Privacy Policy

How we collect, use, protect and manage your data.

This Privacy Policy explains how Corb & Co OÜ (“we”, “us”, “our”) processes personal data when you use Familio Games (the “Service”), including our public website, registered-user area, game tools, payment flows, support channels and related features.

1. Data Controller

Corb & Co OÜ
Registry code: 17324793
Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia
Email: contact@familiogames.com

2. Personal Data We Process

  • Account data: email address, display name where provided, country/region, language, account preferences and account status.
  • Authentication and security data: password hashes, login/session information, timestamps, security events and related technical information. We do not store passwords in plain text.
  • Usage and technical data: pages viewed, features used, device/browser information, IP address, timestamps and diagnostic information.
  • Support data: messages and information you send to us when requesting help or contacting support.
  • Billing and subscription data: plan, subscription status, transaction references, invoice-related data and payment identifiers received from our payment processor. We do not store full card numbers.
  • User-created content: projects, questions, answers, team names, game content and files or assets you upload.
  • Consent preferences: analytics and marketing choices and the time those choices were last updated.

3. Purposes and Legal Bases

Purpose Typical data Legal basis
Provide accounts and the Service Account, authentication, content and usage data Performance of a contract
Process purchases and subscriptions Billing, subscription and transaction data Performance of a contract; legal obligations
Security, fraud prevention and abuse prevention Authentication, IP, technical and security data Legitimate interests; legal obligations where applicable
Customer support and troubleshooting Account, support and technical data Performance of a contract; legitimate interests
Service improvement and technical administration Usage and technical data Legitimate interests, subject to your rights
Optional analytics Analytics identifiers and usage information Consent where required
Optional marketing-related measurement/personalisation Advertising-related consent signals and identifiers where applicable Consent
Accounting, tax and legal compliance Transaction, invoice and business records Legal obligation

4. Required and Optional Information

Some information is necessary to provide a requested part of the Service. For example, required account information is needed to create and maintain an account, and billing/payment information is needed to purchase a paid product or subscription. If required information is not provided, we may be unable to create the account, process the transaction or provide the requested feature. Information presented as optional does not have to be provided.

5. Cookies, Local Storage and Similar Technologies

Familio Games uses cookies, browser storage and similar technologies for essential functionality, security, authentication, consent management and, where you choose to allow them, analytics and marketing-related measurement.

Optional analytics and marketing storage is denied by default. You can accept all optional technologies, reject them, or manage analytics and marketing separately. You can later change or withdraw those choices through Cookie Settings in the site footer or, when logged in, through the user interface.

Technology Provider Purpose Category Duration Third-party access
familio_cookie_consent (localStorage) Familio Games Stores your analytics/marketing choices and the time they were updated Necessary / consent management No automatic expiry in the current implementation; remains until changed or browser/site data is cleared No
Session/authentication technologies Familio Games Login, security, session continuity and core application operation Necessary For the session or as required by the relevant account/session configuration No, except service providers acting on our behalf where technically necessary
_ga Google Analytics Distinguishes users for analytics Analytics Default: up to 2 years, subject to browser limits and Google configuration Google
_ga_<container-id> Google Analytics Maintains session state for analytics Analytics Default: up to 2 years, subject to browser limits and Google configuration Google
Payment/security technologies used during payment flows Stripe Payment processing, fraud prevention and payment security Necessary for payment where applicable Determined by Stripe for the relevant payment technology Stripe

Google Analytics cookies are only permitted through our consent settings when analytics consent is granted. Google’s tag technology can transmit limited consent-status or cookieless measurement signals even when analytics storage is denied, depending on Google’s Consent Mode behaviour and configuration; in that state, our configuration does not grant permission to store Google Analytics identifier cookies.

6. Google Analytics and Google Consent Mode

We use Google Analytics and Google Consent Mode v2. Our consent configuration sets analytics_storage, ad_storage, ad_user_data and ad_personalization to denied by default. Functionality and security storage required for operation of the Service remain enabled.

If you grant analytics consent, Google Analytics may process information about your use of the website, including session statistics, approximate geolocation and browser/device information, to provide us with aggregated analytics. If you grant marketing consent, advertising-related consent signals may be enabled where relevant.

7. Payments and Service Providers

We use third-party providers where necessary to operate the Service. Categories of recipients may include hosting/infrastructure providers, email-delivery providers, analytics providers, payment processors, professional advisers and public authorities where disclosure is legally required.

Payments and subscription billing are handled by Stripe. Stripe may collect and process payment details and other personal data under its own privacy terms and legal obligations. Familio Games does not store full payment-card numbers.

8. International Transfers

Corb & Co OÜ is based in Estonia. Some service providers, including Google and Stripe, may process data outside Estonia or the EEA. Where a transfer to a third country requires safeguards under applicable law, the relevant transfer may rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism used by the provider and permitted by applicable law.

9. Data Retention

  • Account and user-created data: generally retained while your account is active and thereafter only for as long as reasonably necessary for deletion processing, security, backups, disputes or legal obligations.
  • Support and security records: retained for as long as reasonably necessary to handle the request, protect the Service and establish or defend legal claims.
  • Accounting and transaction records: retained where required by Estonian law; accounting source documents and relevant business records are generally preserved for seven years from the end of the relevant financial year.
  • Consent preference: retained in your browser until changed or cleared, because the current local-storage implementation has no automatic expiry.
  • Analytics cookies: default Google Analytics cookie lifetime is up to two years, subject to browser limits, consent and any settings applied by Google or us.

10. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet service or storage system can be guaranteed to be completely secure. You are responsible for keeping your login credentials and devices secure.

11. Automated Decision-Making

Familio Games does not currently use personal data to make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

12. Your Rights

Subject to applicable law, you may have the right to:

  • access personal data we process about you;
  • correct inaccurate or incomplete data;
  • request deletion of data in applicable circumstances;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive or transfer certain data in a portable format where applicable;
  • withdraw consent at any time where processing is based on consent;
  • lodge a complaint with a competent supervisory authority.

To exercise your rights, email contact@familiogames.com. We may need to verify your identity before acting on a request.

13. Supervisory Authority

You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): Tatari 39, 10134 Tallinn, Estonia; email info@aki.ee. You may also have the right to complain to another competent supervisory authority in your country of residence or work.

14. Children

The Service is not intended for children under 13 to independently create and manage their own accounts. We do not knowingly collect personal data directly from children under 13 for account purposes. If you believe a child has provided personal data to us inappropriately, contact us so we can take appropriate action.

Familio Games may be used by adults, teachers or organisations in settings involving children. Users who enter personal data relating to other people are responsible for ensuring they have a lawful basis to do so and for using the Service appropriately.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our processing activities, legal requirements or third-party services. The current version is published on this page.

16. Contact

Corb & Co OÜ
Registry code: 17324793
Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551
Estonia
Email: contact@familiogames.com

Last updated: 2026-09-11