Privacy Policy

Data controller

The controller for personal data processed through spinnovaluck.com is the operator of spinnovaluck.com. Contact: [email protected].

What your account holds

Item	Why	Retention
Nickname	Naming you in the game	Until you delete the account
Email address	Identifying the account so you can log back in	Until you delete the account
Password hash	Letting you log in without us ever holding the password	Until you delete the account
Sign-up date	Support and abuse handling	Until you delete the account
Google account identifier	Only if you chose to sign in with Google, so we recognise you next time	Until you delete the account

Nothing else is held. We do not ask your legal name, where you live, when you were born or your telephone number, and we never ask for card details, because this floor sells nothing. The password itself is never kept - only a one-way hash of it. The basis for holding any of this is the contract you entered when you asked for the account. The delete button on your account page clears every row above the moment you press it.

What stays in your browser

Item	Purpose	Retention
Coin balance, level, missions, game settings	Continuing your game	Until you clear browser data
Age confirmation	Not asking again on every page	Until you clear browser data
Cookie choice	Remembering your consent	Until you clear browser data

All of that sits in your own browser. None of it reaches our servers.

If you sign in with Google

Signing in with Google is optional; the email form does the same job. If you use it, you are sent to Google to approve the request, and Google returns three things to us: a permanent identifier for your Google account, your email address, and your first name, which we offer as a starting nickname. We ask for nothing else: no contacts, no calendar, no Drive, no profile photo, no ability to act on your behalf. We never receive your Google password. What Google itself does with the sign-in is covered by Google's own privacy policy.

We store the identifier, the email address and the nickname you confirm, and nothing more. Deleting your account here deletes all three immediately. You can also revoke our access at any time in your Google account under "Third-party apps with account access"; the games keep working, you simply sign in with an email address and password instead. No Google script runs on these pages, so nothing is sent to Google unless you press the Google button yourself. Lawful basis: performance of a contract.

Google tags (only with consent)

If you choose "Accept all", we use Google Analytics and Google Ads tags to measure visits and whether our adverts lead to play, for example that a first spin happened. Google receives your IP address, device information and these events. If you choose "Essential only", these tags run in consent mode without cookies and without advertising identifiers. Lawful basis: consent.

Host logs

The company hosting the site keeps ordinary request logs for a short while, for security. Basis: legitimate interests.

Things we do not collect or do

Never any payment data - there is no checkout to need it.
No marketing mail, unless you asked to be sent some.
Your data is not sold, rented or licensed to anyone.
Nothing is shared with gambling companies, and no affiliate link appears on the site.

What you can ask for

At any time you may see what we hold, correct it, have it erased, limit how it is used, object to that use, or take back your consent. The delete button on the account page removes the account side of it on the spot; clearing this site's data in your browser removes what was left in the browser. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.