Privacy policy
What Mesondemesilla stores, why it stores it and how you control your account data.
Information you provide
A registered account uses a nickname, email address, password digest and eligibility confirmations. Your password is hashed and is not stored as readable text. A guest session uses a generated account identifier and eligibility confirmations without requiring an email or password. Support requests contain the topic, reply address and message you choose to send.
Play and account records
We store the shared credit balance, recorded rounds, game progress, reward claims, favourite games, evening route, preferences and care restrictions. These records make interrupted play recoverable, prevent duplicate awards and allow the journal and account controls to work. Technical security records support rate limits and session protection.
Purposes and lawful use
Information is used to provide the service you request, maintain an account, respond to support, enforce adult/UK eligibility and protect the platform from abuse. Essential account processing supports the service relationship; proportionate security and support processing serves legitimate operational interests. Optional measurement would require the consent described in Cookie Preferences. Optional analytics runs only with analytics consent.
Cookies and sessions
An essential HttpOnly session cookie links your browser to the server session. Essential consent and comfort settings remember your explicit choices. See the Cookie Policy for names, purposes and durations. A consent choice never disables the security necessary for an authenticated account.
Messages and service providers
Support requests are stored with a reference. Password-recovery messages are created only for an existing account, use expiring one-time tokens and never reveal whether an email is registered in the public response. A configured mail provider may process the address and message to deliver transactional service messages. No advertising mailing list is created by registering.
Retention and deletion
Account and play records are retained while needed to provide the account, maintain accurate activity and investigate a reported problem. Reset tokens expire after 30 minutes. Sessions expire after seven days. Temporary rate limits expire automatically. Account deletion removes its sessions, balance, rounds, favourites and saved route; identifying support content is removed from linked requests. Any required legal retention is limited to its applicable purpose.
Your choices and rights
You can review your profile, change preferences, take a break and delete your account. You may also ask for access, correction, portability, restriction or erasure where applicable. We may need to verify that a request comes from the person concerned. You can raise a privacy concern with the UK Information Commissioner’s Office at ico.org.uk.
Security and contact
We use password hashing, access checks, session protections and server validation. No system can promise absolute security. For a privacy request or suspected account issue, contact hello@mesondemesilla.com or use Support. Never include a password or recovery token in a message.
Optional public challenges
If you explicitly join a daily discovery tournament, your nickname and server-calculated score appear in its public table. Participation is optional and requires your confirmation. Your email, date of birth, balance and private game records are not published. Account deletion also removes your challenge entries.
Your Light Cabinet
Your account preferences include the game identifiers selected for your four-place Light Cabinet and your chosen cosmetic lightprint. This display is private, follows your account between visits and is removed with account deletion. It never influences game outcomes.
Microsoft Clarity — optional
If you accept analytics, Microsoft Clarity measures interactions on public pages using session recordings and heatmaps. Account forms are masked. Account, password recovery and gameplay pages are excluded. Clarity may use _clck and _clsk cookies. Advertising storage stays denied. Microsoft may process this information outside the UK. Reject or withdraw analytics in Cookie Preferences to stop collection.
Keitaro — optional
With analytics consent, Keitaro records public page visits, basic browser and network information and permitted campaign attribution. Account details, form contents, recovery tokens and game outcomes are excluded. This integration adds no tracking cookie.
Automated request assessment
Palladium assesses automated requests on public pages using limited browser and network information. This supports service security and traffic diagnostics. It does not change game outcomes or the product content served to visitors.
18+ · UK only · Fictional Play Credits · No purchases or prizes of value.