Updated 26 October 2026
1. Who we are
Silica24 runs the website silica24.com and is the data controller for the personal data described here. For anything privacy-related, email [email protected] or use our contact form and choose "My data and privacy".
2. What we collect
| Information | When | Why |
|---|---|---|
| Username and email address | When you sign up | To create and run your account |
| Password, stored only as a one-way hash | Email sign-up | So you can log in securely |
| Google account ID and verified email | If you continue with Google | To link Google log-in to your account |
| Coins, XP, level, daily top-up time, recently played games, join and last log-in dates | While you use your account | To provide account features |
| Wrong-password count and temporary lock time | When a log-in fails | To protect your account |
| Name, email, topic and message | When you use the contact or Player Care form | To answer you |
| Form record (date, form, outcome, email, partly masked IP address) | Each time a form is sent | Security, abuse prevention and support |
| Age confirmation and cookie choice | Kept on your own device | So we don't ask every time |
We never request or keep payment details, and passwords never appear in any record.
3. Legal bases
- Contract: running your account once you sign up.
- Legitimate interests: keeping the Service secure, stopping misuse, replying to messages and improving the site.
- Legal obligation: where the law requires us to keep or share information.
- Consent: for optional cookies (we use none at present).
4. How we keep it safe
Accounts are stored on our own web server in a private area that can't be reached from the internet. Your details are never published on the site or kept in your browser; pages only ask the server for them after you log in.
- Every page and form uses an encrypted HTTPS connection.
- Passwords are stored only as strong one-way hashes that nobody can read, us included.
- Log-ins use a secure, HTTP-only session cookie that page scripts can't access.
- Five wrong passwords lock an account for 15 minutes.
- Forms are processed on our server with spam filtering, and records sit in restricted files.
5. Who we share it with
We don't sell your data or use it for advertising. We rely on a small number of providers:
- Our hosting provider, which runs the server the site and your account live on.
- Brevo, which delivers contact and Player Care messages to our inbox.
- Google, only if you choose to log in with Google.
Where a provider handles data outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
6. How long we keep it
- Account data: until you delete your account, or after 24 months without a log-in.
- Messages: up to 24 months after the conversation ends.
- Form records: up to 12 months.
Deleting your account from the dashboard removes your account file from our server immediately.
7. Your rights
Under UK data protection law you can ask to see, correct, delete, restrict or move your data, object to how we use it, and withdraw consent. Contact us and we'll respond within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113, though we'd welcome the chance to help first.
8. Under 18s
The Service is for adults aged 18 and over only. We don't knowingly collect data from anyone younger. If you think a child has an account, let us know and we'll delete it.
9. Changes
If the way we handle data changes, we'll update this policy and the date at the top.