Privacy Policy
What we collect, why, where it's stored and what you can do about it.
Last updated: 12 October 2026
Who is responsible
The data controller for Brightside Club (elevadoresrb.com) is the team that runs this website. You can contact us through the contact form by choosing “Privacy request”. Email: .
What we collect
| When | What |
|---|---|
| You sign up with email | Your first and last name, screen name, email address, password (stored only as a one-way hash, never as typed), date of birth, country, whether you agreed to marketing emails, and your Bright Coins balance. |
| You continue with Google | Your name, verified email address and Google account ID, which our server verifies with Google. You then add a screen name, date of birth and country. We never receive your Google password. |
| You use your account | The date you joined, your latest log-in, and a count of failed log-in attempts (five wrong tries block log-in for 15 minutes). |
| You write to us | The name, email, subject and message you enter in the contact or support form. |
| You ask for a password reset | A one-time reset code (stored only as a hash) and its one-hour expiry. |
| Any form or log-in on the Site | A hashed version of your IP address, held briefly so we can limit repeated or abusive requests. Our web server also sees your IP address in the usual way. |
We never ask for or keep card or bank details, because nothing on the Site can be bought.
How we use it
- To create and run your account and Bright Coins balance.
- To check that you're 18 or older and keep the Site for adults.
- To keep the Site secure and prevent abuse.
- To answer your messages and send account emails such as password resets.
- To send promotional emails about bonuses, new games and milestones only if you agreed at sign-up.
Where it's stored
Your account is kept on our web server as a protected file that can't be opened from the web. We don't run a separate database. It stays until you delete your account on the account page or ask us to delete it.
Your messages sent through the contact and support forms are emailed to our support inbox via an email delivery service (an SMTP provider). The Site doesn't store a copy of the message text on the web server. If sending fails, our server logs only a technical error, with no names, emails or message text. Messages remain in our support mailbox for as long as needed to handle your request.
Your browser keeps a few small items, listed in the Cookie Policy.
Who else sees it
- Our email delivery provider, which carries the emails we send you and the messages you send us.
- Google, only if you choose “Continue with Google”. Google's own privacy policy covers what Google collects.
- Authorities or advisers where the law requires it, or to protect our rights or our users.
We don't sell personal information, and we use no advertising or analytics tools on the Site. The providers above may process information in countries other than your own.
The Games
The Games are displayed in frames on our pages. A Game may keep its own settings in your browser's storage. We add no advertising or tracking to the Games.
Your rights
Depending on where you live, you may be able to access, correct, delete or export your information, object to or restrict how it's used, withdraw consent (for example to marketing emails) and complain to your local privacy regulator. You can delete your account yourself on the account page. For anything else, contact us with the subject “Privacy request”.
Children
Brightside Club is for adults only. We don't knowingly collect information from anyone under 18. If you think a child has an account, let us know and we'll remove it.
Security
Passwords are hashed, accounts are stored in protected files, log-in attempts are limited and the Site is meant to be served over HTTPS. No system is perfectly secure, so please use a strong, unique password.
Changes
If this policy changes, we'll update this page. The date at the top shows the current version.