Your Data Aboard

Who is responsible

The controller for personal data processed through paddlesteamerreach.com is the operator of paddlesteamerreach.com. Contact: [email protected].

Your account, entry by entry

Entry in the log	Why the captain keeps it	Kept in the ship’s log until
Nickname	Your name on the steamer’s passenger list	Until you scrap the account
Email address	Finding your berth when you log back in	Until you scrap the account
Password hash	Checking your password without ever holding it	Until you scrap the account
Sign-up date	Help requests and abuse reports to the crew	Until you scrap the account

Nothing beyond that. No real name, no address, no date of birth, no phone number, no payment detail: there is nothing aboard to pay for. Passwords are kept only as a one-way hash. Lawful basis: performance of a contract (you asked for an account; we provide it). Delete the account and all of it goes at once. The button is on your account page.

Held in your own browser

Entry in the log	Why the boat stows it	Kept in the ship’s log until
Coins, level, missions, plus settings for each world	Carrying on your trip up the Lanwell	Kept until the browser data on this machine is wiped
Age confirmation	Not showing the banner on every page	Kept until the browser data on this machine is wiped
Cookie choice	Logging your cookie answer	Kept until the browser data on this machine is wiped

It never leaves your device. We do not receive it.

Google tags: only if you say so

Choose “Accept all” and Google Analytics and Google Ads tags measure visits and whether adverts lead to play (a first spin, say). Google gets your IP address, device information and those events. Choose “Essential only” and the tags run in consent mode: no cookies, no advertising identifiers. Lawful basis: consent.

Logs on our host’s servers

Our host keeps routine request logs, briefly, for security. Lawful basis: legitimate interests.

What we will not do with data

Take payment data. There is nothing to buy.
Send you marketing email you never asked for.
Sell your data, or rent it out.
Share with gambling operators, or carry gambling affiliate links.

Your rights under UK GDPR, in brief

Access, correct, erase, restrict, object to processing, withdraw consent: all yours, any time. Deleting your account on the account page erases its data straight away. Clearing this site’s data in your browser removes the rest. Complaints go to the ICO at ico.org.uk.