Last updated: 2 November 2026

IORA Games operates https://ioragmaes.com.

The person or organization responsible for your personal information is Dimitar Gjorgoski, located in Skopje, North Macedonia.

For privacy questions or requests, contact ioragmaes@gmail.com.

When you create an account using email and password, we collect your email address, account identifier, optional display name and account creation information. Supabase Auth manages password authentication; passwords are not stored in our website content or publicly accessible account profiles.

If you choose Google sign-in, we receive basic account information that Google makes available with your permission, including your Google account identifier, name, email address and profile picture when supplied. We use this information to create and authenticate your IORA Games account. We do not receive your Google password or request access to your Gmail messages, contacts or Google Drive files.

When you contact us, we receive the information you include in your message.

Our hosting and security providers also process technical information needed to deliver and protect the website, which may include IP addresses, browser and device information, request times and security events.

We use Vercel Web Analytics and Speed Insights to understand website usage and performance. These services process information such as visited pages, referring websites, browser and device characteristics, approximate location and performance measurements. We do not intentionally send account passwords or private account details to analytics.

We use personal information to:

• Create and manage accounts.

• Authenticate users and maintain signed-in sessions.

• Send account confirmation, password recovery and necessary account messages.

• Respond to questions and support requests.

• Prevent automated abuse, fraud and unauthorised access.

• Understand website usage and improve performance.

• Meet applicable legal obligations and handle disputes.

We do not use Google account information for advertising or sell it to third parties.

Where applicable law requires a legal basis, we process information to provide the account services you request, pursue legitimate interests in operating and securing the website, comply with legal obligations, or obtain your consent where required.

Where processing relies on consent, you may withdraw it. Withdrawal does not affect processing that was lawful before withdrawal.

We use these providers for the following purposes:

• Supabase: account authentication and account database hosting.

• Google: optional Google sign-in.

• Resend: delivery of account-related emails.

• Vercel: website hosting, technical logs, usage analytics and performance monitoring.

• Cloudflare Turnstile: bot detection and abuse prevention.

Providers receive information needed for their functions. Their own privacy notices also explain how they handle information when acting independently.

We may disclose information where required by law or reasonably necessary to protect users, investigate abuse or establish and defend legal claims.

We use authentication cookies to maintain your signed-in session. Blocking or deleting these cookies may prevent account features from working.

Vercel Web Analytics does not use cookies to identify visitors. Security services may use browser signals and related technologies to distinguish legitimate visitors from automated traffic.

Where applicable law requires consent for optional technologies, we will request it before using those technologies.

Our account database is hosted by Supabase in the region selected for our project. Our website also uses Vercel for hosting and performance monitoring, Google for optional Google sign-in, Resend for account emails, and Cloudflare Turnstile for protection against automated abuse.

These providers may process personal information in countries outside your country of residence, including the United States and other countries where they or their service providers operate. Selecting a particular database region does not mean that all support, security, email delivery and other processing takes place exclusively in that region.

The providers’ data-processing agreements describe the safeguards available for international transfers, including standard contractual clauses where applicable. The safeguards that apply depend on the provider, the processing involved and the relevant legal requirements.

For information about our database location, the providers involved or the transfer arrangements applicable to your information, contact ioragmaes@gmail.com.

We retain personal information for the purposes described in this policy. Retention depends on the type of information, whether your account remains open, support and security needs, provider settings and applicable legal obligations.

Account information: We retain your account information while your account remains open so that you can sign in and use account features. We do not currently automatically delete accounts solely because they are inactive. You can request account deletion by contacting ioragmaes@gmail.com.

Account deletion requests: We may verify that you own the account before deleting it. We handle requests within the time limits required by applicable law. Where specific information must be retained for a legal obligation or an ongoing dispute, we retain only the relevant information for that purpose.

Support correspondence: We retain messages while handling your enquiry and any related follow-up. Correspondence may be retained longer where needed to investigate an unresolved issue, handle a dispute or meet a legal obligation.

Security and technical logs: These records are retained according to the relevant providers’ configured retention periods. Records relevant to an identified security incident may be retained separately for the investigation and any related legal requirements.

Backups: Where backups exist, deleted information may remain in them until the backups expire or are overwritten under the applicable backup schedule. Backup copies are not intended for routine use. If a backup is restored, previously completed deletion requests must be reapplied where necessary.

You can contact ioragmaes@gmail.com to ask about the retention periods currently applicable to your information or to request deletion.

Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your information, restrict or object to processing, withdraw consent, or complain to a relevant data protection authority.

To request account deletion or exercise a privacy right, contact [monitored contact email]. We may need to verify your identity before completing your request.

You can also remove IORA Games’ access through your Google account’s third-party connections settings. Removing Google access does not automatically delete information already held in your IORA Games account; contact us to request deletion.

We use technical and organisational measures intended to protect personal information, including encrypted connections, restricted account access and authentication controls. No online service can guarantee complete security.

Our account services are intended for users aged [confirmed minimum age] or older. If you believe a child below that age has provided personal information, contact us so we can investigate and take appropriate action.

Our website may link to game studios and other external services. Their privacy practices are governed by their own policies.

We will update this policy when our practices change and revise the date above. Where required, we will provide additional notice or request consent before making a new use of information.

Contact: ioragmaes@gmail.com.