Draft. This notice has not been reviewed by a lawyer yet. Remove this box once it has.
Privacy notice
We keep as little about you as we can. This page says exactly what we keep, why, and how to get rid of it.
Who is responsible
[Operator name to be added], Guernsey, runs Dizzy Kitten and decides how your data is used. Contact: [contact email to be added].
What we keep
| What | Why | How long |
|---|---|---|
| Playing as a guest: your name and settings stay in your own browser | So the game remembers you on that device | Until you clear your browser. We do not receive them. |
| Account: player name, email address (if you add one), settings, games played and wins | To run your account and keep your progress across devices | Until you delete your account |
| Sign in links and sessions (stored only as a scrambled fingerprint, never the link itself) | To sign you in securely | Links last 15 minutes and are cleared within a day. Sessions last 90 days. |
| Your terms and newsletter choices, with the date of each | To show what you agreed to and when | Until you delete your account |
| Anonymous usage counts, such as how many games were started | To see which games people enjoy. They cannot be tied to you. | Up to about 13 months |
| Online games: the names you type and a random code that stands for your device, while a table is open | To run the game and show who is playing | Wiped when the table is closed or abandoned, and in any case within about a day. Empty waiting rooms are wiped after an hour. |
| Your IP address, in short lived counters, to slow down abuse such as repeated sign in attempts. With a sign in link we also keep a scrambled version of the address (a hash, not the address itself). | To keep accounts and the site safe | Counters expire after an hour or two and are cleared out soon after. The scrambled address goes within a day. We do not keep a long term log of addresses. |
A small number of site admins can look up account details (player name, email address, plan, newsletter choice, games played) to run the site and help players. They can change a plan, reset a name, sign you out or delete an account, and each of those actions is logged with the admin's identity.
We do not use advertising, tracking cookies or third party analytics that follow you. We use Cloudflare Web Analytics, which does not use cookies or track individuals.
Why we are allowed to
- To run your account: it is needed to provide what you asked for.
- For security and fair play: our legitimate interest in keeping the site safe.
- For the newsletter: only with your consent, which you can withdraw at any time.
The newsletter
It is off unless you tick the box. We use your email address for it only if you said yes. Every email has an unsubscribe link that works in one click, and you can also switch it off on your Account page. Signing in emails are separate and never contain marketing.
Who else handles your data
- Cloudflare runs the site and stores account data on its network.
- Resend sends our emails, so it sees your email address and the message.
We do not sell your data or share it for advertising. Some of these providers are based outside Guernsey, the UK and the EU. They use recognised safeguards for those transfers.
Your rights
- See what we hold about you, ask us to correct it, or ask us to delete it.
- Delete your account yourself, whenever you like, from the Account page. That removes your account, scores, settings and newsletter record.
- Withdraw newsletter consent at any time.
- Complain. In Guernsey that is the Office of the Data Protection Authority. If you are in the UK it is the Information Commissioner's Office. We would like the chance to put things right first, so please contact us.
Children
Accounts are for people aged 13 and over. Playing as a guest collects nothing about you.
Changes
If this notice changes in a way that matters, we will tell you and ask you to agree again where we need to. The version above tells you which one applies.
Read the Terms of use.