Privacy Policy

What data we process, why, for how long, and what your rights are.

Version 1.3. Effective from: 23 Oct 2026.

This is the binding version. Polish translation: Polityka prywatności

1 Controller

The controller of your personal data is MORE DIAMONDS LTD, Company No. 13524307, 590 Kingston Road, London, England, SW20 8DN. Contact on data matters: office@morediamonds.eu.

Your e-mail address and your player ID from the former application.
Your balances and the history of operations in the game: transfers, mine operations, corrections.
Data transferred from the former application: account, registration date, the player who referred you and your former VIP status (for information only).
A hash of your password. We never see or store the password itself.
Technical data needed for security: IP address, browser identification (user agent) and request times.
The rhythm of clicks in the mine (intervals between clicks), used to detect bots.

Providing the game and transferring your account from the former application — Article 6(1)(b) GDPR / UK GDPR (performance of a contract).
Security, fraud prevention, detecting bots, and informing you about the transfer of accounts and the end of the former application — Article 6(1)(f) (legitimate interest).
Marketing — only with your consent, Article 6(1)(a). We do not send marketing messages today.

Supabase — database and sign-in, servers in the EU (Frankfurt).
Vercel — hosting of the site.
Resend — sending e-mails, EU region (Ireland).
Cloudflare (Turnstile) — checking that the sign-up form is filled in by a person and not a bot. Used only on the sign-up form; it processes technical data of the browser and the IP address.
Push notifications (only if you turn them on): we store your browser's notification address (endpoint) and its encryption keys, and send through it only events from your own game — output waiting to be collected, VIP ending, VIP ended. The message goes through your browser's push service (Google, Apple, Mozilla or Microsoft). Legal basis: your consent. You withdraw it with the switch in your Profile or in your phone's settings; the address is then deleted.
We do not use analytics, advertising or error-tracking services, and we do not sell data.

Our providers are companies based in the United States, so data may be processed there. Such transfers are based on the European Commission's standard contractual clauses and the UK International Data Transfer Addendum (IDTA).

Account data and the history of operations: for as long as the account exists.
Security logs with IP addresses: sign-in link requests and password attempts are deleted after 24 hours, transfer code attempts and sign-up attempts (IP address, used for the limit of new accounts per connection) after 7 days. No security log is kept longer than 12 months.
The record of mine penalties and of administrator operations on an account: for as long as the account exists, as evidence in a dispute.
After an account is deleted, we delete or anonymise its data within 30 days, except what we need to establish or defend legal claims.

You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object, and to withdraw consent at any time.
Write to office@morediamonds.eu. You can also lodge a complaint with the ICO (United Kingdom) or the supervisory authority in your country — in Poland the President of the Personal Data Protection Office (UODO).

A sign-in session cookie (Supabase, not readable by scripts, valid for 7 days) — needed to keep you signed in.
md_polecajacy — the number from a referral link, kept for 90 days.
The browser's local storage keeps: your last seen balance for offline mode, the selected mine shaft, the vibration setting, whether you saw the mine welcome screen, and the countdown of the sign-in link button.
We do not use analytics or advertising cookies, so there is no cookie banner.