All Policies

Definitions

• Company: Iconical (Laith).
• Services: Games, apps, websites, bots, and other projects provided by Company.
• Device: Any device that can access Services, such as a computer, phone, or tablet.
• Website: https://iconical.dev
• You: The individual, company, or entity using Services.

Introduction & Consent

Welcome to Iconical (“we”, “us”, or “our”). We are committed to protecting your privacy and ensuring the security of your personal information. By accessing or using our website, apps, and projects (collectively, the “Services”), you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our

Terms of Service

. If you do not agree with our policies and practices, please do not use our Services.

Our Services are intended for users aged 13 and older. If you are under 18, you must use our Services only with parental or guardian supervision. We do not knowingly collect personally identifiable information from children under 13. If you believe your child has provided such information, please contact us immediately.

Data Controller

Iconical ("we", "us", "our") is the data controller for the personal data collected through the Services. For processing performed on our behalf by vendors, we act as the controller and those vendors are processors. Contact:

contact@iconical.dev

.

Legal Basis for Processing (EU Users)

If you are an EU resident, our lawful bases for processing personal data include: (a) performance of a contract (providing Services); (b) your consent (e.g., marketing, cookies where required); (c) compliance with legal obligations; and (d) our legitimate interests (e.g., analytics, fraud prevention, service improvement) where such interests are not overridden by your rights.

Information We Collect

• Personal Information: We may collect personally identifiable information that you voluntarily provide to us when you register, contact us, or otherwise interact with our Services, such as your name, email address, or other contact details.
• Automatically Collected Data: We may automatically collect certain information about your device and usage of our Services, such as your IP address, browser type, operating system, referring URLs, device identifiers, and activity data through cookies and similar technologies.
• Cookies & Tracking Technologies: We may use cookies, web beacons, and similar tracking technologies to collect and store information about your interactions with our Services. You can manage or disable cookies via your browser settings. You can manage or disable cookies via your browser settings. For guidance, please see your browser's support pages (e.g., Chrome, Firefox, Safari, Opera, Edge) for instructions.
• Children’s Data: We do not knowingly collect personally identifiable information from children under 13. If you believe your child has provided such information, please contact us immediately.
• Self-Hosted / Third-Party Services: Our Services may integrate with or rely on third-party services or self-hosted solutions that collect or process data on our behalf. We are not responsible for the privacy practices of these third parties. Please review their respective privacy policies for more information.

Cookies & Consent

We use cookies and similar technologies for essential functions, analytics, and optional marketing. We obtain consent where required by law. You may manage or withdraw consent via your browser or our cookie controls (if provided).

• Essential cookies — required for the service
• Analytics cookies — measure usage and trends
• Marketing cookies — used only with your consent

You can manage or disable cookies via your browser settings. For guidance, please see your browser's support pages (e.g., Chrome, Firefox, Safari, Opera, Edge) for instructions.

How We Use Information

We use your information for purposes including, but not limited to:

• Providing, operating, and maintaining our Services
• Improving, personalizing, and expanding our Services
• Understanding and analyzing usage and trends
• Developing new features, products, or services
• Communicating with you for customer service, updates, and marketing (only with your consent where required)
• Conducting analytics to understand and improve our Services
• Detecting, preventing, and responding to fraud, abuse, or other illegal activities
• Complying with legal obligations and enforcing our policies

Third-Party Content & Links

Our Services may contain links to third-party websites, products, or services that are not operated or controlled by us. We do not endorse, monitor, or assume responsibility for the content, privacy policies, or practices of any third parties. Accessing external links is done at your own risk.

Additionally, third-party integrations or plugins used within our Services may collect information about your activities. We have no control over these third parties and recommend reviewing their privacy policies before use.

Self-Hosting & Security Disclaimer

Some of our Services may be offered as self-hosted software. If you choose to install or operate a self-hosted version of our Services, you do so entirely at your own risk. We are not responsible for any data loss, breaches, downtime, or damages arising from your self-hosted use whatsoever.

For our hosted Services, we make reasonable efforts to secure and maintain them, but we do not guarantee absolute security, availability, or protection against unauthorized access. You acknowledge that your use of our hosted Services is also at your own risk.

You agree to indemnify, defend, and hold harmless Iconical from any claims, damages, or losses arising from your self-hosted setup, misuse, or failure to secure your data or accounts.

Data Breach Notification

If we become aware of a personal data breach likely to result in a risk to your rights and freedoms, we will notify affected users and relevant authorities without undue delay and, where feasible, within 72 hours.

Data Retention & Security

We retain account and transactional data while your account is active and for up to 12 months after account deletion for fraud prevention and legal compliance unless a longer retention period is required by law. Log and analytics data are retained in aggregated or anonymized form for up to 24 months.

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

We implement administrative, physical, and technical safeguards such as TLS (HTTPS) for data in transit, encryption at rest where applicable, password hashing, access controls, and regular security reviews. However, no method of transmission or storage is completely secure.

No Liability

Our Services are provided "AS IS" and "AS AVAILABLE" without warranties of any kind, either express or implied, including but not limited to merchantability, fitness for a particular purpose, or non-infringement.

We are not liable for any damages, losses, or issues arising from your use of our Services in any form, including but not limited to direct, indirect, incidental, consequential, or punitive damages.

We disclaim all liability whatsoever for issues caused by third-party services, software, or external factors beyond our control.

Our total liability under any legal theory shall not exceed the amount you paid to us, if any, in the twelve months preceding the claim. Some jurisdictions do not allow certain limitations or exclusions of liability, so some of these may not apply to you.

Disclosure & Sharing of Personal Information

We respect your privacy. We will not sell, rent, or otherwise disclose your personal information to third parties for their independent commercial use. Except as described below, we will not disclose your personal information to any third party whatsoever.

We will only disclose personal information in the limited circumstances below:

• Service providers (processors): We may share personal information with trusted third-party service providers who perform services on our behalf (for example: hosting, payment processing, customer support, analytics). We require these providers to process data only as instructed and to maintain appropriate safeguards through Data Processing Agreements.
• With your consent: When you give explicit consent to share your information for a specified purpose, we may do so consistent with that consent.
• Legal obligations & safety: We may disclose personal information if required to do so by law, regulation, subpoena, court order, search warrant, or other valid legal process; or when we reasonably believe disclosure is necessary to (a) respond to lawful requests by public authorities (including to meet national security or law enforcement requirements), (b) prevent, investigate, or take action regarding suspected illegal activity, fraud, imminent physical harm, or threats to public safety, or (c) protect the rights, property, or safety of Iconical, our users, or others. We will require valid legal process and will challenge overbroad requests where permitted.
• Business transfers: In the event of a merger, acquisition, bankruptcy, or sale of assets, personal information may be transferred to the successor entity; the successor will be required to honor this Policy.
• Aggregated or anonymized data: We may share anonymized or aggregated information that does not identify you and cannot reasonably be linked to you.

Notice & minimization: Where permitted by law, we will try to notify you of any government or law-enforcement request for your personal information and will disclose only the minimum information necessary to satisfy the request. We will not disclose more information than reasonably required.

Third-Party Processors & International Transfers

We use third-party processors (such as payment providers, analytics services, and hosting providers). We enter appropriate agreements and apply safeguards (including Standard Contractual Clauses where required) for transfers outside your jurisdiction. For details on specific processors or to request a Data Processing Agreement (DPA), contact

contact@iconical.dev

.

Your Rights

Depending on your jurisdiction, you may have certain rights over your personal data, including:

• The right to access, correct, or delete your personal information.
• The right to restrict or object to certain processing activities.
• The right to data portability where applicable.
• The right to withdraw consent at any time when processing is based on consent.
• The right to lodge a complaint with a data protection authority.

To exercise your rights, please contact us at

contact@iconical.dev

. We will acknowledge your request within 7 days and respond within 30 days, or as permitted by applicable law.

California Consumer Rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal data we collect, use, and disclose.
• The right to request deletion of your personal data, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal data (we do not sell or share personal data).
• The right to correct inaccurate information about you.
• The right to equal service and price, even if you exercise your privacy rights.

To exercise these rights, please contact us at

contact@iconical.dev

.

You may exercise these rights via our contact methods listed below or through any designated privacy request form we provide.

Automated Decision-Making

We do not use fully automated decision-making that produces legal or similarly significant effects about you. We may use automated tools for analytics and personalization; you may opt out where applicable.

Data Processing Agreements

Enterprise customers or data controllers who require a Data Processing Agreement (DPA) may request one by contacting us at

contact@iconical.dev

.

Translation Interpretation

If this policy is translated into other languages, the English version shall prevail in case of any dispute or inconsistency.

Changes to this Policy

Last updated: September 25, 2025

We reserve the right to update or modify these Policies at any time, at our sole discretion. If we make material changes, we will provide notice by posting an updated version on this page and updating the “Last updated” date above. We encourage you to review these Policies periodically.

Your continued use of our Services after any changes constitutes your acceptance of the revised Policies. If you do not agree to the updated Policies, please discontinue use of our Services.

Contact Us

If you have any questions, concerns, or requests, please contact us:

• Email:
  privacy@iconical.dev
• Discord:
  /discord
• Contact Page:
  /contact
• Community Guidelines:
  /guidelines

Where legally permitted, Company will notify You of any government or law-enforcement requests related to Your account or content, and will challenge overbroad requests to protect Your rights.