Privacy Notice

1. Who is responsible

Cogwright Interactive Ltd, registered in the United Kingdom under number 14827396 at Unit 12, Brasswork Yard, 48 Clerkenwell Road, London EC1M 5PS, United Kingdom, is the data controller for socialspinszone.com. For any privacy question or request, write to [email protected].

2. What we collect

If you create an account

• Username — chosen by you, shown to you in the header.
• E-mail address — used to identify the account and to reply if you contact us.
• Password — never stored as you typed it. We keep a salted scrypt hash, from which the original cannot practically be recovered.
• Coin balance, account creation date and last bonus date — the whole of your “game state”.

If you write to us

• The name, e-mail address, subject and message you submit through the contact form, kept so we can answer you and refer back to the conversation.

Automatically

• A session cookie once you log in, holding a signed token — your user reference and a timestamp, authenticated with a secret key. It contains no personal detail and cannot be read or forged by anyone else.
• An age-gate flagstored in your browser’s local storage, so the 18+ prompt is not shown on every visit. It never leaves your device.
• Standard server logs kept by our web server: IP address, timestamp, requested page, referrer and user agent. These are used for security and diagnostics and are rotated automatically.

What we never collect

No card, bank or wallet details (there is nothing to buy). No identity documents. No precise location. No biometric or health data. No special category data of any kind.

3. Why we use it, and on what legal basis

• To run your account and keep your coin balance — performance of our agreement with you (Article 6(1)(b) UK GDPR).
• To keep you logged in — strictly necessary for a service you have asked for.
• To answer your messages — our legitimate interest in providing support, or performance of our agreement.
• To keep the Site secure and prevent abuse — our legitimate interest in protecting the service and its users.
• To meet legal obligations — where the law requires us to retain or disclose information.

We do not use your data for profiling, automated decision-making or behavioural advertising, and we do not send marketing e-mail.

4. Third parties

We keep the list deliberately short:

• Our hosting provider, which operates the server where the Site and its database run.
• Game studioswhose demonstration builds are embedded in a frame. When a game loads, your browser connects directly to the studio’s servers, which will see your IP address and browser details in the ordinary course. Their handling of that connection is governed by their own policies; we pass them no account information about you.
• A web font provider, used to deliver the typefaces this Site is set in.

We do not sell, rent or trade personal data. We do not share it with data brokers, advertising networks or analytics resellers.

5. Where data is held

Account data lives in a database file on our own server, not in a third-party platform. Where an international transfer occurs — for example when your browser fetches a game frame or a font — it is protected by the safeguards available under UK data protection law, such as adequacy regulations or standard contractual clauses.

6. How long we keep it

• Account data — while your account exists. Ask us to close it and we delete the record.
• Dormant accounts — may be deleted after roughly 24 months with no sign-in.
• Contact messages — normally up to 24 months after the matter is closed.
• Server logs — a short rolling window, typically 14–30 days.

7. Security

The Site is served over HTTPS. Passwords are salted and hashed with scrypt. Session cookies are HTTP-only, restricted to this site and cryptographically signed, so they cannot be tampered with. Administrative access to the server is limited to the people who need it. No system is perfect, but we keep the amount of data we hold small enough that a breach would expose very little.

8. Children

The Site is for adults aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, tell us at [email protected] and we will delete it.

9. Your rights

Under UK data protection law you may ask us to: give you access to your data; correct it; delete it; restrict how we use it; port it to you in a usable format; or object to processing based on legitimate interests. You may also complain to the Information Commissioner’s Office (ico.org.uk) — though we would appreciate the chance to put things right first.

Write to [email protected]. We reply within one month and never charge for a reasonable request.

10. Changes to this notice

If we change how we handle data, this page is updated and the date at the top changes with it. Material changes will be flagged on the Site itself.