Privacy at Citronbay Harbour

Who answers for your data on the bay

The controller for personal data processed through citronbayharbour.com is the operator of citronbayharbour.com. Contact: [email protected].

What your gate-key account holds

Each piece we keep	Reason Scalino keeps it	How long it stays on the bay
Nickname	The name the lemon-bay games show for you	Until you delete the account from the bay
Email address	Telling us which account is yours at log-in	Until you delete the account from the bay
Password hash	Logging you in without our ever holding the password itself	Until you delete the account from the bay
Sign-up date	Answering support, handling abuse on the bay	Until you delete the account from the bay

Nothing beyond that list. We never request your real name, address, date of birth, phone number or any payment detail, as there is nothing on this site to buy. Your password is kept only as a one-way hash. Lawful basis: performance of a contract (providing the account you requested). Deleting your account wipes all of it at once, and your account page has a button to do just that.

What stays in your own browser, not on the bay

Each piece we keep	What it is there for on the bay	How long it stays on the bay
Coins, level, missions and settings for the three bay worlds	Letting you pick up where you stopped	Until you clear this browser’s data for the bay
Age confirmation	So we do not ask you on every page	Until you clear this browser’s data for the bay
Cookie choice	Remembering what you chose on consent	Until you clear this browser’s data for the bay

All of this stays on your device; none of it comes to us.

Google tags on the bay, only with your consent

Pick “Accept all” and we use Google Analytics and Google Ads tags to measure visits and to see whether our adverts led to play, such as a first spin. Google then receives your IP address, information about your device and those events. Pick “Essential only” and the tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

What the server logs record

Our host keeps ordinary request logs for a short while, for security reasons. Lawful basis: legitimate interests.

Things the bay will not do with your data

Never any payment data: nothing here is for sale.
Marketing emails only if you ask the bay for them.
Nobody buys or rents your data from the bay, ever.
Nothing passed to gambling operators, and not one gambling affiliate link on the bay.

The rights PIPEDA gives you on the bay

At any time you may access or correct your data, have it erased or restricted, object to its processing, and withdraw consent. Deleting the account from your account page erases the account data straight away; clearing this site’s data in your browser removes whatever remains. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your privacy at Citronbay Harbour