What the Rivermist Islands Purser’s Ledger Holds (PIPEDA)

Who keeps the purser’s ledger

The controller for personal data processed through rivermistislands.com is the operator of rivermistislands.com. Contact: [email protected].

In the purser’s ledger

Ledger entry aboard	Reason it is written	How long the purser keeps it
Nickname	The name on the passenger list	Until you tear up the deck pass
Email address	Finding your account again when you log back in	Until you tear up the deck pass
Password hash	Confirming your password while never keeping it in a form we can read	Until you tear up the deck pass
Sign-up date	Answering passengers and dealing with misuse	Until you tear up the deck pass

That is the full ledger. The purser never asks what your real name is, where you live, when you were born, which phone number is yours or how you might pay, as nothing aboard the Belle is sold. Lawful basis: performance of a contract (supplying the deck pass you requested). Your password goes in the ledger as a one-way hash and in no other form. Deleting the account clears every line of it immediately, with the button on your account page.

Saved in your browser

Ledger entry aboard	Its job on the Belle	How long the purser keeps it
Coin locker, level, missions and how you set your reels	Letting you sail on from your last stop	Until your browser data is scrubbed off the deck
Age confirmation	So you are not asked again on each page	Until your browser data is scrubbed off the deck
Cookie choice	Your cookie answer, kept on file	Until your browser data is scrubbed off the deck

All of this is kept on your device and never reaches us.

Google tags, boarding only with your consent

Press “Accept all” and the Belle switches on Google Analytics and Google Ads tags, which measure visits and whether our adverts bring passengers to the reels, such as the moment a first spin takes place; Google is then sent your IP address, details of your device and those events. Press “Essential only” and the tags stay in consent mode, with no cookies set and no advertising identifiers used. Lawful basis: consent.

Our host’s harbour log

Like a harbour log, our host keeps standard request records for security, and only for a short spell. Lawful basis: legitimate interests.

What the purser will never do

Payment data never comes aboard, since there is nothing to buy.
No marketing email from the Belle, unless you ask for it.
Your data is not sold or rented out to anybody, at any landing.
Not one line goes to gambling operators, and the Belle carries no gambling affiliate links.

Your PIPEDA rights, passenger

Whenever you choose, you may see, correct or erase what the ledger holds about you, have its processing restricted or object to it, and take back your consent. Tearing up the deck pass on your account page erases its data at once, and wiping this site’s stored data from your browser deals with whatever remains. Any complaint can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your privacy aboard