Privacy at the Springs | Copper Kettle Springs (PIPEDA)

Who controls your data at the springs

The controller for personal data processed through copperkettlesprings.com is the operator of copperkettlesprings.com. Contact: [email protected].

What your account keeps on its peg

What Clement keeps	Why Clement keeps it	How long Clement keeps it
Nickname	The name shown on your locker	Held until the account is deleted
Email address	Recognising which account is yours at each login	Held until the account is deleted
Password hash	Checking your login without anyone here ever knowing the password	Held until the account is deleted
Sign-up date	Answering support requests and handling abuse	Held until the account is deleted

Nothing beyond those four lines is held. We never request your real name, home address, date of birth or phone number, nor any payment detail, since nothing at the springs costs money. The password lives here only as a one-way hash. Lawful basis: performance of a contract (running the account you signed up for). Delete the account and all of it is gone at once; the button sits on your account page.

What sits in your browser’s robe pocket

What Clement keeps	Why it waits in the browser by the tub	How long Clement keeps it
Coin purse, level, missions and game settings	Resuming your game where it stopped	Until you clear this site’s data in your browser
Age confirmation	Saving you from being asked on each new page	Until you clear this site’s data in your browser
Cookie choice	Noting the consent answer you left at the gate	Until you clear this site’s data in your browser

None of this is sent to us; it stays put on your device.

Google tags, steaming only after you say yes

With “Accept all” selected, Google Analytics and Google Ads tags record visits and check whether an advert led someone to play, a first spin for example. In doing so Google receives your IP address, information about your device and those events. With “Essential only”, the tags work in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

The server’s own logbook

Purely for security, the server keeps a short-lived diary of requests, much like the bathhouse visitors’ book. Lawful basis: legitimate interests.

Lines Clement will not cross

Payment data is never collected; nothing here is for sale.
Not a single marketing email, unless you ask Clement for one.
Clement never sells your data, and never rents it out to anybody.
Nothing is shared with gambling operators, and no gambling affiliate links appear.

Your rights under PIPEDA, plainly put

Your rights cover access, correction, erasure and restriction of your information, objecting to its processing, and withdrawing consent whenever you choose. The delete button on the account page wipes the account data on the spot; clearing this site’s data in your browser takes care of everything left. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Privacy, kept behind the bathhouse door