Privacy policy
Last updated: 17 October 2026
Ediners is built to know as little about you as possible. Your account lives in your own browser, we run no analytics or advertising, and the only personal data that reaches our server is what you choose to send through the contact form.
1. Who is responsible
This policy covers ediners.com (“Ediners”, “we”, “us”). Ediners is operated by Yatimov Media Ltd, Kemp House, 152-160 City Road, London EC1V 2NX, United Kingdom, which is the data controller for the personal data described here. For any privacy question, write to privacy@ediners.com. We aim to reply within one month, as UK data protection law requires.
2. Your account stays on your device
When you join, the details you enter — display name, email address, date of birth and password — are saved in your browser's local storage on the device you are using. They are not sent to our server. Your password and recovery code are stored only as salted PBKDF2-SHA-256 hashes, never in plain text.
Your play profile is kept in the same place: Neon Token balance, level, Punch Card, Order Tickets, favourites, the last 60 rounds and your safer play settings. Because it never leaves your device, we cannot see it, recover it or reset it for you.
- We ask for your date of birth to make sure you are 18 or over.
- We ask for your email address so that it can serve as your login name on this device. We do not send you emails about your account and we do not send marketing.
- You can download everything held for your account as a file, or delete it, from Your data in your account.
In demo mode we store nothing about your play at all: practice credits live in the page's memory and vanish when you leave.
3. Contact messages
If you use the contact form or email us, we receive your name, email address, the topic you choose and your message. We use them only to answer you and to keep a record of the conversation. Messages from the form are stored on our web server in a protected file that cannot be opened from the web.
4. Server logs and security
Like every website, our hosting provider records basic technical details of each request — IP address, date and time, the page requested, the browser's user-agent and the response code — in server logs used for security and fault-finding. Our contact form also keeps a one-way, keyed hash of your IP address for one hour to stop the form being flooded; the address itself is not stored by us.
We do not use analytics, advertising tags, social media pixels, fingerprinting or third-party fonts and scripts. Every page and every visitor gets the same content.
5. Why we may use data
| What | Purpose | Lawful basis (UK GDPR) |
|---|---|---|
| Contact messages | Answering your question and keeping a record | Legitimate interests (Art. 6(1)(f)) |
| Server logs, hashed IP for rate limiting | Keeping the site secure and working | Legitimate interests (Art. 6(1)(f)) |
| Account details on your device | Providing your account; checking you are 18+ | Contract (Art. 6(1)(b)); held by you, on your device |
6. Who we share data with
We do not sell or rent personal data and we do not share it for advertising. Contact messages and server logs are processed by our hosting provider on our behalf, under a written agreement, on servers in the United Kingdom. We would disclose data to public authorities only where the law requires it.
7. How long we keep it
- Contact messages: up to 12 months after the conversation ends, then deleted.
- Hashed IP addresses for rate limiting: one hour.
- Hosting server logs: kept by our host for a short period for security (normally up to 30 days).
- Account data in your browser: until you delete it in your account or clear this site's data in your browser.
8. Your rights
Under UK data protection law you can ask for a copy of your personal data, ask us to correct or delete it, object to our use of it, ask us to restrict it, and ask for a portable copy. For account data, you can do all of this yourself from your account, because the data is on your device. For contact messages, email privacy@ediners.com.
9. Adults only
Ediners is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has contacted us, tell us and we will delete the message.
10. Changes and complaints
If we change this policy we will update the date at the top of the page. If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk or on 0303 123 1113.