Privacy at Bubble Soap Works — PIPEDA Rights and What We Store

Who signs off the batch book

The controller for personal data processed through bubblesoapworks.com is the operator of bubblesoapworks.com. Contact: [email protected].

What goes in your locker

On the punch card	Why Pumice files it	How long it sits on the rack
Nickname	The name stamped on your locker	Until you clear out the locker
Email address	Matching you to your locker at login	Until you clear out the locker
Password hash	Checking logins with no copy of the password held	Until you clear out the locker
Sign-up date	Replying to you and stopping abuse	Until you clear out the locker

The locker holds nothing beyond that. We never ask for your real name, address, date of birth, phone number or any payment detail, since the works has no checkout. Passwords are kept as a one-way hash and nothing else. Lawful basis: performance of a contract (running the account you asked us for). Delete your account with the button on your account page and all of it goes immediately.

What your browser keeps for you

On the punch card	What it keeps going	How long it sits on the rack
Coins, level, missions and settings for each vat	Carrying your game forward	Until your browser is scrubbed clean
Age confirmation	Not repeating the question page after page	Until your browser is scrubbed clean
Cookie choice	Keeping your banner answer on file	Until your browser is scrubbed clean

These stay on your own machine; nothing is sent down the pipe to the works.

Google tags, opt-in only

With ‘Accept all’ selected, Google Analytics and Google Ads tags measure visits and whether our adverts lead to play, a first spin for instance. Google is sent your IP address, device information and those events. With ‘Essential only’ selected, the tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

Logs at our web host

Our web host holds routine request logs for a short time, for security. Lawful basis: legitimate interests.

Off-limits at the works

Payment data is never collected; nothing is on sale.
No marketing email lands in your inbox unless you ask the works for it.
Your data never leaves the works for sale or for rent.
Nothing goes to gambling operators, and there are no gambling affiliate links.

What you can ask of the batch book

You are free at any time to access, correct, erase or restrict your data, to object to processing, and to withdraw consent. Using delete on the account page erases the account data instantly; clearing this site’s data in your browser deals with everything else. Complaints can be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Privacy on the factory floor