Privacy Policy

RESOLOVA LTD is the controller of personal information used to operate this website and respond to business inquiries. Resolova Games is our game studio brand. This notice covers the Resolova Games website at resolova.com. Our company details are set out below. Contact hello@resolova.com with privacy questions or complaints.

Legal entity

RESOLOVA LTD

Game studio / brand

Resolova Games

Business contact

hello@resolova.com

Company number

17313596

Registered in

England and Wales

Registered office

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

When you use the contact form, we receive the name, company, business email, inquiry type and message you enter. To limit automated abuse, we also retain a keyed hash of the submitting IP address with the inquiry, rather than the IP address itself in the message record. If you email us directly, we receive the details and attachments you choose to send. Our web hosting services may separately process IP addresses, request times, browser information and technical logs needed to deliver and protect the site. Please do not send sensitive personal information or player account credentials.

Submitting the contact form sends your details to our server and stores the inquiry in our MySQL database for the authorised studio administrator to review and answer. The form does not automatically email you or subscribe you to marketing. It does not accept attachments. Submission is subject to validation and a per-source rate limit. Form contents are not placed in the page URL or sent to Google Analytics by our site integration. You can instead email us directly using the address shown on this page.

We use business correspondence to assess proposals, answer questions and manage business relationships, relying on our legitimate interests in communicating with business contacts. Where you personally request steps towards a contract, or we need to perform a contract with you, we may rely on contractual necessity. We process information required by applicable law on the basis of legal obligation. Delivering, maintaining and protecting the website serves our legitimate interests in operating a reliable service. Optional analytics is based on your consent.

We use Google Analytics for optional audience measurement when it is configured and you accept analytics. It can process page visits, device/browser information, approximate location and cookie identifiers. We do not intentionally send contact-form contents to Analytics. Our integration strips query strings and fragments from the page address sent in its page-view configuration. Advertising storage, advertising user data, advertising personalisation and Google Signals are disabled in our integration. Rejecting analytics does not prevent you using the site. Change your choice through Cookie settings in the footer.

Information may be processed by our hosting, email and, when enabled with consent, analytics service providers, and by professional advisers or authorities where required. Google Analytics is provided by Google; see Google’s privacy policy. Service-provider processing may involve countries outside the UK. Where a restricted international transfer occurs, an applicable lawful transfer mechanism is required, such as an adequacy arrangement or appropriate contractual safeguards. Contact us for details relevant to your information.

We retain correspondence only as long as necessary for its purpose. The criteria are the status of our business discussion, applicable record-keeping duties and whether a record is needed for a dispute. Technical log retention depends on our hosting configuration. Our cookie-choice record expires after 180 days; the Analytics cookies configured by this website have a maximum lifetime of 180 days. Cookie lifetime is different from retention of information already sent to Google. Contact us for the applicable retention details for your correspondence.

Depending on the circumstances, you may have rights to access, correct or erase information, restrict or object to processing, and obtain portable data. You may withdraw analytics consent at any time without affecting the lawfulness of earlier consent-based processing. To exercise a right or complain to us, contact hello@resolova.com. We may need proportionate information to verify your identity. Access requests are generally handled within one month, subject to lawful extensions or clarification. You may also raise a concern with the Information Commissioner’s Office or another competent supervisory authority.

The private studio administration area stores the authorised administrator’s email address and a password hash, not a plaintext password. Login requires the password and a six-digit code sent to the authorised email address. Codes expire after 10 minutes and allow up to five attempts; only a keyed hash is stored in MySQL. A random authentication token is stored as a hash on the server and expires seven days after verification. Logout revokes that device’s token; a password change revokes all tokens. Necessary cookies maintain access and protect form submissions. Login limits use a keyed hash of the source IP and a 15-minute window; code delivery has an account-wide hourly limit. Expired authentication records are removed during subsequent login activity. Action confirmations are bound to the submitted form and expire after two minutes. These records support our legitimate interests in protecting the website and managing authorised access. The administrator account is retained while access is authorised.

We do not operate player accounts on this site or use this site for automated decisions producing legal or similarly significant effects. We do not seek information from children. We may update this notice when the website or our processing changes; the date at the top identifies this version.