Privacy and cookie policy
In short: this site uses no tracking, analytics or advertising cookies. Birthday requests are not stored on the site; for coupons we keep only your email and code while the coupon is valid. Content from Google, TikTok and Facebook loads only with your permission.
Last updated: Wednesday, 21 Oct 2026
1. Who is responsible for your data
Data controller: SIRIUS, OBRT ZA ZABAVU I REKREACIJU VL. ANA MILKOVIC, OIB (tax no.) 52538578006,
Ulica Petra Skoka 1A.
Registered with: UPRAVNI ODJEL ZA GOSPODARSTVO I TURIZAM ZADAR (ZADAR)
Privacy contact: siriusgamingzd@gmail.com, phone +385 97 665 3807.
2. What data we process and why
Visiting the site
When you open the site, our hosting provider’s server (VOGA, obrt za specijalizirane dizajnerske djelatnosti) technically logs your IP address, time of access and browser type. This is needed to deliver the site and protect it against abuse (legitimate interest, Art. 6(1)(f) GDPR). We don’t use these logs for tracking or profiling.
All fonts, images and scripts are served from our own server, so opening the site doesn’t send your IP address to third parties.
Birthday requests via WhatsApp
The birthday form doesn’t store anything on the site. What you enter (name, mobile number, the child’s name and age, date, number of children, notes) is only used to compose a message that opens in your WhatsApp app. You send it yourself. Once you do, we receive it and use it to arrange and hold the party (steps prior to and performance of a contract, Art. 6(1)(b) GDPR).
WhatsApp is provided by WhatsApp Ireland Limited under its own privacy policy. We keep booking conversations as long as needed to arrange and hold the party, and no longer than 12 months after the date, except data we must keep by law (e.g. invoices).
Coupons
When you request a coupon, we store your email address, the coupon, your personal code, the time it was sent and whether the code was used. We use them only to send the coupon and to check that each code is used once (consent, Art. 6(1)(a) GDPR). We don’t send you advertising or share your address. The email is sent via our hosting provider’s mail server.
The data is deleted automatically 30 days after the coupon expires, or 90 days after sending for coupons without an end date. You can withdraw consent by contacting us (section 1); we then delete your data and the code stops working. To prevent abuse we briefly (15 minutes) count attempts per device using an irreversible hash of the IP address, which is then deleted.
Web game statistics
To see how often our web games are played, we count game starts without cookies and without storing anything on your device. To count unique players we compute a one-way hash of your IP address and browser type with a secret key that changes every day (and every week for weekly totals). The address can’t be recovered from the hash, and the hashes are deleted at the end of the day or week; we keep only total numbers (legitimate interest, Art. 6(1)(f) GDPR). The same daily-key method stops one device from liking a game more than once a day.
Email and phone
If you contact us by email or phone, we use your details only to reply.
Event photos
We publish photos in which people can be recognised only with their consent, and for children with the consent of a parent or guardian (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the contact above, and we will remove the photo from the site and our social channels.
3. Cookies and browser storage
The following is stored only in your browser and serves only features you chose to use. Under Art. 43(4) of the Croatian Electronic Communications Act (NN 76/22) no consent is required for this:
| Name | Type | Purpose | Duration |
|---|---|---|---|
lang | cookie | remembers your language (HR/EN), only if you switch it | 1 year |
sg-consent | local storage | remembers your cookie settings | 180 days |
scene | local storage | remembers your chosen light colour | until you delete it |
sirius-game-best | local storage | remembers your best mini-game score | until you delete it |
stringGhostBest and similar | local storage | our web games (e.g. Stringy) remember your best score | until you delete it |
sg-likes | local storage | remembers which web games you liked | until you delete it |
The sg_admin cookie is set only for staff logging into the admin area and is deleted when the browser closes.
4. External content (only with your permission)
Some parts of the site come from other services. They don’t load until you click “Show” or allow them in the (consent, Art. 6(1)(a) GDPR). Once loaded, the provider receives your IP address and browser details and may set its own cookies under its own policy:
- Google Calendar and Google Maps – Google Ireland Limited, privacy policy
- TikTok posts – TikTok Technology Limited (Ireland), privacy policy
- Facebook posts – Meta Platforms Ireland Limited, privacy policy
These providers may transfer data to the USA and other non-EU countries, based on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. You can withdraw permission at any time in the cookie settings (also linked in the footer). Cookies already set by these services can be deleted in your browser settings.
Plain links to our social media profiles and to WhatsApp send no data until you open them.
5. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest. You can withdraw consent at any time, without affecting processing before withdrawal. To exercise your rights, email siriusgamingzd@gmail.com. We reply within one month.
If you believe we process your data unlawfully, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
6. Other
We use no automated decision-making or profiling. We don’t sell or share your data with anyone other than the providers listed. We update this policy when the site changes; the date of the last update is shown at the top.