What we do with your data.
What we collect, why, who handles it and how you stay in control. It describes what Moctardiallo actually does.
Last updated: 8 October 2026
Short version: you can look around without an account or giving any details. To run the games you log in with a free account. What you give us when you sign up or write to us is used only to run your account and answer you. We show no ads, use no analytics or tracking tools, never sell data and never ask for payment or card details.
Who is responsible
The data controller for this website is (company number ), .
“We” and “us” mean the operator of Moctardiallo (moctardiallo.com). For anything about your data, use the contact form and choose “Privacy question”, or email .
What we collect
1. When you create an account
- With email: first and last name, a screen name, email address and a password. Only a scrambled version of the password (a hash) is stored, never the password itself.
- With Google: your name, verified email address and Google account ID, which Google passes to us after you approve the sign-in. We then ask you for a screen name and your date of birth.
- Date of birth: checked once at sign-up to confirm you are 18 or over. It is not stored; we keep only the fact that your age was confirmed.
- Account records: when you joined, when you last logged in, how you signed up (email or Google), and a failed-login counter that locks the account for 15 minutes after five wrong passwords.
2. When you write to us
The contact form collects your name, email address, topic, your message and, if you came from a game page, that game’s name. Please keep passwords and sensitive information out of messages.
3. When you reset a password
We create a single-use link valid for 60 minutes. Until it is used or expires we keep only a scrambled version of its secret code.
4. Technical and security data
- Abuse limits: to curb spam and password guessing, the server keeps short-lived counters tied to a hashed form of your IP address. They expire within a day.
- Mail results: a technical log of whether each email was sent or failed, with any error text from the mail server. It does not contain your message.
- Server logs: as with most sites, our hosting provider’s web server may record standard technical details such as IP address, browser type and requested pages, for security and troubleshooting.
5. What we leave out
No payment or card details (nothing here is for sale), no advertising or analytics tools, and no profiles built about you.
Why we use it, and on what basis
| Purpose | Data | Basis |
|---|---|---|
| Create and run your account, keep you logged in | Account details, session cookie | Performing our agreement with you |
| Check you are 18 or over | Date of birth (not stored) | Legal obligation and legitimate interest in keeping minors out |
| Answer your messages and requests | Contact form data | Legitimate interest in replying, and your request |
| Send a password-reset email | Email address, reset link | Performing our agreement with you |
| Prevent spam, abuse and account guessing | Hashed IP counters, failed-login counter | Legitimate interest in security |
Where it lives and who else sees it
- Our server. Account details sit on our web server in protected files that cannot be opened from the web. There is no database.
- Email delivery. Contact messages and password-reset emails are sent through our email provider, Brevo (SMTP relay), which handles them for us, and land in our support mailbox. We keep messages only as long as needed to deal with your request and any follow-up.
- Google. Only if you pick “Continue with Google”. Google’s sign-in code loads only on the log-in and sign-up pages, and Google handles sign-in under its own Privacy Policy.
- Hosting. Our host stores the site and its server logs.
- The games. Games are served from our own domain (moctardiallo.com) and load inside our pages. A game may keep its own settings or progress in your browser’s storage on your device; we do not use that to identify you.
Some providers may process data outside your country. We do not sell personal data or share it for advertising, and may disclose data where the law requires.
How long we keep it
- Account: until you delete it in My account (immediate) or ask us to.
- Messages: as long as needed for your request and any follow-up, then deleted.
- Reset links: up to 60 minutes, or until used.
- Abuse counters: about a day at most.
- Sessions: until you log out, or up to 30 days if you choose “Stay logged in”.
Security
Passwords are hashed, account files are kept out of reach of the web, forms are protected against cross-site requests, and repeated wrong passwords briefly lock an account. No system is perfectly secure, so please use a strong, unique password.
Your rights
Depending on where you live you may be able to ask to see the data we hold on you, correct or delete it, restrict or object to its use, receive a copy, or withdraw consent. You can delete your account yourself any time in My account. For anything else, use the contact form and choose “Privacy question”. You may also complain to your local data protection authority.
Cookies and browser storage
Only strictly necessary cookies and storage are used. See the Cookie Policy.
Children
Moctardiallo is for adults aged 18 and over and we do not knowingly collect data from anyone younger. If you think a child has made an account, tell us and we will remove it.
Changes
If our practices change we will update this page and its date.