Privacy at Frostspire Library: What the Ledger Holds (PIPEDA)

Who holds the borrowers ledger

The controller for personal data processed through frostspirelibrary.com is the operator of frostspirelibrary.com. Contact: [email protected].

Lines in your borrower record

Line in Merribind’s ledger	Why Merribind keeps it	How long it stays shelved
Nickname	The name Merribind writes on your card	Kept until you delete the card
Email address	Recognising your card when you log in again	Kept until you delete the card
Password hash	Confirming it is you at log-in, while the password itself is never held by the library	Kept until you delete the card
Sign-up date	Help requests and abuse reports at the desk	Kept until you delete the card

Nothing else is recorded. We do not ask for your real name, address, date of birth, phone number or any payment detail, since nothing here is for sale. Your password is kept only as a one-way hash. Lawful basis: performance of a contract (providing the account you requested). Deleting the account wipes all of the above at once, using the button on your account page.

Notes your browser keeps for the library

Line in Merribind’s ledger	What the note does	How long it stays shelved
Coins, level, missions and the settings of each telescope world	Picking up where your last climb ended	Shelved until you clear your browser data
Age confirmation	So the cookie banner stays quiet from page to page	Shelved until you clear your browser data
Cookie choice	Noting your answer to Merribind’s cookie banner	Shelved until you clear your browser data

These notes never leave your device, and we are never sent a copy.

Google tags, off until you agree

Pick “Accept all” and Google Analytics and Google Ads tags measure visits and whether our adverts lead to play, such as the fact that a first spin took place. Google then receives your IP address, device information and those events. Pick “Essential only” and the same tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

Request logs kept by the spire’s host

Our host keeps the usual request logs for security, and only for a short spell. Lawful basis: legitimate interests.

Things the library never does

No payment data is ever taken, because the spire has nothing to sell.
Marketing email goes out only to people who have asked for it.
Your data is never sold or rented out, to anybody, at any price.
Gambling operators get nothing from us, and no gambling affiliate link appears on any shelf.

Your PIPEDA rights at Frostspire Library

You may access, correct, erase or restrict your data, object to processing, and withdraw consent whenever you choose. Deleting the account on your account page erases its data at once; clearing this site’s data in your browser removes the rest. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Privacy and the borrowers ledger