Your Data at the Cabana

Who looks after the cabana’s data

The controller for personal data processed through coralquaycabana.com is the operator of coralquaycabana.com. Contact: [email protected].

Inside your wristband account

What the cabana keeps	What it is for, at the cabana	How long the cabana keeps it
Name on the quay	The name you go by on the quay	As long as your wristband account stays open
Email on your wristband	Knowing it is you when you stroll back and log in	As long as your wristband account stays open
Password hash	Checking your login without the cabana ever seeing the password	As long as your wristband account stays open
Sign-up date	Helping you, and handling abuse	As long as your wristband account stays open

And that really is everything. We never want your real name, your address, your date of birth, your phone number or any payment detail, because nothing at the cabana is for sale. Your password is only ever kept as a one-way hash. Lawful basis: performance of a contract (providing the account you asked for). Delete your account and the whole lot goes immediately, using the button on your account page.

What sits in your own browser, not at the cabana

What the cabana keeps	What the cabana uses it for	How long the cabana keeps it
Coins, level, missions and settings for each cove	Letting you pick up your game	Until you sweep out your browser’s data
Age confirmation	So the banner does not pester you on every page	Until you sweep out your browser’s data
Cookie choice	Remembering what you said to the cookie banner	Until you sweep out your browser’s data

None of this leaves your device, and none of it is sent to the cabana.

Google tags, only when you agree

Tap “Accept all” and we use Google Analytics and Google Ads tags to measure visits and to learn whether our adverts bring people to play, say that someone made a first spin. Google gets your IP address, device information and those events. Tap “Essential only” instead and the tags run in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

Request logs our host keeps by the quay

For security, our hosting provider holds the normal request logs, and only for a brief spell. Lawful basis: legitimate interests.

Things the cabana simply does not do

No payment data, not once, because nothing here has a price.
Not a single marketing email unless you ask the cabana for one.
Nobody gets to buy or rent your data from the cabana.
Nothing shared with gambling operators, and no gambling affiliate links on the quay.

Your rights over your data under UK GDPR

You have the right to access, correct, erase, restrict or object to processing, and to withdraw consent whenever you like. Delete your account from the account page and its data is erased then and there; clearing this site’s data in your browser deals with the remainder. If you are unhappy, you can complain to the ICO at ico.org.uk.