Privacy Notice

Monkey Mayhem is operated by Alfredo Zavala, who is the data controller for the personal data collected through the game. This notice explains what we collect, why, and your rights.

• Account data: email address, username, and password (stored only as a secure hash).
• Game data: banana balance, owned cosmetics, equipped items, match statistics, and settings.
• Usage and device data: IP address, browser and device identifiers, and gameplay/telemetry events used to run and improve the game.
• Support messages: anything you send us when asking for help.

Payment details (card numbers, billing address) are collected directly by Paddle, our Merchant of Record, and are never seen or stored by us.

• Providing the game (contract performance): creating your account, saving progress, running matches, delivering purchases.
• Security and fraud prevention (legitimate interests): protecting accounts, preventing cheating and abuse.
• Product improvement (legitimate interests): understanding how the game is played to fix bugs and improve balance.
• Customer support (contract performance / legitimate interests): responding to your requests.
• Legal obligations: keeping records where the law requires it.

• Service providers: hosting, database, and authentication infrastructure that runs the game.
• Paddle (Merchant of Record): for the sale of banana bundles, the New Player Deal and VIP, payment processing, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We do not sell your personal data.

We keep your data for as long as your account is active. When data is no longer needed — for example after account deletion — it is deleted or anonymised within a reasonable period, except where the law requires us to keep it longer.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent. You can exercise these rights by contacting us through the game. If you are in the UK or EEA, you also have the right to complain to your data protection supervisory authority; we respond to requests within one month.

Some of our service providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, and access controls on our systems.

The game uses essential storage only: authentication tokens and local game settings (including your banana balance and cosmetics cache) stored in your browser. We do not use analytics or marketing cookies. You can clear this storage at any time through your browser settings, which will sign you out.