Privacy policy
VA Connection uses information to operate your account and games. Google Analytics measures visits to public pages, with optional analytics cookies controlled by your choice.
Information stored
Registration stores your email, screen name, date of birth, UK eligibility confirmation and acceptance version. Passwords are stored as salted scrypt hashes, not readable text. We keep fictional credit balances, round results, timestamps, settings, saved games and support submissions.
Why it is used
Account data supports sign-in and eligibility. Credit activity makes interrupted rounds recoverable and prevents duplicate credit changes. Settings control sound, session reminders and your profile. Support details let the operator investigate the issue you describe.
Where it goes
Account data is stored in a private database on our Google Cloud server in the United States. Brevo processes transactional email, including password recovery. ImprovMX forwards messages sent to care@vaconnection.com to the contact inbox. Support submissions include your reply email and message. These providers may process information outside the UK. No account data is sent to advertising or analytics services.
Retention and control
Account and game-activity records remain while needed to operate your account and resolve issues. Support tickets and email delivery records are removed after 90 days. Expired sessions and recovery tokens are cleared automatically. Private daily backups are retained for seven days. You can request access, correction or deletion through Support; backups expire on their retention cycle.
Your requests
Ask for access, correction, deletion or information about processing using the Support form or care@vaconnection.com. Do not include passwords, payment details or identity documents. You may also raise a data-protection concern with the UK Information Commissioner’s Office.
Security and changes
The application uses HTTPS, secure server-side sessions, request checks, rate limits and restricted private-file access. Passwords are stored as salted hashes. No system is risk-free; choose a unique password and keep it private. Updated 21 September 2026.
Google Analytics and consent
Google Analytics 4 receives public-page information, consent status and technical request information. Before consent or when analytics cookies are declined, limited measurements are sent without setting or reading analytics cookies. If you allow them, Google also uses analytics cookies and their online identifiers. We do not send account details, email addresses, query strings, recovery tokens or game-play activity to Analytics. Google may process measurement data outside the UK. Change or withdraw cookie consent at any time in Cookie Preferences. No advertising cookies or Google advertising personalization are enabled. Updated 22 September 2026.