๐Ÿ 

Eva's & Max'sPrivacy and your data

Last updated 30 October 2026

The short version

  • The games need no account. We don't use cookies, adverts or tracking, and children never type anything in to play.
  • If you support us, we keep your email address, the amount, your country and (if you give one) a name for our supporters map. Payments go through our payment provider; we never see card details.
  • A family page holds only what you type: first names or nicknames and the cartoon looks you pick, plus the children's game saves.
  • When your support ends, your family page comes down, and we delete your details and the saves 90 days later. You can ask us to delete them sooner.
  • We use AI to help us make games. We never put your details or your children's names into AI tools, and nothing on the site uses AI to profile or personalise.
  • We never sell or share your data for marketing, and we don't send marketing emails.

Who we are

Eva's & Max's Games is a small family website in the United Kingdom. The person responsible for your data (the "controller", in data protection law) is Kim Cartmell, trading as Eva's & Max's Games.

For anything about your data, email hello@evamaxgames.com. We're a family, not a big company, so a real person reads every message.

This page explains what we do under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for visitors in the European Union, the EU GDPR.

Playing the games

Anyone can play without an account, and children are never asked for any information.

On your device

Each game keeps its progress and settings in your browser's local storage, on your own device. It isn't sent to us (unless you use a family page, below). You can clear it any time in your browser settings. We don't use cookies.

"Playing right now"

While a game is open, it tells us once a minute that someone is playing, so the homepage can say how many people are playing and in how many countries. It sends a random number made up for that visit, the game's name and your time zone, which we turn into a country. Nothing identifies you, and we delete it within a few minutes.

Running the website safely

Like every website, our hosting provider handles your IP address to deliver pages and protect the site from attacks. We don't store IP addresses ourselves. Our own technical logs record which parts of the site were used and any errors, without email addresses, and are kept for 30 days.

Supporting us

If you choose to support us with a monthly contribution, this is what we keep and why.

WhatWhyLegal basis
Your email addressTo send your welcome email, sign-in links for your family page and receipts. Never for marketing.Contract: it's how we provide what you signed up for
Amount, country, start and end datesTo run your support and show the number of supporters in each country on our mapContract; legitimate interests for the map count
A name for the supporters map (optional)To thank you publicly, only if you give one and only after we've checked it. Everyone else shows as "A kind supporter".Consent: you can ask us to remove it any time
Payment detailsTaking payments. Our payment provider handles your card; we only receive a reference and your email address.Contract

Only we can see supporter details, through a private admin page that needs a secure sign-in.

Family pages

Supporters at ยฃ5 a month and up get a family page: the homepage with their own children in the games. It holds only what you, the parent, type in:

  • each child's first name or nickname, which we check before it's shown;
  • the cartoon look you pick from fixed lists (like "bunches" or "glasses");
  • each child's game saves, so they can carry on from any device.

We don't ask for surnames, ages, photos, schools or where you live, and please don't put them in a name. The page isn't listed or shown to search engines, but anyone you give its link to can see the names and looks and play with those saves, so share it with people you trust.

We use these details only to show your page and keep the saves (contract, with your consent for the names you add). You can change or delete your page at any time from the page itself; deleting it removes the names and saves straight away.

Our emails

We only send emails you need: a welcome when you become a supporter, sign-in links you ask for, and receipts. They come from hello@mail.evamaxgames.com, carry no tracking pixels or images from other websites, and we don't track whether you open them. Our email service records whether each email was delivered (including the address it went to), and we keep that for 30 days to sort out delivery problems.

How we use AI

We're open about this: AI tools help two busy parents make far more than we could on our own.

  • We use AI to help build the games: writing code, drawing pictures and making sounds, and to help run the website.
  • We may use AI to help turn game ideas into games, including ideas that supporters send us. Please don't include personal details in an idea.
  • We never put your personal information into AI tools. Your email address, your display name, and your children's names, looks and saves are never given to AI tools or used to train AI models.
  • No AI personalisation or profiling. Nothing on the site uses AI, or any automated system, to profile children or adults, decide what they see, or make decisions about anyone.
  • We may use anonymous usage numbers to improve the games, such as how many people play each game. These are counts that can't identify anyone. If we ever collect more than that, it will stay anonymous and we'll update this page first.

Children

The games are made for young children, and we follow the spirit of the ICO's Age Appropriate Design Code (the Children's code): no adverts, no chat, no accounts for children, no nudges to share information, nothing collected to profile them and the most private settings by default. Children's details only reach us when a parent sets up a family page.

How long we keep it

WhatHow long
Your supporter details (email, name, country, amount)While you support us, then deleted 90 days after your support ends
A checkout you started but didn't finish7 days
Family page names and looksUntil you delete the page; it comes down when your support ends and is deleted 90 days later
Children's game saves on a family pageUntil you remove the child or the page; deleted 90 days after your support ends
A family page's address (just the made-up word and letters, nothing about you)Kept so the same address is never given to another family
Sign-in linksWork once, for one hour, then deleted
"Playing right now" countsA few minutes
Technical and email delivery logs30 days
Payment recordsKept by our payment provider for as long as the law requires

Deleted files can stay in our storage provider's recycle bin for up to 14 days before they're gone for good.

Who helps us

We use a small number of trusted companies ("processors") who handle data only on our instructions, under contracts that protect it:

CompanyWhat they do for usWhere your data is kept
Microsoft (Azure)Hosting the website, storing supporter and family page data, sending our emails, technical logsUnited Kingdom and the European Union (the Netherlands)
StripeTaking monthly payments and sending receiptsStripe's own data centres, as set out in its privacy policy

These companies may sometimes access data from other countries, such as the United States. When they do, they use the legal safeguards UK and EU law require, such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses or the Data Privacy Framework.

We never sell your data, and we don't share it with anyone else unless the law requires us to.

Your rights

You can ask us to:

  • tell you what we hold about you and give you a copy;
  • correct anything that's wrong;
  • delete your data, or stop or limit how we use it;
  • give you your data in a format you can take elsewhere;
  • take back any consent you gave, such as your name on the supporters map.

Email hello@evamaxgames.com. We'll reply within one month, and it's free.

If you're not happy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk/make-a-complaint, 0303 123 1113), or, in the European Union, to the data protection authority where you live.

Changes to this page

If we change how we use your data, we'll update this page and the date at the top first. If a change matters to supporters, we'll email you about it.