Privacy policy

Lascuarenta.es (The Forty) offers traditional Spanish-deck card games. The data controller is Adrián Muñoz (Lascuarenta.es); for any question about your personal data you can write to privacidad@lascuarenta.es.

Account data: email address, public alias, avatar initials and, if you sign in with Google, the identifier returned by that provider.

Game data: games played, results, rankings, virtual coins (Sotas), cosmetics, friendships and invitations.

Table messages: the in-game chat, which is kept for moderation for a limited period.

Minimal technical data: error and security logs needed to keep the service running.

We do not process special categories of data and do not allow registration by people under 14 (the minimum age of consent in Spain).

Performance of a contract (GDPR art. 6.1.b): creating your account, matching you at tables, saving progress, and managing the PRO plan and Sotas purchases.

Legitimate interest (GDPR art. 6.1.f): security, prevention of cheating and abuse, chat moderation and service maintenance.

Consent (GDPR art. 6.1.a): usage measurement and advertising, which are only activated if you accept them in the cookie notice, plus optional communications.

Legal obligation (GDPR art. 6.1.c): keeping payment records when a transaction takes place.

Account and game data are kept while the account is active. If you delete your account, the data is deleted or anonymised except for what we must keep for legal obligations or to prove sanctions and fraud.

Chat messages and moderation logs are kept for a limited period proportionate to their purpose.

We use providers acting as data processors to host the application, the database, authentication, usage measurement and advertising, under contracts compliant with GDPR article 28.

Paddle.com Market Limited, our authorised reseller (Merchant of Record), receives the data needed to sell the product, take payment, comply with tax obligations and issue invoices. Paddle processes that data as its own controller under its own privacy policy.

We may also share data with professional advisers (legal or accounting) and with competent authorities where the law requires it.

We do not sell personal data. If any provider processes data outside the European Economic Area, the safeguards set out in Chapter V of the GDPR apply (standard contractual clauses or adequacy decisions).

You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.

From this very page you can download a copy of your data and delete your account without intermediaries. You can also write to us at privacidad@lascuarenta.es (The Forty).

If you believe we have not properly handled your request, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Sotas are a virtual currency with no monetary value and cannot be exchanged for money. There is no betting, no cash prizes and no real-money gambling: this platform is not a gambling operator and is not subject to gambling regulations.