Website privacy

Updated 25 October 2026

This notice covers lazyshoregames.com and messages sent to our contact addresses. Our games have their own privacy notices: Dart Rush and ZombieDrive. The ZombieDrive game page currently loads no online leaderboard or account sign-in service.

Who is responsible?

Website hosting and server logs

Our hosting provider is SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain. The selected hosting data centre is Frankfurt, Germany. SiteGround processes data for the hosting service under its data processing agreement.

When you visit the website, the server processes your IP address, the date and time of the request, the requested address, response status, browser and operating-system information, and the referring page if your browser sends it. This information is needed to deliver pages, operate and protect the website, and investigate technical problems. The legal basis is our legitimate interest in a functioning, secure website under Article 6(1)(f) GDPR.

SiteGround makes access-log archives available for up to 30 days. Its hosting service also provides automatic daily backups for up to 30 days, depending on the plan. Security information needed to investigate a specific incident can be kept for the duration of the investigation and any applicable legal retention requirements. See SiteGround’s access-log information.

Cookies, language selection and external content

We do not use advertising or visitor-analytics cookies on these pages. Fonts, images and our own scripts are served from this website. We load no analytics or advertising SDK and have not embedded social-media feeds or external video players. The deliberately requested leaderboard and optional account-deletion sign-in use the Google/Firebase services described below.

The German and English versions use separate page addresses. The language switch works through ordinary links and does not need a cookie or a stored browser profile.

Links to the App Store, Google Play and other external websites take you to the respective provider when you follow them. Their privacy information then applies: Apple and Google. The advertising, analytics and crash-reporting services used inside our games are described in the relevant game privacy notice.

The Dart Rush leaderboard on the website

The public all-time and weekly leaderboard loads only when you deliberately request it, for example using “Raise the curtain”, changing the ranking or following a direct leaderboard link. Your browser then contacts our public Firebase read service at Google. Google receives your IP address and technical request information. No game-account sign-in credentials are sent; viewing does not require an account.

The list displays public player names, places, scores, optional selected country flags, the Android/iPhone record platform, weekly win counts and any current winner status. The web list does not disclose email addresses, Firebase account IDs or derived player identifiers. The Dart Rush privacy notice also applies to the processing of listed players' data.

Our read service uses temporary IP-derived identifiers in memory to limit abusive requests. Counters reset when the request window changes; they are not used to create a persistent visitor profile. The web view loads no analytics or advertising SDK and stores no sign-in. Google separately processes infrastructure and log data. In the associated cloud project, the default log-bucket retention is 30 days and mandatory cloud audit-log retention is 400 days; these periods apply to the data recorded in the respective buckets.

The purpose is the leaderboard display you request and its secure operation. Our legitimate interest in technical delivery and protection is the basis under Article 6(1)(f) GDPR. The game's database and functions are located in Frankfurt, Germany. This does not rule out further processing by Google and subprocessors outside the EEA; see Firebase's privacy information and the international-processing section below.

Dart Rush account deletion through the website

Our deletion page lets you request deletion of your Dart Rush account. Only after a deliberate Google or Apple sign-in click does it load the required Firebase modules from Google's servers and open the sign-in dialog. Processing covers technical connection data, the sign-in information needed to verify the account, and the deletion request you confirm. The page loads no analytics or advertising SDK for this process.

The website's own sign-in is held in memory. To resume an interrupted deletion and check its status, the page stores a random request identifier in the tab's session storage. It is removed after confirmed completion; availability after the browser session ends depends on your browser. Google's or Apple's sign-in pages may use their own necessary cookies and storage under their privacy information.

Processing fulfils your deletion request securely and helps prevent someone else from deleting your account. Depending on the operation, Articles 6(1)(b), (c) and (f) GDPR apply. Section 25(2) TDDDG applies to storage strictly necessary for the deletion service you expressly request. The Dart Rush privacy notice explains deletion scope, completion receipts and limits. Email contact remains available for further privacy requests.

Email contact and player support

When you email us, we process your email address, name if supplied, message, attachments and correspondence. A support request may include device details, a game version, screenshots and purchase references you choose to provide. Please do not send passwords, complete payment-card details or unrelated personal information.

Our mailboxes are hosted by SiteGround. We use your information to answer the request and resolve the issue. Article 6(1)(b) GDPR applies to contractual enquiries and support; Article 6(1)(f) applies to our legitimate interest in responding to other enquiries. Providing a usable contact address and sufficient details is necessary for us to reply and help you.

We keep correspondence while needed to handle your enquiry and any follow-up. Records subject to a statutory retention duty are retained for that duty under Article 6(1)(c) GDPR. Information needed to establish, exercise or defend legal claims may be kept until the matter is resolved and relevant limitation periods have expired.

Other recipients, storage and international processing

Hosting and email providers receive the information necessary to provide their services. SiteGround may use affiliated companies and other subprocessors for hosting, maintenance and support. Processing or access outside the European Economic Area can occur. Where necessary, its data processing agreement provides the European Commission’s standard contractual clauses as safeguards. You may ask us for information or a copy of the safeguards relevant to your data. See also SiteGround’s privacy policy.

Once data is no longer required for its purpose and no retention duty or other lawful reason applies, it is deleted. Copies in backups and archives may remain until the applicable retention cycle ends. SiteGround’s data processing agreement provides for deletion of archived customer data within a maximum of 60 calendar days following a corresponding deletion instruction or the end of the relevant service, subject to its terms and applicable law.

We may disclose information if required by law or a binding request from an authority, based on Article 6(1)(c) GDPR, or where necessary to establish, exercise or defend legal claims, based on Article 6(1)(f) GDPR. We do not use website visits or contact messages for automated decisions producing legal or similarly significant effects.

Your privacy rights

Where the GDPR’s conditions apply, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. If processing relies on consent, you may withdraw it with future effect; this does not affect the lawfulness of earlier processing.

Send requests to info@lazyshoregames.com. We may need sufficient information to identify the relevant data and proportionate proof of identity. You may complain to a data protection authority, including the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

Changes to this notice

We update this notice when our website or data practices change. The date above identifies this version.