Skip to content Skip to footer

Privacy policy

Close

Last updated: 19/02/2026

1. Data Controller

In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), as well as applicable international regulations, users are hereby informed that the controller of personal data is:

ONLYHEROGAMES, S.L.

Tax ID: B-70998315

Registered office: Avenida Ramón y Cajal No. 17, Edificio Zea, Office B1, 29601
Marbella (Málaga), Spain

Website: http://www.onlyherogames.com

Data protection contact email: Hi@onlyherogames.com

ONLYHEROGAMES, S.L. (hereinafter, the “Controller”) is the owner of the website http://www.onlyherogames.com (hereinafter, the “Website”).

2. Scope of application

This Privacy Policy applies to all personal data provided by the user to the Controller through the Website.

“User” shall mean any natural person who accesses, browses, or uses the Website, as well as those who register or provide their data to receive information or to receive communications to participate in early access, alpha, or beta phases of the video game.

Access to and use of the Website and acceptance of the Terms and Conditions imply acceptance of this Privacy Policy.

3. Personal data collected

The Controller may collect the following categories of personal data:

  • Identifying data: name or alias.
  • Contact data: email address.
  • Usage and participation data: information related to registration on waiting lists, participation in alpha, beta, or early access phases, and submission of voluntary feedback.
  • Technical and browsing data: IP address, browser type, operating system, Internet service provider, pages visited, date and time of access.

No specially protected data as defined in Article 9 of the GDPR are collected.

4. Purposes of processing

The User’s personal data shall be processed for the following purposes:

  1. Management of informational communications: sending information related to the video games (news, updates, beta phases, releases, patches, official announcements, events, or other project-related communications).
  2. Management of early access, alpha, and beta: sending invitations, access keys, technical instructions, surveys, and necessary operational communications.
  3. Commercial and promotional communications: sending commercial communications related to products or services of ONLYHEROGAMES, S.L. or, where applicable, third-party collaborators, provided that the User has given express consent.
  4. Technical and security management of the Website: analysis of Website use, maintenance, improvement of the user experience, and detection of potential technical or security incidents.

5. Legal basis for processing

The processing of personal data is based on the following legal grounds:

  • User consent (Art. 6.1.a GDPR): for sending informational and commercial communications, as well as for the use of non-essential cookies.
  • Legitimate interest of the Controller (Art. 6.1.f GDPR): to ensure the proper functioning, security, and improvement of the Website.
  • Compliance with legal obligations (Art. 6.1.c GDPR): where processing is necessary to comply with applicable legal obligations.

The User may withdraw their consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

6. Data retention

Personal data shall be retained:

  • While there is an active relationship with the User.
  • While the User does not withdraw consent or object to the processing.
  • For a maximum period of three (3) years from the User’s last interaction with ONLYHEROGAMES, S.L., unless applicable regulations require a longer
    retention period.

Once these periods have elapsed, the data shall be deleted or duly blocked, remaining available only to competent authorities for legally established periods.

7. Data recipients

Personal data shall not be disclosed to third parties, except where required by law.

However, certain service providers acting as data processors may have access to personal data, such as:

  • Web hosting and server providers.
  • Email service providers and other digital communication platforms.
  • Analytics and technical support service providers.

In all cases, such providers shall process the data in accordance with data
processing agreements and applicable data protection regulations.

8. International data transfers

As a general rule, personal data are processed within the European Economic Area (EEA).

If, exceptionally, international transfers of data outside the EEA take place, such transfers shall be carried out in accordance with the appropriate safeguards provided for in the GDPR, such as Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms.

9. User rights

The User may exercise the following rights at any time:

  • Access to their personal data.
  • Rectification of inaccurate data.
  • Erasure of their data when they are no longer necessary.
  • Objection to processing.
  • Restriction of processing.
  • Data portability.
  • Not to be subject to automated decision-making.

The User also has the right to withdraw their consent at any time.

These rights may be exercised by sending a written request to Hi@onlyherogames.com, indicating “Data Protection” in the subject line and
attaching a copy of a document proving identity.

The User also has the right to lodge a complaint with the competent supervisory authority, in particular the Spanish Data Protection Agency (www.aepd.es) or the supervisory authority in their country of residence.

10. Users outside the European Union

If the User resides outside the European Union, their personal data may be processed in accordance with European regulations (GDPR) as the standard of protection, without prejudice to any additional rights that may apply under local legislation (e.g., CCPA/CPRA for residents of California).

ONLYHEROGAMES, S.L. adopts reasonable measures to ensure an adequate level of protection of personal data regardless of the country from which the User accesses the Website.

11. Data security

The Controller adopts the necessary technical and organizational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorized processing, or access, taking into account the state of the art, the nature of the data,
and the existing risks.

12. Use of cookies

The Website uses its own and third-party cookies. The User may obtain detailed
information about the use of cookies in the Cookies Policy available on the Website.

13. Amendment of the Privacy Policy

ONLYHEROGAMES, S.L. reserves the right to amend this Privacy Policy to adapt it to legislative or case-law developments.

Where changes are significant, the User shall be duly informed and, where legally required, their consent shall be requested again.