Field Notes on Your Privacy | Tidepool Star Cove (PIPEDA)

Who keeps the notebook (data controller)

The controller for personal data processed through tidepoolstarcove.com is the operator of tidepoolstarcove.com. Contact: [email protected].

Entries on a field account

Notebook entry	Why Ochie notes it down	How long it stays in the notebook
Nickname	Showing your name in the cove	Stays until you delete the account yourself
Email address	Matching your field card at each log-in	Stays until you delete the account yourself
Password hash	Checking your log-in without the password itself ever being stored	Stays until you delete the account yourself
Sign-up date	Replying to help requests and handling abuse	Stays until you delete the account yourself

Nothing else is written down. We never ask for your real name, address, date of birth, phone number or any payment detail, since the cove has nothing to sell. Your password exists only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked us for). Deleting your account wipes all of this at once, using the button on your account page.

Kept in your browser, not in our hut

Notebook entry	Its job in the cove	How long it stays in the notebook
Shore coins, level, missions and game settings	Resuming where the tide left you	Until the browser’s own store is cleared
Age confirmation	So the cookie question is not asked at every turn	Until the browser’s own store is cleared
Cookie choice	Noting your cookie answer	Until the browser’s own store is cleared

All of it stays put on your device; the research hut never receives it.

Google tags, only once you say yes

Pick ‘Accept all’ and we run Google Analytics and Google Ads tags to measure visits and to see whether our adverts lead to play, such as a first spin taking place. Google then receives your IP address, device information and those events. Pick ‘Essential only’ and the tags work in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

Request logs, washed away within a few tides

Our host keeps routine request logs for a brief spell, purely for security, much as the tide clears footprints. Lawful basis: legitimate interests.

Things the cove never does with data

Payment data never reaches the hut, as the cove sells nothing.
Marketing email arrives only if you have asked the hut for it.
Your data is not for sale or hire, to anyone, at any tide.
Gambling operators get nothing from the cove, and it hosts no gambling affiliate links.

Rights you hold over your entries

At any time you may access, correct, erase or restrict your data, object to how it is processed, or withdraw consent. Deleting your account on the account page erases its data straight away, and clearing this site’s data in your browser removes what remains. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

What the field notebook keeps about you