Who we are and what this policy covers
MCDONALDSMENUUK operates the game discovery website at https://gaming.mcdonaldsmenuuk.com. The website contact for privacy matters is MOHAMMAD WASEEM YAQUB. This policy explains information handled through our own pages and the privacy implications of loading independently hosted games. For questions or to make a privacy request, contact [email protected]. We do not require a MCDONALDSMENUUK account to browse or play.
Third-party developers and hosting providers operate the embedded games. Their own notices apply to information they collect inside those games. Our inclusion of a game does not make us its developer or the controller of every use of information by that provider.
Responsibility for this site and other services
This notice covers the pages and browser features at gaming.mcdonaldsmenuuk.com. MCDONALDSMENUUK is the website brand. MOHAMMAD WASEEM YAQUB is the named website contact for information-handling questions, requests and complaints, at [email protected]. References to “we”, “our” and “us” mean this website’s operation. The use of a UK-related domain name does not establish an operator’s residence, registered office or a particular legal jurisdiction.
For personal information whose purposes and means we determine, we are responsible for the processing required of us under applicable law. Independent game operators, advertisers and service providers may separately determine how they use information. Their roles depend on their services and agreements. We do not describe every recipient as a processor, or every Google service as having the same data-protection role.
This notice does not describe every service on the parent domain or every external site linked from a game. Opening another site can expose you to a separate policy, different retention periods and different privacy controls. Contact us if a link, embedded experience or disclosure is unclear.
Current features and advertising status
The homepage, game directory/category pages and game detail pages load Google Publisher Tag (GPT) from Google and configure publisher-supplied Ad Manager advertising slots. Loading that library connects your browser to Google and can disclose connection and browser information. The homepage includes Content1 and Content2 advertising containers and display calls. Category and all-games directory pages display Content3 below their introductions; game detail pages display Content2 below the game overview. Content3 is displayed after the detailed game introduction, before the gameplay FAQ. Google may receive advertising requests, consent or regulatory signals and related technical information; the actual ads served depend on the account, demand and configuration. No first-party analytics tags, separate advertising pixels or certified consent platform are installed. Browsing a game detail page does not load that game's external frame. A third-party game connects only when you open its dedicated play page using Play. That choice allows the connection; it is not consent to personalized advertising or all processing by the game provider.
We load Google Publisher Tag for Google Ad Manager inventory. Eligible Ad Exchange (AdX) demand and any separate AdSense integration depend on the actual publisher account and configuration. The advertising sections below explain these services and their potential data uses. They are not a claim that advertising is currently active, that Google has approved this website, or that every listed processing activity currently occurs. Before enabling advertising we must update actual partner disclosures and implement the required consent and opt-out tools.
Information involved in using the website
- Connection and security information: your browser sends an IP address, request URL, timestamp, browser and device information, and potentially a referring page to the infrastructure serving the site. Hosting and security providers may keep operational logs according to their configuration.
- Saved games: if you select Save game, game identifiers are stored in local storage on your device. No account, name or email is needed. These favorites are not intentionally transmitted to a MCDONALDSMENUUK profile server.
- Recently played: local storage keeps up to 20 game identifiers and the times you opened them, for up to 30 days. This history stays in this browser and does not save your in-game progress. You can clear it from Recently played or Privacy choices.
- Discovery state: session storage holds the previous homepage selection so the next visit can show a different ordering. Search and category filtering run in the browser; our interface does not send search terms to a dedicated analytics endpoint.
- Messages you send: contacting us by email provides your email address, message and any attachments you choose to include. Our email provider processes that correspondence.
- External games: once loaded, a game host receives connection information and may process game actions, identifiers, cookies, local saves, audio settings, progress and advertising data under its own policies.
We do not ask for payment information, a precise location, government identifiers, contacts, camera or microphone access. Please do not include sensitive personal data in support emails.
Data categories, sources and practical uses
| Category and source | Why information is involved | Who may receive it |
|---|---|---|
| Request details from your browser: IP address, user agent, requested URL, time and referrer where sent | Deliver pages, identify operational problems and protect infrastructure against abuse | The production host, network and security services; authorized operational staff where access is needed |
| Game identifiers and opening times stored by our interface | Provide saved games, recently opened games and a changing homepage selection | Stored locally by this site’s interface; no first-party profile database is used |
| Email address, message and voluntary attachments you send | Answer enquiries, review game or advertising reports and handle rights or privacy requests | The website contact, the mailbox provider and relevant support recipients when necessary |
| Connection information and game interactions after you choose Play | Load a provider’s game and support its own gameplay features | The independent game host and parties it connects to, according to its notices |
| Advertising identifiers, approximate location derived from IP, device/browser context, consent signals and ad events, if publisher advertising is enabled | Deliver, select, measure and protect ads, and personalize them where permitted | The configured Google services, CMP and actual participating advertising vendors disclosed at activation |
We obtain information primarily from your browser and your voluntary communications. A provider may also generate diagnostic or anti-abuse information while delivering its service. We do not purchase personal audience lists for this site, ask you to register a gaming profile, or operate public comment or chat accounts.
Not providing optional correspondence simply means we may be unable to investigate your individual issue. Refusing browser storage can prevent saved-game and history features from persisting. Optional advertising consent, where requested, must be separate from acceptance of our service terms.
Purposes and legal bases
We use information needed to deliver requested pages and features, maintain security, troubleshoot errors, answer correspondence, respect rights requests and comply with applicable obligations. Where the GDPR or UK GDPR applies, relevant bases may include providing a requested service, legitimate interests in a functioning and secure website, compliance with a legal obligation, and consent for processing that legally requires it. We assess the circumstances of the particular processing; a legal basis is not a blanket permission for unrelated use.
Where required, optional cookies, advertising personalization and associated data processing must depend on prior valid consent. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal. Merely browsing, accepting the service terms, or loading a game does not replace legally required consent.
Cookies and device storage
| Feature | Storage / duration | Purpose and control |
|---|---|---|
| Saved games | Local storage: mcdonaldsmenuuk.favorites; until cleared | Remember IDs of games you save. Remove individual games or clear saved games in Privacy choices. |
| Recently played | Local storage: mcdonaldsmenuuk.recent; up to 20 entries, up to 30 days | Return to recently opened games. Clear in Recently played or Privacy choices. |
| Homepage discovery | Session storage: mcdonaldsmenuuk.discovery; browser tab session | Avoid repeating the previous game selection. Clear in Privacy choices or close the session. |
| Independent games | Provider-controlled cookies or storage; varies by provider | Progress, settings, security, measurement or advertising. Review the provider's notices and your browser controls. |
| Future advertising | GPT is loaded from Google; Content1 and Content2 display calls are installed on the homepage | Google and actual participating vendors, purposes and durations must be disclosed through the deployed advertising privacy and consent controls. |
Browser settings can block or delete cookies and site data, including third-party storage. Blocking storage can affect saved games or game functionality. The Privacy choices controls clear MCDONALDSMENUUK's three storage keys; they cannot delete storage held on another domain.
Google advertising and data use
If we enable Google AdSense, Google Ad Manager or AdX, third-party vendors including Google may use cookies, web beacons, IP addresses, device identifiers and similar technologies to serve and measure ads. Those vendors may serve ads based on your previous visits to this website and other websites. Google's advertising cookies enable Google and its partners to present ads based on visits to this and other sites across the Internet, subject to applicable permissions and settings.
Ad-related processing can include ad delivery, frequency capping, aggregate reporting, viewability and performance measurement, fraud and invalid-traffic detection, security and, when permitted, personalization. Non-personalized advertising can still involve cookies or other storage for functions such as measurement and fraud prevention; it does not automatically remove consent obligations.
Read How Google uses information from sites or apps that use its services, Google's Privacy Policy and Google's advertising technology information. Manage Google's personalized advertising through My Ad Center. Additional industry choices are available through DAA WebChoices and Your Online Choices. These controls may be specific to a device or browser and do not necessarily stop all advertising.
We have not supplied an active AdX buyer or advertising-network list for this version because the full participating buyer/vendor configuration has not been provided for this version. Any future consent interface must identify actual participating vendors, their purposes and privacy notices. We do not send names, email addresses or other directly identifying personal information to Google through advertising tags.
Google AdSense, Ad Manager and Ad Exchange explained
The website is intended to be supported by publisher advertising. Google Ads is an advertiser-facing service; the publisher products contemplated for this website are Google AdSense and Google Ad Manager, including eligible Ad Exchange (AdX) demand. References to those products describe intended monetization, not an assertion of account approval, a direct Google partnership, or guaranteed ad availability.
AdSense can provide advertising selected and served through Google’s publisher system. Ad Manager can manage inventory and demand relationships, including eligible AdX or other authorized demand partners. An auction can involve multiple eligible buyers and technology providers. The actual parties depend on the publisher account and configuration. We have not published a fictional list of advertisers or a claim that every Google advertising partner participates here.
If enabled, an ad request may convey the page context, device and browser details, IP-derived approximate location, identifiers where permitted, and consent or regulatory signals. Ad selection may be contextual, personalized, non-personalized or otherwise restricted according to eligibility, configuration, location and user choices. Measurement can involve impressions, delivery errors, visibility, interactions, frequency and invalid-traffic indicators. We do not need your name or email address to display an ordinary game listing.
The precise cookie names, vendors and retention periods must be available through the production consent and vendor disclosures when those services become active. The website currently loads Google Publisher Tag and configures Ad Manager slots on its homepage, game directory/category pages and game detail pages. The homepage includes two advertising containers and display calls; category and all-games directory pages display Content3, while game detail pages display Content2 below the game overview. No first-party analytics tags are deployed. Independent game providers may deploy their own services inside the game experience, which require separate review and controls.
Consent and advertising choices
Before serving relevant Google ads to visitors in the European Economic Area, United Kingdom or Switzerland, we must implement the applicable Google consent requirements, including a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework where required. Optional tags must respect the choices collected by that platform. A generic notice or our local Privacy choices dialog is not a substitute for that certified platform.
You should be able to review, refuse or change optional purposes and withdraw consent through the deployed consent platform when advertising is introduced. At present, Privacy choices explains the Google advertising implementation and lets you clear the site's saved game and discovery data. For other requests, email [email protected].
How consent, refusal and withdrawal should work
For processing that requires consent, choices must be informed, specific and made before the relevant optional processing starts. A consent platform should explain purposes, identify vendors and offer a way to revisit choices. Continuing to browse, closing an information panel, choosing Play or accepting service terms does not by itself authorize personalized advertising.
Where applicable to EEA, UK and Swiss visitors, Google’s requirements for personalized publisher ads call for a Google-certified CMP integrated with the IAB Transparency and Consent Framework. Certification does not itself establish complete legal compliance. We must configure the actual services to respect the signals collected, including refusal and later withdrawal. Consent Mode or a custom cookie banner alone is not a substitute for a required certified CMP.
If advertising is introduced, you should be able to reopen its privacy message through a clearly identified control. Withdrawal applies to future processing dependent on consent; it does not automatically erase previous records or provider-controlled storage. Your browser can also delete cookies and storage. Deleting a consent record can cause the platform to ask again on a later visit.
Choosing non-personalized ads does not necessarily mean that no cookies or personal information are used. Limited or other restricted ad modes have separate technical conditions. Whether a particular mode can be served after refusal depends on applicable law, the deployed CMP and the advertising product; this notice does not promise an automatic fallback in all circumstances.
Recipients and international processing
Information may be processed by hosting, security and email service providers as needed to deliver those services; by game hosts you choose to connect to; and, if enabled in future, disclosed advertising and consent-management partners. We may disclose relevant information when legally required, to respond to valid process or to protect users and the service against abuse. We do not operate a first-party personal-data marketplace.
Infrastructure, email and game providers can process information in countries other than your own. Where applicable, transfers of personal data require an appropriate legal mechanism and safeguards. Contact us for details about a specific MCDONALDSMENUUK-controlled transfer; independent game providers are responsible for their own transfers and notices.
Search, browser signals and email
Search text may appear in a page URL when you submit a search; that URL may be recorded by hosting infrastructure and in browser history. Do not type sensitive information into game search. Our interface does not use fingerprinting to recognize visitors or make automated decisions with legal or similarly significant effects. Email is handled by the mailbox provider, so its security and retention also depend on that service.
Where a legally recognized Global Privacy Control signal applies to a future sale or sharing of data, the deployed advertising configuration must honor it. The current publisher code does not set custom audience targeting; that alone does not exclude Google advertising from legal definitions of sale, sharing or targeted advertising. A browser signal does not delete information already held by independent game providers.
Retention and security
Local favorites remain until you remove them or clear browser data. Recently played history retains up to 20 entries for up to 30 days; expired entries are ignored and removed when the history is next read or updated. Discovery state lasts for the browser tab session. We keep support correspondence only as long as reasonably needed to address the matter and meet legitimate legal or security needs. Operational log retention depends on the hosting provider's configuration. We do not claim a fixed log-retention period that has not been verified with the production host.
We use proportionate measures to protect information and minimize unnecessary third-party requests. No website, transmission or external game can be guaranteed completely secure. Report suspected security issues privately to [email protected]; include the affected URL and sufficient detail to reproduce the issue without exposing other visitors' data.
Sharing limits, safeguards and security incidents
Access to support correspondence should be limited to people who need it for the relevant enquiry, administration or legal obligation. We do not intentionally include personal contact information in public catalog pages or pass email addresses in advertising URLs. If a report must be shared with a game provider, we aim to share the minimum details needed to explain the issue rather than automatically forward an entire message and its attachments.
International processing can occur through hosting, email, game and advertising infrastructure. Where legally required, the responsible organization must use an applicable adequacy decision, contractual safeguards or other lawful transfer mechanism. We have not asserted that every provider processes data in the UK or EEA. Ask us about a particular first-party service or transfer if you need further details.
We aim to use HTTPS, maintain the website’s code, limit unnecessary external requests and avoid collecting information that the service does not need. Security also depends on infrastructure configuration and the independent providers you choose to load. If an incident affecting personal data under our responsibility occurs, we will assess it and provide notifications to affected people and authorities when legally required. Reporting a suspected problem does not authorize intrusive testing or access to other people’s data.
Your privacy rights
Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. If relevant US state privacy laws apply, these may also include rights to know, data portability, and opting out of a sale, sharing for cross-context behavioral advertising or targeted advertising. We do not set custom audience targeting in our current publisher code; Google and participating advertising providers may process information according to the advertising configuration and applicable choices. If future advertising falls within those definitions, appropriate opt-out mechanisms and recognition of legally required preference signals must be implemented before that processing begins.
To request help, email [email protected] with the subject “Privacy request” and describe the request and relevant interaction. We may ask for proportionate verification, will not require unnecessary sensitive documents, and will respond within applicable legal deadlines. We will not discriminate against you for exercising applicable rights. If an applicable right to appeal exists, reply to our decision asking for review. Browser Do Not Track settings do not have a universal response standard; do not rely on that setting alone as an opt-out mechanism.
EEA, UK, Switzerland and other regional rights
Where European or UK data-protection law applies, you can ask what personal data we hold about you, request a copy, seek correction, ask for erasure in appropriate circumstances, request restriction, and object to qualifying processing. Portability applies to qualifying automated processing based on consent or contract. You may object to direct marketing and withdraw consent where it is the processing basis. These rights have conditions and exemptions; for example, relevant records may have to be retained to meet legal duties or defend legal claims.
Where applicable US state privacy laws cover the website’s processing, rights may include access, correction, deletion, portability and opting out of targeted advertising, sale or sharing as those laws define them. Some laws provide a right to appeal a decision or use an authorized agent. We do not sell visitor lists or set custom audience targeting in our publisher code. Google advertising may involve personal information and activities that qualify as targeted advertising or sharing under applicable law, depending on configuration. If the future advertising setup triggers such obligations, the necessary opt-out process and preference-signal handling must be in place before that processing begins.
We do not use sensitive personal information to build advertising audiences through our current interface. Do not submit sensitive information through a support request. If you use an authorized agent, we may request appropriate evidence of authority and verification consistent with the applicable law. We do not require a support account to exercise a right.
You may complain to the data-protection authority where you live or work, or where an alleged infringement occurred, as provided by applicable law. UK visitors can find complaint information from the Information Commissioner’s Office. You need not give up the ability to contact a regulator by contacting us first.
How to make a privacy request
- Email [email protected] with Privacy request in the subject. State the right or question involved and the interaction concerned, such as a previous support email.
- Give only the information reasonably needed to locate the relevant record. A page URL and approximate date may help; a password, full identity document or payment-card number generally does not.
- We may ask proportionate questions to verify identity or authority, clarify the scope, or distinguish your information from someone else’s.
- We will respond within the deadlines applicable to the request. If a permitted extension or exemption applies, we will explain it as required. We do not publish an unconditional response guarantee that ignores legal conditions.
- If you disagree with the outcome, reply asking for review, explain your concern and identify the original correspondence. Statutory appeal and regulator rights remain available where applicable.
Because browser-only favorites and history are not attached to a server account, we may not be able to retrieve them for you. Use Privacy choices or browser settings to clear those records. We cannot access or delete another game host’s records merely because its game appears in our catalog; we can help identify the relevant listing for your enquiry.
Children and families
MCDONALDSMENUUK is a general-audience discovery service, not a service specifically directed at children under 13. We do not knowingly solicit personal information from children under 13, or below a higher applicable local age without appropriate authorization. Families should supervise access to external games, which can have separate content, advertising and age requirements. A colorful cover is not an age rating.
If you believe a child has provided us personal information, contact [email protected] so we can investigate and take appropriate action. Do not send additional information about a child beyond what is necessary to identify the concern. We do not knowingly permit personalized advertising based on the data of users for whom that processing is prohibited.
Communications, marketing and changes in ownership
Contacting support does not subscribe you to a newsletter. The current website has no newsletter signup, first-party push-notification subscription or account marketing system. Replies concerning a request are service communications. If we introduce a separate marketing feature, we must explain its purpose, applicable choice mechanism and means to stop receiving those messages.
If the website’s operation changes through a transfer, restructuring or similar event, relevant records may be disclosed subject to applicable law and appropriate confidentiality safeguards. A new operator must not treat this paragraph as unrestricted permission to repurpose personal data. Material changes to responsibility, purposes or choices will require updated disclosures and additional notice or consent when required.
Updates and contact
This policy was updated on November 3, 2026. We will revise the date and disclosures when relevant features, partners or practices change, and provide additional notice or obtain new consent when required. Questions and complaints can be sent to [email protected]. You may also review our Terms of Service, Cookie Policy and Contact page.