Privacy Policy

Last updated: 25 September 2026

This Privacy Policy explains how Maksim Paleyeu, trading as Relax Games ("we", "us") handles personal data when you visit our website relaxgames.studio (the "Site") or email us. It follows the EU General Data Protection Regulation (GDPR) and Spain's data protection law (Organic Law 3/2018, LOPDGDD).

This policy covers the Site only. Our game Twist & Merge has its own App Privacy Policy.

1. Data Controller

The controller responsible for your personal data is:

  • Name: Maksim Paleyeu
  • Trading as: Relax Games
  • Legal form: self-employed sole trader (autónomo)
  • Tax ID (NIF): Z2207759V
  • Address: Calle San Ignacio de Loyola 27, 46008 Valencia (Valencia), Spain
  • Email: hello@relaxgames.studio

For anything about your data, write to hello@relaxgames.studio.

2. Information We Collect

2.1 When you contact us

If you use the contact form, we receive your name, your email address, the subject and your message, and a record that you ticked the box confirming you have read this policy. If you email us directly, we receive your email address, your message and anything else you choose to include.

You do not have to contact us. If you use the form, all its fields are needed so that we can reply; the form cannot be sent without them.

2.2 Spam protection on the contact form

The form is protected by hCaptcha. hCaptcha loads only after you start filling in the form, so visitors who only read the Site are never sent to it. It processes your IP address, information about your browser and device, and how you interact with the page and the check (for example mouse movements, scrolling, key presses and taps), to tell people from automated bots.

2.3 When you visit the Site

We do not use analytics, advertising or tracking on the Site. Like any website, though, the Site cannot be delivered without some technical data: our hosting provider, Cloudflare, processes your IP address, the pages you request, the time of the request and your browser's user agent, to deliver the pages and to protect the Site from attacks and abuse.

Purpose Data Legal basis
Reading and replying to your message Name, email address, subject, message Taking the steps you asked for (GDPR Art. 6(1)(b)); where your message is not about a contract with us, our legitimate interest in answering the messages we receive (Art. 6(1)(f))
Protecting the form from spam and abuse IP address, browser and device data, interaction data Our legitimate interest in keeping the form usable and free of spam (Art. 6(1)(f))
Delivering the Site and keeping it secure IP address, requested pages, time, user agent Our legitimate interest in running a secure website (Art. 6(1)(f))
Keeping messages for a limited time in case of questions or claims Your messages and our replies Our legitimate interest in keeping a record of our correspondence (Art. 6(1)(f))

Where we rely on legitimate interest, we have weighed it against your rights and interests. You can object at any time (see Section 8).

4. Data Retention

  • Messages: we keep contact form messages and emails for up to 3 years after our last exchange, and then delete them. We keep them longer only if we need them for a claim, and only for as long as that requires. You can ask us to delete them sooner (see Section 8).
  • Spam protection data: hCaptcha states that it discards data collected through the check as soon as practical, and in any case within one year.
  • Hosting data: Cloudflare keeps technical logs for a limited period under its own policies.

5. Who Receives Your Data

We use these service providers, which process data for the purposes above:

  • Web3Forms delivers contact form messages to our inbox. Privacy policy: web3forms.com/privacy.
  • Our email hosting provider stores the messages in our mailbox and the emails you send us directly.
  • hCaptcha, a service of Intuition Machines, Inc. (USA), checks form submissions for spam. Privacy policy: hcaptcha.com/privacy.
  • Cloudflare, Inc. (USA) hosts the Site and protects it from attacks. Privacy policy: cloudflare.com/privacypolicy.

We do not sell your data or share it with anyone else, unless the law requires us to (for example, a court order).

6. International Data Transfers

Some of these providers process data outside the European Economic Area (EEA), including in the United States. For each transfer we rely on one of the safeguards in Chapter V of the GDPR:

  • the European Commission's adequacy decision for the EU–US Data Privacy Framework, for US providers certified under it (Cloudflare and hCaptcha state that they are); or
  • the European Commission's Standard Contractual Clauses (GDPR Art. 46(2)(c)), where they are included in the provider's terms.

You can ask us which safeguard applies to a provider, and for a copy of it, at hello@relaxgames.studio.

7. Automated Decisions

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects (GDPR Art. 22). hCaptcha automatically checks whether a form submission is likely to come from a bot. If it cannot confirm that you are human, you can still email us directly at hello@relaxgames.studio.

8. Your Rights Under GDPR

You have the right to:

  • Access the personal data we hold about you and get a copy of it (Art. 15);
  • Rectify data that is inaccurate or incomplete (Art. 16);
  • Erase your data, unless the law requires us to keep it (Art. 17);
  • Restrict how we use your data in certain cases (Art. 18);
  • Receive your data in a structured, machine-readable format (portability, Art. 20);
  • Object to processing based on our legitimate interests (Art. 21).

To use any of these rights, email hello@relaxgames.studio. It is free. We reply within one month of receiving your request. If a request is complex, or we receive many, we may extend this by up to two further months; if so, we will tell you within the first month and explain why. We may ask for information to confirm your identity.

9. Right to Lodge a Complaint

If you think we have not handled your data properly, you can complain to the Spanish data protection authority. You can also complain to the authority in the EU country where you live or work.

  • Agencia Española de Protección de Datos (AEPD)
    www.aepd.es

10. Cookies and Local Storage

We do not use tracking or advertising cookies. The Site stores one entry in your browser's local storage to remember that you closed the cookie notice. hCaptcha and Cloudflare may set strictly necessary security cookies. The details are in our Cookie Policy.

11. Children

The Site is not aimed at children. If you are under 14, please do not send us personal data without the involvement of a parent or guardian. If you think a child has sent us personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy when our Site or the law changes. We will change the "Last updated" date at the top of this page, and explain significant changes on this page.

13. Contact Us

For any question about this policy or your personal data, email hello@relaxgames.studio or write to us at the address in Section 1.