Privacy Policy
Albion Spin House takes your privacy seriously. This policy explains what data we collect, why we collect it, and your rights under UK GDPR. We collect minimal data and never sell personal information.
1. Who We Are (Data Controller)
The data controller for albionspinhouse.com is Albion Spin House, operated under the laws of England and Wales. For data and privacy enquiries, contact us at: privacy@albionspinhouse.com.
2. What Data We Collect
We collect minimal data. Specifically:
2.1 Data collected automatically (server logs)
When you visit our website, our web server and content delivery network (Cloudflare) automatically log:
- Your IP address (anonymised after 24 hours)
- Browser type and version
- Operating system
- Referring URL
- Pages visited and time of visit
- HTTP status codes
This data is used solely for security, performance monitoring, and diagnosing technical problems. It is not used for marketing or profiling.
2.2 Data stored in your browser (local/session storage)
We store two small items in your browser:
ash_balance— your virtual coin balance for the current session. Stored in sessionStorage and is automatically deleted when you close your browser tab.
Neither of these items is transmitted to our servers.
2.3 Cookies
We use only essential technical cookies. Please see our Cookie Policy for full details.
2.4 Data we do NOT collect
- We do not collect your name, email address, or any contact information
- We do not collect payment or financial information
- We do not collect account credentials (no accounts exist)
- We do not use tracking pixels, social media widgets, or third-party analytics that profile you
3. Legal Basis for Processing (UK GDPR)
| Data | Legal Basis | Purpose |
|---|---|---|
| Server logs / IP address | Legitimate interests (Art. 6(1)(f)) | Security, preventing abuse, performance monitoring |
| Cloudflare security cookies | Legitimate interests (Art. 6(1)(f)) | DDoS protection, bot mitigation |
| Browser sessionStorage (balance) | Legitimate interests (Art. 6(1)(f)) | Maintaining game state during session |
4. How Long We Keep Data
- Server logs: Up to 30 days, then automatically deleted
- Cloudflare data: Governed by Cloudflare's own data retention policy (typically 24–48 hours for security logs)
- Browser localStorage: Until you clear your browser data or revoke consent
- Browser sessionStorage: Automatically deleted when you close your browser tab
5. Third Parties
We use the following third-party services:
- Cloudflare — Content delivery and DDoS protection. Cloudflare may process technical data (IP address, request headers) to provide its service. See Cloudflare's Privacy Policy.
- Google Fonts — Font delivery. Your browser may make a request to Google's servers to load fonts. See Google's Privacy Policy. (For production, we recommend switching to self-hosted fonts to eliminate this data transfer.)
We do not share your data with any other third parties. We do not sell data. We do not use advertising networks.
6. Your Rights Under UK GDPR
Under UK GDPR, you have the right to:
- Access — Request a copy of any personal data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data ("right to be forgotten")
- Restriction — Request that we restrict processing of your data
- Objection — Object to processing based on legitimate interests
- Portability — Request your data in a machine-readable format
- Complaint — Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at privacy@albionspinhouse.com. We will respond within 30 days.
7. Cookies
For full information about the cookies used on this site, please read our Cookie Policy.
8. Children's Privacy
The Site is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has provided data to us, please contact us immediately at privacy@albionspinhouse.com and we will take prompt action to delete it.
9. International Transfers
Our website is hosted on servers within the EEA/UK. Cloudflare operates a global network; however, Cloudflare is a signatory to the EU–US Data Privacy Framework and complies with UK data transfer requirements.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Significant changes will be noted prominently on this page.
11. Contact
Privacy and data requests: privacy@albionspinhouse.com
General enquiries: contact@albionspinhouse.com
ICO (supervisory authority): ico.org.uk