Fiddlehead Crossing Privacy Notice (PIPEDA, Canada)

Who keeps your data at the crossing

The controller for personal data processed through fiddleheadcrossing.com is the operator of fiddleheadcrossing.com. Contact: [email protected].

Kept in your account

Detail we hold	Purpose served	How long it stays with us
Nickname	Naming you in the game	Until you delete the account
Email address	Matching you to your account each time you sign back in	Until you delete the account
Password hash	Checking your password without ever storing it in readable form	Until you delete the account
Sign-up date	Support and abuse handling	Until you delete the account

Beyond that list we keep nothing. Your real name, address, birthday and phone number never come up, and neither does payment, since nothing at the market is for sale. Passwords are saved only as one-way hashes. Lawful basis: performance of a contract, meaning the account you asked us to provide. The delete button on your account page clears the lot immediately.

Stored on your side only

Detail we hold	Reason it’s stored	How long it stays with us
Purse balance, level, missions and settings for the games	Continuing your game	Until you clear browser data
Age confirmation	Stops the cookie question repeating page after page	Until you clear browser data
Cookie choice	Remembering your consent	Until you clear browser data

It is kept on your device and never reaches our servers.

Google tags run only with a yes from you

Clicking “Accept all” switches on Google Analytics and Google Ads tags to log visits and to see whether our adverts bring people over the bridge to play (a first spin, say); Google receives your IP address, device information and those events. Clicking “Essential only” keeps the tags in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

Security logs at the crossing’s host

For the site’s safety our host keeps the usual request logs, and only for a short period. Lawful basis: legitimate interests.

What the crossing never does with data

Payment data never reaches the crossing, because there’s nothing to buy.
Ambly sends marketing email only to people who ask for it.
Of everything at the market, your data is the one thing never sold or rented.
Nothing is passed to gambling operators, and you won’t find a gambling affiliate link on either bank.

Your PIPEDA rights at the crossing

The law gives you the right to see your data, to have it corrected or erased, to restrict or object to its processing, and to withdraw consent whenever you choose. Use the delete option on the account page and account data is gone immediately; clear this site’s data in your browser and the remainder goes with it. Complaints can be taken to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your data at the crossing