Privacy Policy | Toboggan Carnival under PIPEDA

Who looks after your data at the carnival

The controller for personal data processed through toboggancarnival.com is the operator of toboggancarnival.com. Contact: [email protected].

Inside your carnival account

What sits in the toboggan	Why it rides along	Held at the booth until
Name on the run	The name shown on the run	As long as your account is open
Email address on file at the booth	Finding your account again at log-in	As long as your account is open
Password hash	Checking your log-in without ever keeping the password	As long as your account is open
Sign-up date	Replying to you and handling misuse	As long as your account is open

Nothing else goes on the list. We never request your real name, home address, birth date, phone number or any payment information, since nothing here costs a thing. Your password is saved only as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Delete your account and all of it disappears right away; the button for that is on your account page.

What stays in your browser, like coins in a mitten

What sits in the toboggan	Why Gaspard keeps it	Held at the booth until
Coins, level, missions and game preferences	So you can pick up the run where you stopped	Until your browser data melts away
Age confirmation	Saving you from the banner on each page	Until your browser data melts away
Cookie choice	Remembering your banner answer	Until your browser data melts away

It all remains on your device and never travels to us.

Google tags, waiting for your thumbs-up

Choose “Accept all” and Google Analytics and Google Ads tags will measure visits and whether our ads lead to play, such as a first spin taking place. Google then gets your IP address, device information and those events. Choose “Essential only” and the tags run in consent mode, without cookies or advertising identifiers. Lawful basis: consent.

Request logs on the carnival server

For security, our hosting provider keeps ordinary request logs from the carnival server for a short while. Lawful basis: legitimate interests.

What we stay away from

We never hold payment data: there is nothing to purchase.
No marketing email reaches you unless you ask for it.
We never sell your data, and we never rent it out either.
Not a scrap of data goes to gambling operators, and no gambling affiliate link hangs anywhere at the carnival.

The rights PIPEDA gives you

At any time you can access, correct or erase your data, restrict it, object to its processing, or withdraw consent. Deleting the account from your account page wipes the account data right then; clearing this site’s data in your browser removes everything else. To complain, contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Your privacy at the carnival