Privacy Policy

Last updated: May 9, 2026

1. Introduction

Welcome to Sonsaur (“we,” “us,” or “our”). Sonsaur Ltd, based in Georgia, operates the website sonsaur.com (the “Platform”), a free online gaming portal that provides access to browser-based HTML5 games.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Platform.

It applies to all users worldwide, including those protected by the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children’s Online Privacy Protection Act (COPPA).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.

2. Information We Collect

We aim to collect only the information necessary to provide and improve our services. The categories of information we collect include:

2.1 Information You Provide

• Account Information: If you create an account, we collect your username, email address, and an encrypted password. We do not store passwords in plain text.
• Communications: If you contact us via email or through our contact form, we collect the information you provide in your message, including your email address and any attachments.
• Game Interactions: Ratings, reviews, favorites, and game preferences you voluntarily submit.

2.2 Information Collected Automatically

• Usage Data: Pages visited, games played, play duration, click patterns, search queries, and referral sources (how you arrived at our Platform).
• Device Information: Browser type and version, operating system, screen resolution, device type (desktop, tablet, or mobile), and language preferences.
• Network Information: IP address (which may be used to infer approximate geographic location), internet service provider, and connection type.
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to collect information about your browsing activity. See our Cookie Policy for full details.

2.3 Information from Third Parties

• Analytics Providers: We receive aggregated and anonymized analytics data from services such as Google Analytics.
• Advertising Partners: If we display advertisements, our ad partners may provide us with non-personally identifiable information about ad performance and audience demographics.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain our services: Operate the Platform, deliver games, manage user accounts, and process your requests.
• Personalize your experience: Remember your preferences, recommend games based on your play history, and display content relevant to your interests.
• Improve our Platform: Analyze usage patterns to identify bugs, optimize performance, develop new features, and understand which games are popular.
• Communicate with you: Respond to inquiries, send service-related notices, and (with your consent) send promotional communications about new games and features.
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access to user accounts and our systems.
• Comply with legal obligations: Respond to legal requests, enforce our Terms of Service, and fulfill regulatory requirements.

4. Third-Party Games and Content

Sonsaur hosts games developed by third-party game developers. These games are typically loaded within our Platform using iframe technology or similar embedding methods. It is important to understand the following:

• Third-party game developers may have their own privacy policies and data collection practices that are separate from ours.
• When you play a third-party game on our Platform, the game developer may collect information about your gameplay directly. This data collection is governed by the game developer’s own privacy policy, not ours.
• We do not control and are not responsible for the privacy practices of third-party game developers. We encourage you to review the privacy policies of individual games when available.
• We make reasonable efforts to partner with game developers who respect user privacy, but we cannot guarantee the data practices of every third-party game on our Platform.

5. Advertising and Analytics

Sonsaur is a free-to-use platform. To sustain our services we display advertisements and use analytics to understand traffic patterns. The following third-party processors may receive information about your visit:

• Google Analytics 4 (GA4): Page-view + traffic measurement. Operates in Google Consent Mode v2 on our site - until you accept cookies, GA4 sends only aggregate, cookie-less pings (no personal identifiers, no cross-site tracking). After you accept, full analytics cookies are set.
• Google AdSense: Serves the advertisements you see. Without your consent, ads are non-personalized (contextual only). With consent, they are personalized. Ads load only after your first interaction with the page (scroll/click/touch).
• Sentry (session replay): We use Sentry to diagnose JavaScript errors. A 1% sample of sessions records DOM activity for debugging. All text and form inputs are masked before reaching Sentry - we cannot see what you type. Sentry is hosted in the United States.
• Cloudflare: Our CDN and security provider. Stores logs (~24h) of requests, including IP address, user agent, and timestamps, for traffic shaping and bot mitigation.
• Resend: Sends transactional emails (account verification, password reset, weekly digest, streak warnings). Stores recipient email + send metadata; does not store email body content beyond delivery confirmation.
• MaxMind GeoIP: We infer your approximate location (country, region, city) from your IP address to populate leaderboards and personalize content. We do not use precise GPS coordinates.

Your controls:

• Consent banner: On first visit you can Accept or Decline cookies. Declining keeps GA4 in cookie-less mode and prevents AdSense from loading.
• Global Privacy Control (GPC): If your browser sends the Sec-GPC signal, we treat it as a Decline automatically - no banner click required.
• Browser opt-out: You can opt out of Google Analytics via the Google Analytics Opt-Out Browser Add-on and personalized advertising via Google Ads Settings.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating the Platform, including hosting, analytics, email delivery, and customer support. These providers are contractually obligated to use your information only for the services they provide to us.
• Advertising Partners: With your consent (where required), we share certain information with advertising partners for the purpose of serving relevant ads.
• Legal Requirements: We may disclose your information if required to do so by law, in response to a court order, subpoena, or other legal process, or to protect the rights, property, or safety of Sonsaur, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with our Platform. Cookies are small text files placed on your device by your web browser.

For detailed information about the types of cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Account data: Retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
• Usage and analytics data: Retained in identifiable form for up to 26 months, after which it is aggregated or anonymized.
• Communication records: Retained for up to 2 years after the last communication.
• Inactive accounts: If your account has been inactive for more than 24 months, we may send you a notification and subsequently delete or anonymize the account data if no action is taken.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Secure password hashing using industry-standard algorithms
• Regular security assessments and vulnerability monitoring
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular backups with encrypted storage

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Children’s Privacy

Sonsaur is designed for a general audience and is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13.

• If you are under 13, please do not create an account or submit any personal information through our Platform.
• If you are between 13 and 18 (or the age of majority in your jurisdiction), you may use the Platform only with the consent of a parent or legal guardian.
• If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.
• Parents or guardians who believe their child has provided personal information to us may contact us at privacy@sonsaur.com to request review or deletion of that information.

11. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

11.1 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: Request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to the processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at privacy@sonsaur.com. We will respond within one month of receiving your request.

11.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: Opt out of the “sale” or “sharing” of your personal information. Note: We do not sell personal information in the traditional sense, but certain data sharing with advertising partners may constitute a “sale” under California law.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@sonsaur.com or use the “Do Not Sell My Info” link in our website footer.

11.3 Global Privacy Control

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information, where applicable under your local law.

12. International Data Transfers

Sonsaur Ltd is based in Georgia. If you access our Platform from outside Georgia, your information may be transferred to, stored, and processed in Georgia or other countries where our service providers operate.

Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

• We will update the “Last updated” date at the top of this page.
• For material changes, we will provide prominent notice on our Platform or send a notification to your registered email address.
• Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@sonsaur.com
• Entity: Sonsaur Ltd, Georgia

We aim to respond to all inquiries within 30 days. If you are located in the EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.