Privacy Policy.
What information we collect, why, and what you can do about it.
Last updated: 8 October 2026
What we collect
- When you sign up: first name, last name and email address, plus a password. Your password is turned into a scrambled code (a hash) before it is saved, so it is never stored as you typed it. We also record the date you joined, your last sign-in, and a count of failed sign-in attempts (five wrong tries locks the account for 15 minutes).
- If you sign up with Google: your name, verified email address and Google account ID from Google, checked by our server directly with Google.
- When you contact us: your name, email, topic and message, sent through the Contact, Support or Player Care forms.
Where it's kept
Your account (the sign-up details above, plus your coin balance and level) is stored on our server as a single protected file that cannot be opened from the web — we do not use a database, a spreadsheet, or any public table. It stays there until you delete your account from My Account or ask us to delete it for you. Signing in sets a strictly necessary session cookie (pc_sid) and a short-lived, one-time cookie (pc_login, deleted within two minutes) that passes your account details to your browser — see the Cookie Policy.
Messages you send through the Contact, Support or Player Care forms are emailed from our server to our team inbox via a secure SMTP connection, and a copy is kept in a protected log file on our server (never public) so we can follow up and confirm the message arrived. We remove it once your request is dealt with.
We never ask for or store card or bank details anywhere on this site.
Why we use it
- To create and run your account and coin balance
- To check you are 18+ and in the UK
- To reply when you contact us
- To keep the site secure and prevent abuse
Other services we use
- Google Sign-In, only if you choose to use it. Google's own privacy policy applies to that exchange.
- SMTP email delivery, to send messages from our forms to our support inbox.
- Google Fonts, which supplies the typefaces used on this page.
Your rights
Under UK data protection law (UK GDPR) you can ask to see, correct, export or delete your information, or object to how it's used. You can delete your account yourself at any time from My Account, which removes it from our server immediately. For anything else, send your request through the contact form or email [email protected]. You can also complain to the UK's Information Commissioner's Office at ico.org.uk.
Changes
We'll update this page whenever anything changes. The date at the top always shows the latest version.
