Privacy Policy

Last updated: September 1, 2026

Quick Summary

Wave-rider.io collects minimal personal data to operate the site and serve ads. We do not sell your personal information for monetary compensation. You may have rights to access, correct, or delete your personal data, depending on applicable law. This policy applies to all visitors regardless of location, including the EU, US, Brazil, Canada, and other jurisdictions.

1. Who We Are

Wave-rider.io is an independently operated free online gaming website, maintained by a small team. We act as the data controller for personal data collected through this site.

For any privacy-related inquiries, please contact us at [email protected].

2. Who This Platform Is For

Wave-rider.io is intended for users who are 13 years of age or older, or the applicable minimum age required under the laws of their country of residence, whichever is higher.

We do not direct our platform at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, please do not use this platform.

If we become aware that we have inadvertently collected personal information from a user under 13, we will promptly delete it. Parents or guardians who believe their child has submitted personal information should contact us immediately.

Note on jurisdiction-specific age requirements: In some countries (e.g., EU member states), the applicable digital age of consent varies by jurisdiction and may be higher than 13. Users below the applicable minimum age in their country must obtain parental or guardian consent before using this platform.

3. What Data We Collect and Why

All features on this platform are available without registration. We do not request personal data such as your name or email unless you contact us directly.

3.1 Data You Provide Directly

If you contact us directly (e.g., via email or contact form), we may collect:

Name
Email address
Any other information you choose to include in your message

3.2 Data Collected Automatically

Data Type	Purpose	Legal Basis
Strictly necessary cookies / session IDs	Core platform functionality and security	Legitimate interest
Device type, OS, browser type	Platform compatibility and performance	Legitimate interest
IP address	Security, fraud prevention, geographic region detection	Legitimate interest
Pages visited, session duration, referrer	Traffic analytics and platform improvement	Consent / legitimate interest, where applicable
Advertising cookies	Ad delivery and measurement	Consent, where required
Analytics cookies	Traffic measurement and platform improvement	Consent, where required

4. Legal Bases for Processing (GDPR — EU / UK / EEA)

For users in the European Union, United Kingdom, and European Economic Area, we process personal data only where we have a lawful basis:

Legitimate interests — platform security, fraud prevention, and operation of the website
Consent — personalized advertising and non-essential analytics cookies, where required by applicable law
Legal obligation — compliance with applicable law

You have the right to object to processing based on legitimate interests. Contact us at [email protected] to exercise this right.

5. Cookies and Tracking Technologies

Like most websites, we use cookies — small text files stored on your device. Types of cookies we use:

Type	Purpose	Consent Required?
Strictly necessary	Core website functionality, security, navigation	No
Analytics	Understanding how visitors use the site (e.g., Google Analytics)	Yes
Advertising (non-personalized)	Ads based on page context, not user profile	Consent may be required depending on applicable law and the technologies used.
Advertising (personalized)	Ads tailored to your interests via ad network cookies	Yes
Third-party game cookies	May be set by embedded game providers	Depends on the provider and applicable law

Where required by applicable law, we obtain consent before placing non-essential cookies or using similar tracking technologies.

Managing Cookies in Your Browser

Chrome: Settings → Privacy and Security → Cookies
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy
Edge: Settings → Cookies and site permissions

Ad Preference Opt-Out

US: https://optout.aboutads.info/ (DAA)
EU: https://www.youronlinechoices.eu/ (EDAA)
Global: https://optout.networkadvertising.org/ (NAI)
Google Ads Settings: https://adssettings.google.com/

6. Advertising & Third-Party Ad Partners

Wave-rider.io displays advertisements to support the free platform. Ads may be contextual or, where you have given consent, personalized. We do not sell your personal data for monetary compensation.

Google, as one of our advertising partners, may use cookies to serve ads based on your prior visits to this and other websites. You can learn more about how Google uses data at policies.google.com/technologies/partner-sites.

We do not knowingly direct personalized or interest-based advertising to children under 13.

7. Third-Party Games

Some games on this platform may be provided or hosted by third-party developers or distribution platforms. Embedded third-party games may set their own cookies or tracking technologies independently of this site.

We encourage users to review the privacy policies of any third-party game provider before interacting with their content.

8. How We Share Your Data

We share data only in these limited circumstances:

Service providers — companies that help us operate the platform (hosting, analytics) under appropriate contractual obligations
Advertising partners — technical identifiers and similar information for advertising delivery, measurement, fraud prevention, and related purposes, subject to applicable law and your privacy choices.
Legal requirements — where required by law, court order, or governmental authority
Aggregated / de-identified data — non-identifiable statistics shared for reporting or research purposes
We never directly sell or rent your personal data to third parties for their own marketing.

9. Data Retention

Data Type	Retention Period
Contact / inquiry data (emails, forms)	Up to 2 years from last contact
Server / access logs (IP, browser data)	Up to 12 months
Analytics data (Google Analytics)	For the retention period configured in our analytics services
Advertising cookies	Per each partner's policy (typically 30–365 days)
Legal compliance data	As required by applicable law

After the applicable retention period, data will be deleted or anonymized.

10. Data Security & International Transfers

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including HTTPS encryption for all data transmission.

Some third-party service providers and advertising partners may be based in or process information in countries outside your country of residence, including the United States. Where required by applicable law, we take appropriate measures to protect personal data when it is transferred internationally.

We do not engage in automated decision-making that produces legal or similarly significant effects on users.

11. Your Privacy Rights — EU / EEA / UK (GDPR)

Right	What It Means
Right of access	Request a copy of the personal data we hold about you
Right to rectification	Ask us to correct inaccurate or incomplete data
Right to erasure	Ask us to delete your data ("right to be forgotten")
Right to restriction	Ask us to limit how we process your data
Right to data portability	Receive your data in a structured, machine-readable format
Right to object	Object to processing based on legitimate interests or direct marketing
Right to withdraw consent	Withdraw your consent for processing based on consent, such as personalized advertising, at any time, without affecting the lawfulness of prior processing.
Right re: automated decisions	Not be subject to decisions made solely by automated processing

To exercise any right, contact us at [email protected]. We will respond within the timeframe required by applicable law. EEA residents may also lodge a complaint at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk/make-a-complaint.

12. Your Privacy Rights — United States

California Residents (CCPA / CPRA)

Right to Know — categories and specific pieces of personal information collected in the past 12 months
Right to Delete — request deletion of personal information, subject to certain exceptions
Right to Correct — request correction of inaccurate personal information
Right to Opt-Out — opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
Right to Limit — Where applicable, California residents may have the right to limit certain uses of sensitive personal information. We do not knowingly collect sensitive personal information as defined by applicable California law.
Non-Discrimination — we will not discriminate against you for exercising your rights

We do not knowingly sell or share personal information of California residents under 16 years of age.

Where applicable, we may extend the response period as permitted by law.

Category	Collected?	Shared with Third Parties?
Identifiers (IP address, cookie IDs)	Yes	Yes (ad partners)
Internet / network activity	Yes	Yes (ad/analytics partners)
Contact information (name, email)	Only if provided by user	No
Geolocation (general, via IP)	Yes	Yes (ad partners)
Sensitive personal information	No	No
Financial data	No	No

Other US State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights. Please contact us at [email protected] to exercise them.

13. Children’s Privacy (United States)

COPPA Notice

Wave-rider.io is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

Our approach to children’s privacy includes:

Not knowingly collecting personal information from children under 13
Not directing the platform at children under 13
Promptly deleting personal information if we become aware that it was collected from a child under 13

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us at [email protected] and we will promptly delete it.

14. Other Jurisdictions

Depending on your location, you may have additional privacy rights under applicable local laws. These may include rights to access, correct, delete, restrict, object to, or otherwise control the processing of your personal information.

To exercise rights in any jurisdiction, contact us at [email protected].

15. Third-Party Links & External Sites

Our platform may contain links to external websites. Once you leave this site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of third-party sites. We recommend reviewing the privacy policy of any external site you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do:

We will update the "Last updated" date at the top of this page
For material changes, we will provide reasonable notice where appropriate

We encourage you to review this Privacy Policy periodically for any changes.

17. Contact Us

Data Controller Contact

Website: Wave-rider.io
Email: [email protected]

We will respond to privacy requests within the timeframe required by applicable law. EEA/UK residents also have the right to contact your national supervisory authority.

This Privacy Policy is intended to explain how Wave-rider.io collects, uses, and protects information and may be updated from time to time to reflect changes in our services or applicable laws.