Privacy Policy — What We Keep | Threadfold Bindery (UK GDPR)

The bindery as data controller

The controller for personal data processed through threadfoldbindery.com is the operator of threadfoldbindery.com. Contact: [email protected].

Everything the account file holds

What we hold	Reason we hold it	Kept until
Bench name	Giving you a name in the worlds	Until the account is closed
Email we write to	Marking which account is yours when you log back in	Until the account is closed
Password hash	Letting you in without the password itself ever being kept here	Until the account is closed
Sign-up date	Answering your messages and stopping misuse	Until the account is closed

That is the entire file. We never ask for your real name, your address, your date of birth, your telephone number or any payment detail, because there is nothing in the bindery to pay for. Your password is held only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked for). Deleting your account clears every line of it at once, and the button for that sits on your account page.

What stays in the browser and nowhere else

What we hold	Job it does	Kept until
Coin balance, level, daily missions and bench settings	Picking the game up where you left it	Until this browser is cleared out
Age confirmation	Not putting the question on every page	Until this browser is cleared out
Cookie choice	Holding the answer you gave	Until this browser is cleared out

All of that stays on your own device and is never sent back to us.

Google tags, only if you allow them

Choose "Accept all" and we use Google Analytics and Google Ads tags to measure visits and whether our adverts lead to play, a first spin for instance. Google receives your IP address, device information and those events. Choose "Essential only" and these tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

What the host writes in its day book

Standard request logs are kept by our host for a short while, for security. Lawful basis: legitimate interests.

Things we never do with it

No payment data at any point: nothing is for sale.
No marketing email goes out unless you ask for it.
Your data is never sold or rented to anybody.
Nothing shared with gambling operators, and no gambling affiliate links anywhere.

Rights UK GDPR hands you

You can access, correct, erase, restrict or object to processing, and withdraw consent whenever you wish. Deleting your account from the account page erases the account data straight away; clearing this site's data in your browser removes what is left. A complaint can be made to the ICO at ico.org.uk.

What we keep on you