Your Data and Puffinholm Isle: Privacy under UK GDPR

Who on the isle answers for your data

The controller for personal data processed through puffinholmisle.com is the operator of puffinholmisle.com. Contact: [email protected].

Inside the account, line by line

Piece kept on the isle	Why the isle keeps it	How long it stays on the isle
Nickname	Putting your nickname above the reels	Until you remove the account yourself
Email address	Matching you to your account at each login on the isle	Until you remove the account yourself
Password hash	Checking your login while we never see the password itself	Until you remove the account yourself
Sign-up date	Answering notes to the croft and dealing with misuse	Until you remove the account yourself

Nothing else is collected. We never ask for your real name, a postal address, your date of birth, a phone number or any payment detail, since the site has nothing to pay for. Your password is held only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked for). Deleting the account wipes all of this at once, and your account page has a button for exactly that.

Kept on your side, in the browser

Piece kept on the isle	Its use to you	How long it stays on the isle
Your coin tin, level, missions and game settings	Picking up where you left the reels	Until you wipe the browser’s site data
Age confirmation	Not asking you again on page after page of the isle	Until you wipe the browser’s site data
Cookie choice	Keeping a note of your answer	Until you wipe the browser’s site data

All of this stays on your device; none of it crosses the water to us.

Google measurement, if you allow it

Pick “Allow analytics” and we load Google Analytics and Google Ads tags to count visits and see whether our adverts lead to play, such as a first spin taking place. Google then receives your IP address, details about your device and those events. Pick “Essential only” and the tags run in consent mode with no cookies and no advertising identifiers. Lawful basis: consent.

Request logs kept by the isle’s hosting firm

For security, our hosting provider keeps ordinary request logs for a short time. Lawful basis: legitimate interests.

What the isle never does with data

We never take payment details, since nothing here is for sale.
No marketing email lands in your inbox unless you ask us for one.
Your data is never sold or rented out to anyone, on the isle or off it.
Nothing goes to gambling operators, and the isle carries no gambling affiliate links.

What you may ask of the isle

At any time you may ask to see, correct or erase your data, restrict or object to its processing, or withdraw your consent. Deleting the account from your account page erases its data straight away, and clearing this site’s data in your browser removes whatever is left. If you are unhappy, you can complain to the ICO at ico.org.uk.

Your data on the isle