Last updated: 18 September 2026
1. Data controller
The controller of personal data processed through GAMEXITA is Daniele Tomaselli – GAMEXITA.
For privacy and data protection requests, please contact info@gamexita.com.
2. General principles
GAMEXITA processes only the data required to operate the website, games and related services, protect the infrastructure, handle user requests and, where enabled, provide advertising services.
GAMEXITA does not use the technical data described in this notice to create its own commercial profiles of users and does not sell personal data to third parties.
3. Technical browsing data and server logs
When the website is accessed, web systems may automatically record technical information such as IP address, request date and time, requested URL, user-agent, browser type, response codes and information necessary for security and operation.
Server logs are used for security, error diagnosis, abuse prevention and technical maintenance. They are rotated daily and are normally retained for approximately 14 days.
The legal basis is the controller's legitimate interest in keeping the service secure, operational and protected against abuse.
4. Technical visitor identifier
GAMEXITA stores a random identifier named gx-visitor in the browser. It is a locally generated UUID and does not contain a name, email address or other directly identifying information.
It is used only for internal functions such as counter deduplication, game ratings and prevention of duplicate votes or events. GAMEXITA does not use it for advertising, commercial profiling or cross-site tracking.
The identifier is automatically rotated after approximately 12 months. Its creation time is stored as gx-visitor-created.
5. Counters and technical events
To prevent duplicate counting, the server may temporarily store a pseudonymised version of the visitor identifier together with the game, event type and relevant period.
Technical deduplication rows are automatically deleted after 7 days. Resulting aggregate counters, which do not identify an individual visitor, may be retained for the lifetime of the service.
6. Game ratings
When a user rates a game, GAMEXITA stores the score and a pseudonymous identifier derived from the browser's technical identifier. This prevents duplicate ratings and allows a user to update a previous rating.
The rating system does not associate the vote with a name or email address. This information may be retained while the game and its rating system remain active.
7. Contact form
When the Contact form is used, GAMEXITA processes the user's name, email address, subject and message, together with technical information necessary to secure the request.
The information is used solely to receive, manage and respond to the communication. The legal basis is taking steps requested by the data subject and, depending on the nature of the request, the legitimate interest in handling communications received.
Messages are retained while needed to handle the request and, once marked as resolved, are automatically deleted after 180 days.
8. Game problem reports
Users can report game malfunctions or other problems. A report may contain the text entered by the user, the relevant game and technical information needed to handle the report.
Reports remain available while the issue is being handled and, once marked as resolved, are automatically deleted after 90 days.
9. CAPTCHA and anti-spam protection
GAMEXITA currently uses a locally operated CAPTCHA to protect forms against spam and automated abuse. The check is handled on GAMEXITA systems and does not require the CAPTCHA response to be sent to an external CAPTCHA provider.
Challenges are short-lived and are removed after verification or expiry.
10. Display preferences
The website theme preference may be stored in the browser as gx-theme. It is used only to remember the user's visual preference and remains in the browser until changed or removed by the user.
11. Accounts and multiplayer
Registration features for multiplayer games are not currently active on the public website.
When enabled, GAMEXITA plans to request only: nickname, email address, password and the user's declaration that they are at least 16 years old.
A date of birth will not ordinarily be required for registration. Passwords will not be stored in plain text and will be stored only through a suitable non-reversible cryptographic representation used for authentication.
Before public account registration is enabled, this notice will be supplemented with any further details concerning authentication, account recovery, progress, social features and applicable retention periods.
12. Advertising and Google AdSense
GAMEXITA may use Google AdSense to display advertising. When advertising services are disabled, GAMEXITA does not load the related advertising script on its pages.
When AdSense is active, Google may receive technical information such as the page URL, IP address, browser and device information and may use cookies or similar technologies in accordance with its own policies.
Where required, advertising and non-essential tracking technologies are managed through a consent management platform (CMP). Users can accept, reject or manage their choices and can later change those choices through the privacy/cookie preference controls provided on the website.
Further details are provided in the GAMEXITA Cookie Policy.
13. Hosting, email and technical providers
GAMEXITA uses infrastructure and email services provided by OVHcloud. Data required for website operation, backups and communications may therefore be processed through the provider's technical infrastructure.
The server used by GAMEXITA may be located in the United Kingdom. International transfers are managed using the safeguards provided by applicable data protection law, including adequacy decisions where available.
14. Backups
For security and business-continuity purposes GAMEXITA creates technical backups which may contain copies of data held by the systems at the time the backup is made.
CMS backups are protected by restricted access permissions and are automatically deleted when they become older than 30 days.
15. Links to external services
The website may contain links to external services such as social networks. Opening such links takes the user to services governed by their own privacy policies and terms.
16. Data recipients
Data may be processed by the controller and by technical providers required to operate the service. When third-party services such as Google AdSense are enabled, their providers may process data according to the roles and conditions described in their own policies and applicable agreements.
Data may also be disclosed to authorities where required by law or necessary to protect rights and security.
17. Data subject rights
Where provided by applicable law, data subjects may request access, rectification, erasure, restriction of processing and data portability, object to processing based on legitimate interests and withdraw previously given consent without affecting the lawfulness of processing carried out before withdrawal.
Requests can be sent to info@gamexita.com.
Data subjects also have the right to lodge a complaint with the competent data protection authority, including the Italian Data Protection Authority where applicable.
18. Automated decision-making
GAMEXITA does not itself use the data described in this notice to make automated decisions producing legal or similarly significant effects on users.
19. Changes to this Privacy Policy
This notice may be updated when services, games, technologies or legal requirements change. The date of the latest update will be shown at the top of the page.