Privacy and the Purser’s Ledger | Paddlewheel River (PIPEDA)

The officer who answers for your data

The controller for personal data processed through paddlewheelriver.com is the operator of paddlewheelriver.com. Contact: [email protected].

Entered on your cabin record

Ledger entry	Why the purser keeps it	How long it stays in the ledger
Nickname	Your name on the passenger list	Until the cabin booking is cancelled
Email address	Recognising your booking so you can log in again	Until the cabin booking is cancelled
Password hash	Logging you in without the crew ever keeping your password	Until the cabin booking is cancelled
Sign-up date	Replying to passengers and handling abuse	Until the cabin booking is cancelled

The ledger holds nothing beyond this. We will never ask for your real name, address, date of birth, telephone number or payment details, since there is no fare to collect anywhere aboard. Your password is kept solely as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Cancelling your account clears every entry at once, using the button on your account page.

Stowed in your own browser

Ledger entry	Why it is stowed	How long it stays in the ledger
Purse balance, level, missions and deck settings	Resuming the voyage where you stopped	Until the browser’s data is swabbed clean
Age confirmation	Sparing you the same question on every deck	Until the browser’s data is swabbed clean
Cookie choice	Noting the answer you gave to cookies	Until the browser’s data is swabbed clean

These entries remain on your own device and are never sent to the steamer.

Google tags, carried only with your consent

Choose “Accept all” and we use Google Analytics and Google Ads tags to count visits and learn whether our adverts bring people to play, for example that a first spin occurred. Google receives your IP address, device information and those events. Choose “Essential only” and the tags run in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.

The engine-room logs on our server

For security, our host retains routine request logs for a brief period. Lawful basis: legitimate interests.

What the crew will never do with it

No payment data whatever: there is no fare to pay.
No marketing letters, unless you ask the purser for them.
Your data is never sold or let out to anyone.
No sharing with gambling operators, and not one gambling affiliate link.

Your rights as a passenger, under PIPEDA

You may access, correct or erase your data, restrict or object to how it is processed, and withdraw consent whenever you wish. Cancelling the account on the account page erases the account data immediately; clearing this site’s data in your browser removes what remains. Complaints may be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

The purser’s ledger and your privacy