Privacy at Turtle Surf Bay | Your Data and PIPEDA

Who’s responsible for your data

The controller for personal data processed through turtlesurfbay.com is the operator of turtlesurfbay.com. Contact: [email protected].

What’s in your locker file

Thing stored	Why the bay keeps it	How long it sticks around
Nickname	Your name on screen	Till you close your locker
Email address	Recognising you when you log back in	Till you close your locker
Password hash	Letting you in while we never see the password itself	Till you close your locker
Sign-up date	Helping with support and dealing with abuse	Till you close your locker

And that’s it. We never ask for your real name, address, date of birth, phone number or any payment details, because there’s nothing here to pay for. Your password is only ever stored as a one-way hash. Lawful basis: performance of a contract (setting up the account you asked for). Delete your account and all of it goes immediately; the button’s on your account page.

Saved on your own device

Thing stored	Why your browser holds it	How long it sticks around
Your coin stash, level, missions and settings	Keeping your session going	Till you clear your browser data
Age confirmation	Means the banner won’t pester you on each page	Till you clear your browser data
Cookie choice	Keeping track of your consent	Till you clear your browser data

It never leaves your device, and we never see it.

Google tags: only if you agree

Hit “Accept all” and we’ll use Google Analytics and Google Ads tags to measure visits and whether our ads lead to play (say, a first spin). Google gets your IP address, device information and those events. Hit “Essential only” and the tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

Server logs at our web host

Our host keeps routine request logs for a short while for security. Lawful basis: legitimate interests.

Stuff we’ll never do

Take payment data. There’s nothing to buy.
Send marketing email you didn’t ask for.
Sell or rent your data to anyone.
Share anything with gambling operators or use gambling affiliate links.

What you’re entitled to

Whenever you like, you can ask to access, correct or erase your data, restrict or object to its processing, and withdraw your consent. Deleting your account on the account page erases its data straight away; clearing this site’s data in your browser gets rid of the rest. If you want to complain, contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your data, plain and simple