Privacy at Paper Crane Town

Whose desk your data sits on

The controller for personal data processed through papercranetown.com is the operator of papercranetown.com. Contact: [email protected].

What is folded into your account

Paper slip	Folded in for	Stays folded until
Nickname	Your nickname on the paper streets	As long as the account exists
Email address	Finding your account again at login	As long as the account exists
Password hash	Checking your password while never storing it in readable form	As long as the account exists
Sign-up date	Support replies and abuse reports	As long as the account exists

Nothing more. No real name, address, date of birth, phone number or payment detail is ever asked for; the town sells nothing, so there is nothing to pay. Passwords are kept only as a one-way hash. Lawful basis: performance of a contract, that is, providing the account you requested. Delete the account and every piece of it goes immediately; the button is on your account page.

Tucked into your browser

Paper slip	Why the slip exists	Stays folded until
Coins, level, missions and game options	Resuming where you were	Till browser data is wiped
Age confirmation	So the banner asks only once	Till browser data is wiped
Cookie choice	Your consent answer	Till browser data is wiped

These slips stay in your browser and never float down the canal to us.

Google tags, only once you say yes on the banner

Pick "Accept all" and Google Analytics and Google Ads tags measure visits and whether our adverts end in play, a first spin for example. Google receives your IP address, device information and those events. Pick "Essential only" and these tags run in consent mode, without cookies or advertising identifiers. Lawful basis: consent.

The host’s paper trail (server logs)

Our host keeps ordinary request logs, briefly, for security. Lawful basis: legitimate interests.

Never folded in

Payment data? Never; not one paper stall in town takes money.
Marketing email? Only when you ask for it.
Selling or renting your data? Not to anyone.
Gambling operators? No sharing with them, and no gambling affiliate links.

What PIPEDA lets you do

Access, correction, erasure, restriction, objection to processing, withdrawal of consent: all of these are yours at any time. Deleting the account on the account page erases its data at once; clearing this site’s data in your browser clears the remainder. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your privacy, fold by fold