Privacy at the Conservatory

The organisation responsible

The controller for personal data processed through fernbloomhouse.com is the operator of fernbloomhouse.com. Contact: [email protected].

Contents of a visitor’s account

Record	Reason for keeping it	Period of keeping
Nickname	Addressing you by name in play	Until the visitor deletes the account
Email address	Recognising the account whenever you return to log in	Until the visitor deletes the account
Password hash	Verifying your login without the password ever being held by us	Until the visitor deletes the account
Sign-up date	Replying to correspondence and handling abuse	Until the visitor deletes the account

The list ends there. At no point do we request your real name, address, date of birth, telephone number or any payment detail, as the house has nothing for sale. Passwords are stored solely as a one-way hash. Lawful basis: performance of a contract, namely providing the account you requested. Deleting the account erases every item above immediately, and the account page carries a button for the purpose.

Held only on your device

Record	Reason it is kept	Period of keeping
Balance of coins, level, missions and settings	Resuming play where it paused	Until the visitor clears browser data
Age confirmation	Avoiding a repeat of the question on each page	Until the visitor clears browser data
Cookie choice	Recording the consent you gave	Until the visitor clears browser data

These details remain on your own device and are never transmitted to us.

Google tags, subject to consent

When “Accept all” is chosen, Google Analytics and Google Ads tags measure visits and whether our advertising leads to play, for instance that a first spin occurred. Google receives your IP address, device information and those events. When “Essential only” is chosen, the tags operate in consent mode with neither cookies nor advertising identifiers. Lawful basis: consent.

The host’s request logs

Our hosting provider retains standard request logs, for security purposes and for a brief period only. Lawful basis: legitimate interests.

Practices we refuse

We never collect payment data; nothing is sold.
We send marketing email only on your request.
We never sell or rent your data to any party.
Nothing is passed to gambling operators, and no gambling affiliate link appears in the house.

The visitor’s rights

You are entitled to access, correct and erase your data, to restrict or object to its processing, and to withdraw consent whenever you wish. Removing your account from the account page erases its data immediately, and clearing this site’s data in your browser deletes whatever remains. Complaints may be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.