Last updated: 16 October 2026
This policy explains what personal data mkmobile.info collects, why, who it is shared with, how long it is kept and what your rights are. In short: you can read the whole site without an account, we never sell your data, and you can delete your account yourself at any time.
Who is responsible for your data
The data controller is WHIZ ART MEDIA Ltd, UIC 206971482, VAT number BG206971482, registered address: m-t Peshterna Reka 754V, Sliven, Bulgaria. Email: [email protected].
mkmobile.info is a fan site. It is not affiliated with Warner Bros. Games or NetherRealm Studios, and we have no access to your Mortal Kombat Mobile game account.
What we collect and why
When you browse the site
- Delivering and protecting the site. Our hosting provider (in the EU) and Cloudflare, which protects and speeds up the site, process your IP address, browser details and the pages you request. Legal basis: our legitimate interest in running a secure, working website.
- Statistics (Google Analytics). If you allow it in the consent message, Google Analytics records which pages you visit, how you got here, your device type and approximate location (country or city), using cookies. We use this only to understand which content is useful. Legal basis: your consent.
- Advertising (Google AdSense). The site is funded by ads served by Google. Depending on your choice in the consent message, Google and its partners show personalised or non-personalised ads and use cookies to do so, limit how often you see an ad and detect fraud. Legal basis: your consent (and, for non-personalised ads, our legitimate interest in funding the site). See how Google uses information from sites that use its services.
- Videos. YouTube videos are shown as a preview image. Nothing is loaded from YouTube until you press play; then YouTube's own privacy policy applies.
- Security logs. Requests to addresses that only attack tools use (for example /wp-admin) are logged with the IP address and an approximate location looked up through the ipstack service. Legal basis: our legitimate interest in protecting the site.
When you create an account
- Account details: your name, email address and password (stored only as a bcrypt hash, never in readable form), and anything you add to your profile, such as a username, picture, country or phone number.
- Sign in with Google or Facebook: we receive your name, email address and profile picture from Google or Meta. We check the sign-in with them directly; we never see your Google or Facebook password.
- Sign-in security: the IP address, browser and operating system of your latest sign-in, to spot misuse of your account.
Legal basis: providing the account you asked for (contract), and our legitimate interest in keeping accounts secure. You must be at least 16 to create an account.
What you add to the site
- Ratings and comments, team suggestions and uploaded videos are shown publicly with your username or name. Videos you upload may be featured on our YouTube channel, as explained on the upload page.
- Kurators (invited editors): we keep a record of the changes you submit and who approved them.
Legal basis: providing the features you choose to use (contract).
When you contact us or subscribe
- Contact form: your name, email address, phone number and message are sent to our mailbox so we can reply. Legal basis: our legitimate interest in answering you.
- Newsletter: your name and email address, only if you subscribe. Every email has an unsubscribe link. Legal basis: your consent, which you can withdraw at any time.
- Spam protection: forms use Google reCAPTCHA, which loads when you start filling in a form and analyses device and interaction data to tell people from bots. Legal basis: our legitimate interest in preventing spam and abuse.
Affiliate links
Some links to shops (marked as sponsored) go through mkmobile.info/go/. When you click one, we record the time, which offer it was, your country (as reported by Cloudflare) and the page you came from, but not your IP address or identity. The shop and its affiliate network (for example Impact or Kinguin) then set their own cookies to credit the sale to us, under their own privacy policies. We never receive your purchase or payment details.
Cookies and similar technologies
- Strictly necessary: a session cookie (PHPSESSID) that keeps you signed in, set only when you sign in and deleted when you close the browser; a cookie that stores your consent choices (Google's consent message); and short-lived browser storage that reopens a window, such as the rating window, after you sign in.
- Sign-in: Google sets a small cookie (g_state) when its sign-in button is shown. Facebook's cookies load only when you choose to sign in with Facebook.
- Statistics: Google Analytics cookies (_ga, _ga_*), kept for up to 2 years, only with your consent.
- Advertising: Google advertising cookies (such as __gads, __gpi and IDE), only as allowed by your consent choices.
- Spam protection: reCAPTCHA cookies, when you use a form.
You can change your choices at any time with the Privacy and cookie settings link at the bottom of every page, and delete cookies in your browser settings.
Who we share data with
We do not sell your personal data. We share it only with service providers that run parts of the site for us, or that you choose to use:
- our hosting provider (EU), which stores the site and its database;
- Cloudflare, which delivers and protects the site;
- Google, for Analytics, AdSense, reCAPTCHA, Google sign-in and YouTube;
- Meta, if you sign in with Facebook;
- apilayer (ipstack), for the location look-up in security logs;
- affiliate networks and shops, only after you click one of their links.
Some of these companies are based in the United States. Transfers rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
We may also disclose data where the law requires it, for example to a court or the police.
How long we keep data
- Account and profile: until you delete your account. Your ratings, comments and uploads are deleted with it.
- Contact messages: up to 2 years after the conversation ends.
- Newsletter: until you unsubscribe.
- Security logs: up to 12 months.
- Affiliate click records: up to 24 months, to match our earnings reports.
- Google Analytics: 14 months.
Your rights
Under the GDPR you can ask to see the personal data we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; this doesn't affect what we did before.
You can edit your profile and delete your account yourself from your account page. For anything else, email [email protected]. We reply within one month.
If you think we've handled your data wrongly, you can complain to the Bulgarian data protection authority, the Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592), or to the authority in the EU country where you live.
Children
You can read the site at any age, but you must be at least 16 to create an account, post ratings or comments, upload videos or subscribe to the newsletter. If we learn that someone under 16 has an account, we delete it.
Security
The whole site uses HTTPS, passwords are stored only as secure hashes, and access to the admin area is restricted. No system is completely secure, but we work to protect your data and will tell you and the authorities if a breach puts your data at risk, as the law requires.
Changes to this policy
When we change this policy we update the date at the top. If the change is significant, we announce it on the site and, where it affects account holders, by email.
Questions? Email [email protected] or use the contact page. You can also read our Terms and Conditions.