Vacares GamesController and contact
The controller is Enrique Molina Martín, trading under the personal brand Vacares Games, in Spain. For enquiries, support and requests about your data, email contacto@vacaresgames.com.
This policy explains how Cincora processes data during Alpha, including Local, Machine and Online modes. Taking part in the test does not mean your account or statistics will be kept for a future production release.
Data on your device
Cincora stores preferences such as language, sound, vibration, reduced motion, text size and difficulty, Machine statistics, and the state needed to manage advertising and existing purchases. Online session data is used temporarily in memory. If you obtain them, your account's private code and the proof associated with a deletion request may be stored on your device.
Local data remains until it is updated or you remove it from your device. Local and Machine modes work offline, although Google services may communicate when a network is available. Clearing app data or uninstalling Cincora does not delete your account or data from the server.
Online account and matches
Online uses Google Play Games to create or retrieve a technical Cincora account. Google may authenticate its services when you open the app, before you enter Online. Cincora does not ask for your Google password or request your email address from Google for sign-in or deletion.
Your Online account and statistics are stored on the server. Data includes account and Games-link identifiers, name and avatar, technical connection data, moves, scores and results. Your opponent can see your name, avatar, dice, scores and result and, in the relevant views, your public Cincora statistics. The avatar is retrieved from its provider. There is no public directory of all players.
Public matches use automatic matchmaking. Their results, scorecards and delivery records keep statistics consistent and prevent lost or duplicate results. They are kept during Alpha for these functions unless they need to be removed when an account is deleted. Private matches use a room code: their state and result are temporary, held in memory, and do not generate public statistics. Playing a private match does not delete your account or other data already on the server.
Optional private code
When you have access to Online mode during the closed test, you can obtain it under Play online → Menu → Delete account and data → Optional private code. Keep it private if you want to use it for a future request. Obtaining, displaying, copying or verifying the code does not submit a request or delete any data.
The code is different from a room code and from the proof generated when you submit a deletion request. The client stores it per account; the server stores a verification hash, the account identifier and a date. That hash is removed when deletion is completed. A code for a deleted account cannot be used to act on a new account.
No linked recovery email is required. You can request deletion by email without reinstalling Cincora and without a code. See how to request deletion.
Advertising and purchases during Alpha
Alpha uses demo advertisements and blocks new purchases. Google's advertising components may process IP addresses, approximate location derived from them, interactions, diagnostics and identifiers according to the applicable configuration. A test advertisement does not mean that no data is processed.
Google Play Billing may query products and existing purchases without initiating a charge. Cincora does not request card details or payment credentials. Advertising privacy choices are offered through UMP where required. See Google's information about data processed by its advertising SDK.
Purposes and legal bases
- Providing the functions you request: preferences, account, matches, statistics and optional private-code management; performance of the requested service under GDPR Article 6(1)(b), limited to data needed for those functions.
- Answering general enquiries: our legitimate interest in providing support and resolving issues, Article 6(1)(f). We do not use messages for marketing.
- Handling rights and maintaining deletions: compliance with legal obligations, Article 6(1)(c). This includes proportionate verification, handling and answering requests, and keeping the minimum information needed to prevent deleted data from being restored.
- Security, diagnostics and recovery: our legitimate interest in protecting the service's integrity and availability, Article 6(1)(f), with restricted access, minimal data and limited retention.
- Advertising operations that require consent: specific consent, Article 6(1)(a). Playing, visiting this page or emailing us does not give that consent.
Specific legal obligations are addressed under Article 6(1)(c). Where a claim requires information to be retained, this is limited to what that case needs. These bases describe our processing; Google explains its own processing in its policies.
What we keep and for how long
Account and Online data. These are kept during Alpha unless a verified deletion takes place earlier. When Alpha definitively closes, participants' Online accounts and associated data will be deleted. Closure does not necessarily coincide with day 14 of the Play test. Accounts will not automatically carry over to production.
General support. We keep your email address, messages and attachments while handling the enquiry and remove emails, attachments and copies under our control within six months after it is closed.
Deletion case file. We keep the request, dates, a summary of verification, the decision and the reply while handling the case and for up to six months after the case is closed. This does not justify keeping readable codes or proofs for six months.
Codes and proofs received in readable form. These are used only to verify or complete the request. We remove readable codes and proofs from working copies, messages, attachments, exports and trash folders under our control within a maximum of seven days after they are no longer needed to verify, complete or resume the operation. This period does not wait for the case to close. Retained backups are handled separately as explained below. The copy you keep remains under your control.
Record that prevents deleted accounts from being restored. We keep old identifiers, references, dates, statuses and minimum deletion checks while a copy could reintroduce that data or a pending operation needs it. The record does not include readable codes or support conversations. It is identifiable information, not anonymous data. It is reviewed monthly and safely removed when that need ends, preserving any dependencies that are still necessary. It is not used to reconstruct your profile or statistics.
Technical logs. During the closed test, server diagnostic logs under our control will have a maximum retention period of fourteen days, except for the minimum information needed for a specific incident or claim, kept separately and reviewed until it is resolved. This does not include deletion records or match data. Diagnostics on your device follow their own update or deletion cycle; if you send them to us, they are handled as part of your enquiry.
General backups. The approved plan provides for daily backups to support service recovery. Locally, it provides for keeping points from the latest three dates with a complete backup and the latest Monday; remotely, retention categories are three days for daily backups, one week for weekly backups and one month for monthly backups. Points needed for a pending recovery may remain protected until it is resolved. These rules do not mean that all data disappears after a month. Backups are not used as active accounts, and current deletions must be applied before their data is returned to service.
Where a specific legal obligation or claim requires additional retention, the content, access and duration are limited to that purpose. Information that must be legally blocked is kept separate from ordinary use.
What happens when an account is deleted
The Cincora account, sign-in link, profile and its own statistics are deleted, together with the identifiable results and associated delivery records that need to be removed, and the hashes of the private code and request proof. Other players' own cumulative statistics are preserved, without retaining the identifiable content of a deleted match for that purpose. Only the case file and minimum records described above remain to handle, demonstrate and maintain deletion, alongside retained backups with their safeguards.
This does not delete your Google account, its orders or data processed by Google's own services, or files stored locally on your device. A later sign-in that you choose to make with Games may create a new, empty Cincora account; it does not recover the deleted data. Request account and data deletion.
Access and service providers
Enrique Molina Martín will initially manage case files and decide whether verification is sufficient. Technical access is limited to authorised people and processes that need it, under confidentiality and access controls. Case files and deletion records are not public or accessible to other players.
Website and game hosting and domain email use Arsys Internet S.L.U.; the VPS is located in Spain. Remote backups use the Arsys/Acronis service in Germany. Arsys acts as a processor when handling data on our behalf, under its service and data-protection terms.
Google is involved through Games, Play and advertising components, and may process data outside the European Economic Area. See its privacy policy and international transfer safeguards. We do not state that all processing by these services takes place exclusively in the EU.
Your rights
You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw consent for processing that relies on it. Email contacto@vacaresgames.com. Exercising rights is free, subject to the exceptions provided by law; we may need proportionate information to verify your connection to the data.
We respond without undue delay and normally within one month of receipt. If the complexity or number of requests allows an extension, we will tell you within the first month and explain why; the extension may be up to two additional months. The response period is not a promise of instant deletion.
You may complain to the Spanish Data Protection Agency. Cincora does not make solely automated decisions that have legal or similarly significant effects on you.