When you visit candyrush.it.com, we may collect the following categories of personal data:

• Usage data - IP address, browser type, operating system, pages visited, time spent on pages, and referring URLs, collected automatically via server logs and analytics tools.
• Device identifiers - cookie IDs, session tokens, and similar technical identifiers stored in your browser.
• Voluntarily submitted data - any name, email address, or other details you provide through a contact form or newsletter sign-up, where such features are present on the site.

We do not collect payment card details, government-issued ID numbers, or any special-category data as defined under applicable data protection law.

Personal data collected through this site is processed for the following purposes:

• Site operation and improvement, understanding how visitors interact with content so we can fix errors and improve usability.
• Analytics, producing aggregated, anonymised statistics about traffic patterns and popular content.
• Communications, responding to enquiries submitted via any contact form on the site.
• Legal compliance, retaining records where required by applicable law and responding to lawful requests from authorities.

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

The legal bases for processing are: legitimate interests (site analytics and security), performance of a contract or pre-contractual steps (responding to enquiries), and legal obligation where applicable.

This site uses cookies and similar technologies. Cookies are small text files stored in your browser that help the site function correctly and allow us to understand how it is used.

Types of cookies in use

• Strictly necessary cookies, required for basic site functions such as session management. These cannot be disabled without breaking core functionality.
• Analytics cookies, used to collect anonymised data about page views, session duration, and navigation paths. We use a third-party analytics service for this purpose.
• Affiliate tracking cookies, set when you click a link to a partner casino. These allow us and our partners to attribute referrals correctly. Their retention periods are governed by the respective partner's cookie policy.

You can control or delete cookies through your browser settings at any time. Disabling analytics or affiliate cookies will not prevent you from using the site, but may affect how we measure and report traffic.

We share data with third parties only in the circumstances described below.

• Analytics providers, anonymised usage data is shared with our analytics platform to generate traffic reports. Data shared in this context does not identify individual users.
• Affiliate and casino partners, when you click a referral link to a partner casino, a cookie or tracking pixel from that partner may be activated. The partner's own privacy policy governs what data they collect after you arrive on their site.
• Hosting and infrastructure providers, our hosting provider processes server log data as part of normal site operation. We use a data processing agreement with any such provider where required by law.
• Legal authorities, we will disclose personal data if required to do so by a court order, regulatory demand, or other lawful obligation.

We do not share personal data with advertisers or data brokers for marketing purposes.

Depending on your country of residence, you may have the following rights regarding your personal data:

• Access, request a copy of the personal data we hold about you.
• Rectification, ask us to correct inaccurate or incomplete data.
• Erasure, request deletion of your personal data, subject to any legal retention obligations.
• Restriction, ask us to limit processing in certain circumstances.
• Objection, object to processing based on legitimate interests.
• Data portability, receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Withdraw consent, where processing relies on consent, withdraw it at any time without affecting prior processing.

Residents of California (CCPA) may also request disclosure of the categories of personal data collected and sold, and may opt out of any sale. This site does not sell personal data as defined under the CCPA.

To exercise any of the above rights, or to raise a concern about how your data is handled, contact us by email at: privacy@candyrush.it.com. We will respond within the timeframe required by applicable law (30 days under GDPR, 45 days under CCPA).

If you are located in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

This policy was last updated in May 2026.