Privacy Policy for the Tour

Who holds the tour’s records

The controller for personal data processed through islandcastletour.com is the operator of islandcastletour.com. Contact: [email protected].

What your boarding record holds

What the record holds	Why it is in the captain’s log	Kept aboard until
Nickname	The name Fennimore calls out	You delete the account
Email address	Finding your account again whenever you log in	You delete the account
Password hash	So you can log in without the password itself ever reaching us	You delete the account
Sign-up date	Answering your messages and handling abuse on the tour	You delete the account

And that is the full record. We never ask for your real name, address, date of birth or phone number, nor for payment details, since the tour sells nothing, and your password is held only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked to open). Press the delete button on your account page and every part of the record is wiped there and then.

What your browser carries for the tour

What the record holds	What the tour uses it for	Kept aboard until
Coin purse, level, missions and per-stop settings	Picking up the tour at the last landing	You clear your browser data
Age confirmation	Sparing you the banner on each new page	You clear your browser data
Cookie choice	Keeping note of your banner answer	You clear your browser data

Your device holds all of this. We are never sent a copy.

Google tags, strictly with your yes

With ‘Accept all’ switched on, Google Analytics and Google Ads tags record visits and whether an advert of ours led to play (a first spin, say), and Google is sent your IP address, device information and those events. With ‘Essential only’, the tags still run but in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

The host’s server logs

For security, our host holds routine request logs, but only briefly. Lawful basis: legitimate interests.

Things the crew will never do

No payment data, ever: nothing aboard is for sale.
No marketing email unless you ask the crew for it.
No selling or renting your data to anyone at all.
No sharing with gambling operators and no gambling affiliate links of any kind.

Your rights over the tour’s records

Whenever you wish, you can ask to see, fix, erase or limit your data, object to the way it is processed, or take back your consent. Using the delete button on the account page clears the account data on the spot; wiping this site’s data in your browser clears what is left. If you are unhappy, the Office of the Privacy Commissioner of Canada takes complaints at priv.gc.ca.