Privacy Policy

Who we are and what this policy covers

MCDONALDSMENUUK is the website brand; the contact responsible for this service and privacy inquiries is MOHAMMAD WASEEM YAQUB, reachable at [email protected]. MCDONALDSMENUUK operates the game discovery website at https://funplay.mcdonaldsmenuuk.com. This policy explains information handled through our own pages and the privacy implications of loading independently hosted games. For questions or to make a privacy request, contact [email protected]. We do not require a MCDONALDSMENUUK account to browse or play.

Third-party developers and hosting providers operate the embedded games. Their own notices apply to information they collect inside those games. Our inclusion of a game does not make us its developer or the controller of every use of information by that provider.

Website responsibility and independent providers

The website covered by this notice is funplay.mcdonaldsmenuuk.com, the MCDONALDSMENUUK H5 game platform. The service and privacy contact is MOHAMMAD WASEEM YAQUB, [email protected]. A reference to “we”, “us” or “our” concerns this website and the information handled for its own operation. It does not mean every business whose content, advertising or services may be displayed through an external game.

For information handled to operate our pages, local features and correspondence, direct your request to us. An external game provider, advertiser or advertising technology company may act separately in relation to its own processing. Depending on the particular service and contract, a partner may instead process specified information on behalf of another party. The relevant provider’s notice and actual arrangement determine that role; the presence of a game on our website does not establish a single shared privacy policy.

The MCDONALDSMENUUK brand is independent of McDonald’s Corporation and its restaurant businesses. This website does not provide official restaurant accounts, ordering, loyalty services or restaurant customer support. Please do not send us restaurant account credentials or order payment details.

Current features and advertising status

This version does not load MCDONALDSMENUUK advertising tags, analytics tags, advertising pixels or a third-party consent platform. Browsing a game detail page does not load that game's external frame. A third-party game connects only when you open its dedicated play page using Play. That choice allows the connection; it is not consent to personalized advertising or all processing by the game provider.

We plan to consider Google AdSense and Google Ad Manager / Ad Exchange (AdX). The advertising sections below explain those planned services. They are not a claim that advertising is currently active, that Google has approved this website, or that every listed processing activity currently occurs. Before enabling advertising we must update actual partner disclosures and implement the required consent and opt-out tools.

Information involved in using the website

• Connection and security information: your browser sends an IP address, request URL, timestamp, browser and device information, and potentially a referring page to the infrastructure serving the site. Hosting and security providers may keep operational logs according to their configuration.
• Saved games: if you select Save game, game identifiers are stored in local storage on your device. No account, name or email is needed. These favorites are not intentionally transmitted to a MCDONALDSMENUUK profile server.
• Recently played: local storage keeps up to 20 game identifiers and the times you opened them, for up to 30 days. This history stays in this browser and does not save your in-game progress. You can clear it from Recently played or Privacy choices.
• Discovery state: session storage holds the previous homepage selection so the next visit can show a different ordering. Search and category filtering run in the browser; our interface does not send search terms to a dedicated analytics endpoint.
• Messages you send: contacting us by email provides your email address, message and any attachments you choose to include. Our email provider processes that correspondence.
• External games: once loaded, a game host receives connection information and may process game actions, identifiers, cookies, local saves, audio settings, progress and advertising data under its own policies.

We do not ask for payment information, a precise location, government identifiers, contacts, camera or microphone access. Please do not include sensitive personal data in support emails.

Purposes and legal bases

We use information needed to deliver requested pages and features, maintain security, troubleshoot errors, answer correspondence, respect rights requests and comply with applicable obligations. Where the GDPR or UK GDPR applies, relevant bases may include providing a requested service, legitimate interests in a functioning and secure website, compliance with a legal obligation, and consent for processing that legally requires it. We assess the circumstances of the particular processing; a legal basis is not a blanket permission for unrelated use.

Where required, optional cookies, advertising personalization and associated data processing must depend on prior valid consent. You may withdraw consent without affecting the lawfulness of processing carried out before withdrawal. Merely browsing, accepting the service terms, or loading a game does not replace legally required consent.

Cookies and device storage

Browser settings can block or delete cookies and site data, including third-party storage. Blocking storage can affect saved games or game functionality. The Privacy choices controls clear MCDONALDSMENUUK's three storage keys; they cannot delete storage held on another domain.

Planned Google advertising and data use

If we enable Google AdSense, Google Ad Manager or AdX, third-party vendors including Google may use cookies, web beacons, IP addresses, device identifiers and similar technologies to serve and measure ads. Those vendors may serve ads based on your previous visits to this website and other websites. Google's advertising cookies enable Google and its partners to present ads based on visits to this and other sites across the Internet, subject to applicable permissions and settings.

Ad-related processing can include ad delivery, frequency capping, aggregate reporting, viewability and performance measurement, fraud and invalid-traffic detection, security and, when permitted, personalization. Non-personalized advertising can still involve cookies or other storage for functions such as measurement and fraud prevention; it does not automatically remove consent obligations.

Read How Google uses information from sites or apps that use its services, Google's Privacy Policy and Google's advertising technology information. Manage Google's personalized advertising through My Ad Center. Additional industry choices are available through DAA WebChoices and Your Online Choices. These controls may be specific to a device or browser and do not necessarily stop all advertising.

We have not supplied an active AdX buyer or advertising-network list for this version because no such MCDONALDSMENUUK integration is enabled. Any future consent interface must identify actual participating vendors, their purposes and privacy notices. We do not send names, email addresses or other directly identifying personal information to Google through advertising tags.

Advertising information: sources, purposes and recipients

The following describes the intended advertising model if Google publisher advertising is activated. Google AdSense, Google Ad Manager and Google Ad Exchange (AdX) support the sale and delivery of advertising space. Advertising may be selected using page context or, where permitted, information connected with a browser, device or advertising profile. Neither a listing in this policy nor the presence of a space reserved for an ad means that a particular advertising partner is currently receiving your information.

• Request information: an advertising request may include the page address, ad-space characteristics, language, browser and device characteristics, IP address, approximate location inferred from network information, and available consent or opt-out signals.
• Identifiers and storage: permitted cookies, browser identifiers and similar technologies may distinguish requests, remember preferences, limit repetition, detect abuse or support authorized personalization.
• Delivery and interaction: partners may receive information about an ad being requested, delivered, visible or interacted with, along with technical failures and aggregate performance information.
• Context: the subject of a page, such as puzzle games or sports games, may be used to select relevant advertising without relying on a first-party account.
• Recipients: when configured and permitted, Google, disclosed ad technology providers, advertisers, demand partners, measurement providers and fraud-prevention services may participate in delivery or measurement. The active vendor list must be available through the deployed advertising privacy interface.

We do not deliberately supply the content of your support email, your email address, passwords or payment information as ad-targeting parameters. Please avoid putting personal or sensitive information in site search queries or page URLs. A URL may be visible to the infrastructure serving a page even when the search interface otherwise operates locally.

Ad auctions, measurement and security checks can involve more than one provider. An advertiser’s destination website has its own privacy terms when you choose to visit it. Selecting an ad is optional and is not required to access an ordinary game listing.

Personalized, contextual and limited advertising

Personalized advertising may use permitted information about interests or activity over time, including prior visits to this website and other websites. Google and its partners may use advertising cookies to support that process where the relevant permissions and settings allow it. The exact purposes and partners depend on the production configuration and the choices presented to you.

Contextual or non-personalized advertising generally relies more on the page, broad location or other contextual signals. Such advertising may still involve processing an IP address or using storage for security, reporting, frequency limits or fraud prevention. Choosing a non-personalized mode is not a statement that no data is processed or that consent requirements automatically disappear.

Limited advertising or no advertising may be appropriate when the applicable permissions or technical conditions do not allow other modes. We will not interpret an absent, invalid or withdrawn consent signal as permission to begin optional personalized processing. The actual response must follow the configured platform, applicable law and the relevant Google product requirements.

Refusing optional advertising purposes should not be described as opting out of every advertisement on the Internet. A provider may still show a permitted contextual advertisement, and external websites or games can have separate arrangements. Your choices do not change processing that an independent provider lawfully carries out on its own basis.

Consent and advertising choices

Before serving relevant Google ads to visitors in the European Economic Area, United Kingdom or Switzerland, we must implement the applicable Google consent requirements, including a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework where required. Optional tags must respect the choices collected by that platform. A generic notice or our local Privacy choices dialog is not a substitute for that certified platform.

You should be able to review, refuse or change optional purposes and withdraw consent through the deployed consent platform when advertising is introduced. At present, Privacy choices explains the inactive advertising status and lets you clear the site's saved game and discovery data. For other requests, email [email protected].

How consent, refusal and withdrawal work

When a certified advertising consent platform is deployed, read its first layer and detailed settings before making a choice. The settings should explain the available purposes, participating vendors, applicable legal bases and methods for changing your choice. Accepting all optional purposes, refusing them and selecting available individual preferences must be interpreted according to what that interface actually says.

We do not treat scrolling, remaining on the page, opening a game, accepting service terms or closing a generic information notice as consent to optional advertising. When prior consent is necessary, optional processing must wait for a valid choice. A provider’s independently embedded game must also have an appropriate basis for its own collection; the Play button is a request to connect to that provider, not a general advertising consent button.

You may change or withdraw a choice through the advertising privacy settings once that system is active. A change applies to future processing subject to the platform’s operation; it does not retroactively invalidate lawful processing before withdrawal or necessarily delete information already lawfully retained. A new browser, cleared storage, private browsing or a different device may require you to set your preferences again.

Current control: the footer’s Privacy choices dialog clears our local saved-game, recently-played and discovery data. It does not collect IAB TCF consent, send an advertising opt-out request, or clear Google’s or a game provider’s cookies. The website’s publisher ad tags are inactive in this version. Email [email protected] if you need help identifying the relevant control.

Recipients and international processing

Information may be processed by hosting, security and email service providers as needed to deliver those services; by game hosts you choose to connect to; and, if enabled in future, disclosed advertising and consent-management partners. We may disclose relevant information when legally required, to respond to valid process or to protect users and the service against abuse. We do not operate a first-party personal-data marketplace.

Infrastructure, email and game providers can process information in countries other than your own. Where applicable, transfers of personal data require an appropriate legal mechanism and safeguards. Contact us for details about a specific MCDONALDSMENUUK-controlled transfer; independent game providers are responsible for their own transfers and notices.

Retention and security

Local favorites remain until you remove them or clear browser data. Recently played history retains up to 20 entries for up to 30 days; expired entries are ignored and removed when the history is next read or updated. Discovery state lasts for the browser tab session. We keep support correspondence only as long as reasonably needed to address the matter and meet legitimate legal or security needs. Operational log retention depends on the hosting provider's configuration. We do not claim a fixed log-retention period that has not been verified with the production host.

We use proportionate measures to protect information and minimize unnecessary third-party requests. No website, transmission or external game can be guaranteed completely secure. Report suspected security issues privately to [email protected]; include the affected URL and sufficient detail to reproduce the issue without exposing other visitors' data.

Retention criteria, deletion and device limitations

Retention is tied to the feature and purpose involved. Saved-game identifiers remain in local storage until you remove them or clear site data. Recently-played entries are limited to 20 and expire from the feature after 30 days; expired entries are removed when the feature next reads or updates them. Session discovery data generally lasts for the browser tab session. Closing a browser does not guarantee immediate deletion where the browser restores sessions or retains a backup.

For correspondence, relevant criteria include whether the question has been resolved, whether follow-up or an appeal is still needed, and whether a legal, security or rights concern requires preservation. Operational log retention is controlled by the production hosting and security configuration; no fixed number of days is asserted here without that configuration being confirmed. We do not use indefinite retention as a default justification for holding everything.

Advertising and game-provider cookies have their own settings, expiry rules and deletion controls. A cookie can expire while a provider retains a related record for another lawful period. Consult the provider’s current notice and deployed vendor information for those periods. Clearing this site’s local data does not delete information held by Google, your email provider or an independent game host.

Deletion requests and technical deletion are subject to the systems involved. Browser backups, device synchronization and independent provider accounts may require separate actions. If you share a browser, another person using it may see saved games or recent titles; clear those features when you do not want them to remain on that device.

Security, international transfers and automated processing

Our pages minimize external connections before a game is opened. The player uses an isolated external frame with restrictions on popup and top-level navigation behavior. These restrictions reduce particular risks; they do not establish that every provider build is secure, licensed, free from advertising or suitable for every visitor. Do not provide sensitive information merely because a request appears inside a game window.

Providers may process information in another country. Where an applicable law restricts transfers, the relevant parties must use an available legal mechanism, such as an applicable adequacy decision or appropriate contractual safeguards, and any additional measures that the circumstances require. This policy does not assert that every provider is located in one country or covered by a transfer framework that has not been verified. Contact us for information about a specific transfer within our responsibility.

Homepage selection uses random rotation and basic game-category information. Related-game suggestions compare game subjects and descriptions; they do not require a visitor account or a personal advertising profile. The website does not use these suggestions to decide eligibility for employment, credit, insurance or a similarly consequential service. Advertising partners may use automated selection or measurement systems according to their own notices and the applicable permissions.

If you suspect a security incident, contact us privately with the affected URL, approximate time and a description that avoids exposing another person’s information. We assess relevant reports and take appropriate action. Where a personal-data incident triggers a legal notification obligation, the required notifications must be made in accordance with that obligation.

Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. If relevant US state privacy laws apply, these may also include rights to know, data portability, and opting out of a sale, sharing for cross-context behavioral advertising or targeted advertising. We do not currently deploy first-party targeted-advertising tags. If future advertising falls within those definitions, appropriate opt-out mechanisms and recognition of legally required preference signals must be implemented before that processing begins.

To request help, email [email protected] with the subject “Privacy request” and describe the request and relevant interaction. We may ask for proportionate verification, will not require unnecessary sensitive documents, and will respond within applicable legal deadlines. We will not discriminate against you for exercising applicable rights. If an applicable right to appeal exists, reply to our decision asking for review. Browser Do Not Track settings do not have a universal response standard; do not rely on that setting alone as an opt-out mechanism.

Additional information for regional privacy rights

EEA, United Kingdom and Switzerland: where the relevant data protection laws apply, you can contact us about access, correction, deletion, portability, restriction, objection and withdrawal of consent. The availability of a particular right depends on the information and legal basis involved. You may also complain to the competent data-protection authority. We encourage you to contact us so we can investigate, but this does not remove any right to approach an authority directly.

California and other applicable US states: some advertising disclosures may qualify as a “sale”, “sharing” for cross-context behavioral advertising, or processing for targeted advertising even when no money is paid for a specific record. We do not claim that the absence of a direct cash sale removes those obligations. At present our own publisher advertising integration is inactive. If a future configuration falls within the applicable definitions, the corresponding opt-out mechanisms and legally required preference-signal handling must operate before that processing begins.

Where applicable, you may request information about categories, sources, purposes and recipients of personal data; access, correct, delete or obtain a portable copy; opt out of relevant sale, sharing or targeted advertising; and appeal a decision. We will not deny ordinary service, charge a discriminatory price or retaliate merely because you exercise a right protected by applicable law. This website does not currently offer a financial incentive programme for providing personal information.

Global Privacy Control and other legally recognized signals must be handled as required in the relevant jurisdiction when the related processing is active. The present local-data dialog is not a GPC acknowledgement interface. Browser Do Not Track is a separate setting and does not itself establish the same technical or legal meaning as every recognized opt-out signal.

Submitting, verifying and following up a privacy request

Email [email protected] with Privacy request in the subject. Describe the right you wish to exercise, the approximate date of your interaction and enough context to locate the relevant information. A support email can usually be identified by the email address used to send it. A local bookmark or recently-played list normally exists only on your device; we cannot retrieve a server-side account record that this website does not maintain.

We may ask for proportionate information to verify a request and prevent disclosure to the wrong person. We do not routinely require a passport, government identifier, payment information or a password. If an authorized agent acts on your behalf, we may request evidence of that authority and any verification required by law. We will explain when we cannot identify the relevant information rather than inventing a profile or requiring you to create one.

We respond within the deadlines required by applicable law. If a lawful extension, exception or restriction applies, we will explain it as required. Deletion may be limited by a legal obligation, a valid security need or the need to establish or defend a legal claim. Where practical and appropriate, the response will identify the information affected and the next steps available to you.

If you disagree with a decision, reply with Privacy appeal, identify the request and explain the concern. We will review the matter to the extent required by applicable law and explain the outcome. You retain any independent complaint or appeal rights available through a regulator or court.

Children and families

MCDONALDSMENUUK is a general-audience discovery service, not a service specifically directed at children under 13. We do not knowingly solicit personal information from children under 13, or below a higher applicable local age without appropriate authorization. Families should supervise access to external games, which can have separate content, advertising and age requirements. A colorful cover is not an age rating.

If you believe a child has provided us personal information, contact [email protected] so we can investigate and take appropriate action. Do not send additional information about a child beyond what is necessary to identify the concern. We do not knowingly permit personalized advertising based on the data of users for whom that processing is prohibited.

Updates and contact

This policy was updated on November 3, 2026. We will revise the date and disclosures when relevant features, partners or practices change, and provide additional notice or obtain new consent when required. Questions and complaints can be sent to [email protected]. You may also review our Terms of Service, Cookie Policy and Contact page.