Who we are
Dali Logistic (dalilogistic.com) is the data controller for personal information collected through this website. You can contact us through the contact form or by email at [email protected].
What we collect
- When you sign up with email: your username, full name, email address and password. Your password is turned into a one-way hash (bcrypt) before it's saved, so it isn't stored as you typed it.
- When you sign up with Google: your name, verified email address and Google account ID, sent by Google and checked by our server with Google. You choose a username.
- Account activity: date joined, last sign-in, coin balance, XP, level, daily-bonus times and a count of failed sign-in attempts (used to lock an account for 15 minutes after 5 wrong tries).
- When you contact us: your name, email, topic and message.
- Technical data: the IP address and time of each form submission, kept in our private form log for security.
We never ask for or store card or bank details.
Where it's kept
Your account is stored on our server as a protected file in a folder that is blocked from the web. It can't be opened in a browser. We don't place your details in the page, in browser tables or in any public file. It stays there until you delete your account from My account or ask us to delete it.
Signing in sets one strictly necessary session cookie (dl_sid), which is HttpOnly and expires when you close your browser or sign out. See the Cookies Policy.
Messages sent through our contact and Player Care forms are emailed from our server to our support inbox through our email delivery provider. A copy is kept in a private log on our server so we can reply and check the message arrived.
Why we use it (lawful basis)
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, coins, levels and bonuses | Contract: to provide the service you asked for |
| Checking you are 18+ and in the UK | Legal obligation and legitimate interests |
| Replying to your messages | Legitimate interests / contract |
| Security, preventing misuse and fixing problems (form logs, lock-outs) | Legitimate interests |
Who we share it with
- Google, only if you choose Google sign-in. Google's privacy policy applies.
- Our email delivery provider (Brevo), which sends contact-form messages to our inbox.
- Our hosting provider, which runs the server the site is stored on.
- Google Fonts, which serves the fonts used on our pages and receives your IP address when fonts load.
We don't sell your information, and we don't use advertising or tracking cookies.
How long we keep it
- Account data: until you delete your account, or after 24 months of inactivity.
- Contact messages and form logs: up to 12 months, or less once your request is dealt with.
Your rights
Under UK data protection law you can ask to see, correct, delete or receive a copy of your information, and you can object to or restrict how it is used. You can delete your account yourself at any time. To make a request, use the contact form. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Children
The site is only for adults aged 18+. We don't knowingly collect information from anyone under 18. If we find out we have, we'll delete the account.
Security
All forms are processed on our server. Passwords are hashed, account and log files are protected from web access, and sessions use a secure HttpOnly cookie sent over HTTPS. No system is perfectly secure, but we work hard to protect your information.
Changes
We'll update this page if anything changes. The date at the top shows the latest version.