that kind that reaches us will be returned or destroyed securely.
We do not receive information about you from Google Play, from other app stores or from data brokers through this website.
Google Play Data Safety answers describe the data an app collects. As no app falls under this policy, it reports no Data Safety categories. Each app policy will report its own categories and will separate data kept only on your device from data sent off it.
How we use information
We use connection data to serve the website, protect it against attacks and abuse, and diagnose faults.
We use letters to reply to you, to follow up where needed, to keep an accurate record of the exchange and to respond to requests about your personal data.
We rely on our legitimate interests in running a secure website and answering the people who write to UGB Arcade. We have weighed those interests against yours and consider the impact on you to be low.
Where the law obliges us to keep a record, for example for company or tax purposes, our lawful basis is compliance with a legal obligation. If we ever need your consent, we will ask for it clearly and separately.
Connection data is never combined with letters or used to build a profile of you.
We never sell personal data, never use it to target advertising and never make decisions about you by automated means alone.
Third-party services and SDKs
The website loads no third-party SDKs, scripts, web fonts, video players, maps or social media buttons.
Cloudflare, Inc. hosts the website and processes connection data as our processor. Its privacy policy is published at cloudflare.com/privacypolicy.
Postal services carry letters to and from us under their own terms and conditions.
We may share information with accountants, lawyers or other professional advisers when running the company requires it, and with public bodies where the law demands it.
Each future app policy will name the SDKs included in that game's build and link to each provider's own privacy information.
Data retention and deletion
Cloudflare holds connection logs for a short period under its own retention rules. We do not export or copy those logs.
We keep letters and our replies for 24 months after a matter closes. After that, paper is shredded and any scanned copy is deleted.
Correspondence that becomes part of statutory company records is kept for as long as UK law requires, usually six years after the end of the financial year concerned.
Information needed to establish, exercise or defend a legal claim is held only while that need lasts.
You may ask us to delete your letters sooner. We will agree unless a legal duty requires us to keep them, and if so we will explain which duty applies.
Children
The website is meant for a general audience and is not directed at children under 13.
We do not knowingly collect personal data from children, either on the website or by post.
A parent or guardian who believes a child has sent us personal information can write to us, and we will delete it promptly.
Each future app policy will state the age group its game is made for and explain how the game meets the rules for that audience.
Permissions
The website requests no device permissions.
Browsing ugb-arcade.fyi never prompts for your camera, microphone, location, contacts, storage, motion sensors or notifications, and the pages contain no scripts.
When an Android game is released, its separate policy will list each permission found in the inspected build and say why the game needs it.
Your rights
Under the UK GDPR and the Data Protection Act 2018 you can ask us for a copy of your personal data and for information about how we use it.
You can also ask us to correct inaccurate data, to erase it, to restrict our use of it, to object to processing based on legitimate interests and, where the right applies, to receive data you gave us in a portable format.
Where we rely on consent, you may withdraw it at any time, without affecting anything done before you withdrew.
Send your request by post to our registered office as recorded at Companies House. We aim to answer within one month. If a request is complex we may take up to two further months, and we will tell you before the first month ends.
Before releasing or changing data, we may ask for information that confirms who you are. Exercising your rights is normally free of charge.
If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113. We would appreciate the chance to put things right first.
International transfers
UGB Arcade operates from the United Kingdom, and we keep letters in the United Kingdom.
Cloudflare's network spans many countries, so connection data may be processed outside the UK, including in the United States.
Those transfers rely on Cloudflare's data processing addendum, which includes the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or on another safeguard recognised by UK law.
Changes to this policy
We review this policy whenever the website changes, before each game release and when data protection law changes.
The effective date and version number at the top of the page tell you which edition you are reading.
If a change significantly affects how we use personal data, we will explain it clearly on this page.
Contact us
Questions about this policy and requests about your personal data can be sent by post to UGLY BOY LTD at the registered office shown in its Companies House record.
Please write "Privacy" on the envelope and mention ugb-arcade.fyi so the letter reaches the right person without delay.