Privacy Notice

2. Information We Collect

Because Mudlark Spins is a zero-monetisation recreational platform, we never request or process payment card numbers, bank account details, or residential billing documents. We collect only:

• Registration Data: Email address, Collector Screen Name, date of birth (for 18+ eligibility verification), and a one-way cryptographic password hash (`password_hash`).
• Conservatory Preferences & Ledger: Your chosen lighting scene (`display_scene`), session reminder cadence (`reminder_minutes`), active Account Break timestamp (`break_until`), and practice session entries.
• Support Dispatches: Name, email address, inquiry topic, and message submitted voluntarily via Curatorial Support.

3. Lawful Bases for Processing

Performance of a Contract (Article 6(1)(b) UK GDPR)

Processing your account credentials, Play Credit practice ledger, and Account Break locks to deliver the conservatory service you requested.

Legitimate Interests & Age Compliance (Article 6(1)(f) UK GDPR)

Verifying 18+ adult eligibility and protecting our Newcastle server infrastructure against automated abuse.

Explicit Consent (Article 6(1)(a) UK GDPR)

Optional anonymous analytics storage governed by Google Consent Mode v2, which remains denied unless you explicitly grant consent.

4. Data Retention & Storage Security

Collector records are stored in access-restricted server files protected by exclusive file locking and HTTP access blocks. Passwords are hashed using industry-standard salted algorithms and are never stored in plain text. Support tickets are retained for twelve (12) months following resolution before permanent deletion.

5. Your Statutory Rights under UK GDPR

Under UK data protection law, you hold the right to request access to your personal data, rectification of inaccurate details, erasure (“right to be forgotten”), restriction of processing, data portability, and the right to withdraw optional analytics consent at any time via Consent Mode v2 Controls.

If you are dissatisfied with how we handle a privacy request, you have the statutory right to lodge a complaint with the United Kingdom supervisory authority, the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

6. Third-Party Data Sharing

We never sell, rent, or trade collector personal data to marketing brokers. When you open an interactive practice chamber on play.php, your browser loads the demonstration container directly from the respective studio’s content delivery network, which may process your IP address and technical user-agent string solely to deliver the HTML5 canvas.