Skip to content
sarxa.dev

Legal notice, privacy and cookies

Last updated: 2026-10-14

This document covers two websites: sarxa.dev (the Sarxa Games front page, a static site) and games.sarxa.dev (an online games application). Where data processing differs, it is described separately.

1. Owner and contact details

The websites sarxa.dev and games.sarxa.dev are owned by a private individual. sarxa.dev is the public front page of Sarxa Games and a contact channel; games.sarxa.dev is a free personal project with no advertising. No products are sold and no services are contracted through them.

2. Terms of use

Access and browsing are free. Visitors agree to use the websites lawfully and not to harm their operation or other users.

The content, design and original code of the websites are protected by intellectual property law. Total or partial reproduction without permission is forbidden, except for quotations that credit the source. Third-party trademarks and software belong to their respective owners.

The owner does not guarantee uninterrupted availability and is not liable for damage arising from outages, errors or the content of linked third-party sites.

3. Data controller

The controller of the personal data described below is Xavier Alejandro Serrano Rivera. For any privacy matter, write to [email protected].

4. Data processed on sarxa.dev

sarxa.dev has no user accounts, forms, comments or analytics, and sets no cookies. Like any web server, it technically logs the IP address, the date and the requested resource to keep the service secure and working (legitimate interest, GDPR article 6.1.f).

If you write to the contact email, your message and address are used only to reply (GDPR article 6.1.b or 6.1.f, as applicable) and kept for the length of the conversation and the time needed to deal with possible liabilities.

5. Data processed on games.sarxa.dev

games.sarxa.dev is a multiplayer games application. It processes the following data:

  • Email address: used only to identify you and send one-time login codes (passwordless sign-in) and, where relevant, invitation notices. Legal basis: your consent, given when you enter your email to sign in (GDPR article 6.1.a). You may withdraw it at any time by asking for your account to be erased.
  • Nickname and scores: shown to other players in rooms, matches and leaderboards. Legal basis: providing the game service you request (GDPR article 6.1.b).
  • Invitations: the inviter's nickname, the invitee's email address and the invitation expiry date. Legal basis: the legitimate interest in delivering the invitation another player sends you (GDPR article 6.1.f); that email is used for nothing else.
  • Technical security data: IP address and server logs, to prevent abuse and keep the service running (legitimate interest, GDPR article 6.1.f).

6. Cookies

No analytics, advertising or tracking cookies are used, and no third-party scripts. games.sarxa.dev uses only the two technical cookies below, which are strictly necessary to provide the service you request and are therefore exempt from consent (article 22.2 LSSI-CE):

  • sg_session: keeps you signed in. Lifetime: up to 30 days from sign-in. Removed when you sign out.
  • sg_guest (sent with the __Host- security prefix): identifies a guest player, with no account, so they can rejoin their room. Lifetime: 30 days.

7. Retention

  • Login codes: expire within minutes and stop working once used.
  • Sessions: expire after 30 days or when you sign out.
  • Invitations: expire after 14 days at most and are deleted afterwards.
  • Account (email, nickname and scores): kept while the account is active; deleted when you request erasure.
  • Server logs: kept for the minimum time needed for security and debugging.

8. Recipients and transfers

Data is not sold or handed to third parties for commercial purposes. Only the following providers take part, as processors:

  • OVH SAS (France): server hosting, with servers located in the European Union.
  • Cloudflare, Inc.: DNS and reverse proxy (CDN and attack protection). It processes the IP address and request metadata, and may do so outside the European Economic Area under adequate safeguards (standard contractual clauses and/or the EU-US Data Privacy Framework).
  • IONOS SE (Germany): delivery of the email that carries login codes.

9. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to [email protected] and stating the right you exercise and the email linked to your account. You will get an answer within one month. If you feel your rights have not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security, minors and changes

Connections are encrypted with HTTPS and data is stored on servers in the European Union with restricted access. The services are not aimed at children under 14; if you are under that age, you need the consent of a parent or guardian to use games.sarxa.dev.

This document may be updated to reflect legal or service changes. The date of the latest review is shown at the top of the page.

Governing law and jurisdiction: Spanish law applies; the courts competent under the applicable rules will settle any dispute.