Privacy & Cookies Notice

1. Who Is Responsible for This Website (Data Controller)

Under the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller responsible for CoralThunder (coralthunder.com) is:

If you have any questions about this notice or how technical data is handled on this site, you can email us directly at [Contact email].

2. What Data Is Processed (Technical Server Logs Only)

You do not have to give us any personal information to browse CoralThunder. We do not ask for your name, email address, date of birth, location or payment details.

However, because of how the internet works, your web browser automatically sends a standard request to our server every time you load a page or image. Your browser has to send your IP address so the server knows where to send the webpage back. Our web host records these requests in standard technical server logs, which contain only:

We keep no visitor logs of our own. To deliver and protect the site, Cloudflare processes technical request data: IP address, time of the request, the page requested, and browser and device type.

You do not have to give us anything else, and we never combine these routine server logs with other datasets to identify you personally.

3. Why We Process Technical Logs and Our Lawful Basis

We process these minimal technical server logs strictly to:

• Deliver the pages, illustrations and stylesheets of CoralThunder to your browser reliably;
• Keep the website and server infrastructure secure (for example, detecting and blocking malicious traffic, automated scraping or denial-of-service attacks); and
• Diagnose and fix technical faults, broken links or server errors.

Lawful basis under UK GDPR: Our lawful basis for this processing is legitimate interests under Article 6(1)(f) of the UK GDPR. Our legitimate interests are operating a safe, resilient and fault-free public website, protecting our infrastructure from unauthorised access or attack, and troubleshooting technical delivery issues. Because only routine request metadata is logged for a brief period and is never used to profile or track visitors, this processing does not override your rights and freedoms.

4. Who Receives This Data, International Transfers and How Long It Is Kept

Technical server logs are processed on our behalf by our hosting provider acting as a data processor under a binding data processing agreement:

Where our hosting provider processes or routes technical data outside the United Kingdom, that transfer is protected either by UK adequacy regulations or by the UK Information Commissioner's International Data Transfer Agreement (IDTA) / UK Addendum to the Standard Contractual Clauses, as specified in the hosting details above. Once the retention period of We keep no server logs. Cloudflare keeps request data only for as long as its privacy policy (cloudflare.com/privacypolicy) sets out for security and network operations. expires, the technical logs are automatically overwritten or deleted.

We do not sell, rent or share server logs with any third parties, data brokers or advertisers. We would only disclose log entries if strictly required to do so by a lawful UK court order or statutory authority.

5. Cookies, Device Storage and Third-Party Content (PECR Compliance)

Under the Privacy and Electronic Communications Regulations 2003 (PECR), websites must inform visitors and obtain consent before storing information on, or reading information from, a user's device unless it is strictly necessary.

CoralThunder sets zero cookies and stores nothing on your device:

• No cookies: We do not set first-party or third-party cookies of any kind (not even session cookies).
• Nothing stored on your device: We do not write to your browser's localStorage, sessionStorage or IndexedDB.
• No analytics or tracking: We do not run Google Analytics, heatmaps, fingerprinting scripts or advertising trackers.
• No third-party content loaded: All fonts (Kanit and Manrope), artwork, stylesheets and scripts are self-hosted directly on CoralThunder. Your browser never makes background requests to external font servers, CDNs, video embeds or social media networks while you browse our pages.
• Respecting device settings without storage: Our stylesheet automatically follows your device's light or dark theme and reduced-motion settings (via standard CSS media queries such as prefers-reduced-motion) right in your browser, without saving any preference cookie or file on your device.

6. No Automated Decision-Making or Profiling

We do not carry out any automated decision-making or profiling (as defined in Article 22 of the UK GDPR) on visitors to CoralThunder. Every visitor sees the exact same independent guide and verified facts blocks.

7. Your Data Protection Rights

Under the UK GDPR, you have the following rights over your personal data:

• Right of access: To ask whether we hold personal data about you and to request a copy of it.
• Right to rectification: To ask us to correct inaccurate or incomplete personal data.
• Right to erasure: To ask us to delete your personal data where there is no good reason for us to continue holding it.
• Right to restriction of processing: To ask us to suspend the processing of your personal data in specific circumstances.
• Right to object: To object to our processing of your personal data where we rely on legitimate interests.

Because we only process short-term technical server logs containing IP addresses and browser request headers, we normally cannot link a log line to a named individual unless you provide the exact IP address and timestamp of your visit. To exercise any of your rights, please email [Contact email].

8. Your Right to Complain (To Us and to the ICO)

If you are unhappy with how we handle your data or have a concern about privacy on CoralThunder, you have the right to complain directly to us by email at [Contact email]. We acknowledge all privacy complaints within 30 days and work to resolve any issue promptly and fairly.

You also have the right at any time to lodge a complaint with the United Kingdom's supervisory authority for data protection, the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Telephone helpline: 0303 123 1113
• Postal address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.

9. External Links to Official Game Websites

CoralThunder is an independent guide that reviews and summarises browser games using verified publisher information. When you select a button such as Visit Official Site on any game card, you leave coralthunder.com and travel directly to that game's own website.

Those external game websites are operated by independent developers and publishers. They are not controlled by us, and they have their own privacy policies, cookie banners and terms of service. As noted in the verified facts strip on each game card on our site, external games may display advertisements, ask you to create an account, offer in-game chat or sell optional in-game items. We encourage you—and parents or carers—to read the privacy notice on any external game site before registering an account or making a purchase.

This Privacy & Cookies Notice was last updated on 26 October 2026.