How Moonbat Apothecary Handles Your Data (PIPEDA)

Who holds the data

The controller for personal data processed through moonbatapothecary.com is the operator of moonbatapothecary.com. Contact: [email protected].

Written in the shelf ledger

Line in Hyssop’s ledger	Why it is written down	How long it stays on the shelf
Nickname	Shows your chosen name beside your spins	Until you close your shelf (delete the account)
Email address	Matching you to your shelf at each log-in	Until you close your shelf (delete the account)
Password hash	Checking your password without our ever storing it	Until you close your shelf (delete the account)
Sign-up date	Answering support notes and dealing with abuse	Until you close your shelf (delete the account)

Nothing beyond that list is collected. We never ask for your real name, your address, your date of birth, your phone number or any payment detail; there is nothing in the shop to pay for. Your password exists here only as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Deleting the account erases every part of it at once, using the button on your account page.

Tucked away in your own browser

Line in Hyssop’s ledger	What Hyssop uses it for	How long it stays on the shelf
Coins in the jar, level, missions and game settings	Letting you resume your game	Until you clear the browser’s data
Age confirmation	Spares you the banner on each new page	Until you clear the browser’s data
Cookie choice	Recording what you agreed to	Until you clear the browser’s data

All of this remains on your device; none of it reaches us.

Google tags, set only with your yes

With “Accept all” selected, Google Analytics and Google Ads tags measure visits and whether our adverts led to play (a first spin, for instance), and Google receives your IP address, device information and those events. With “Essential only” selected, the tags run in consent mode without cookies or advertising identifiers. Lawful basis: consent.

Our host’s short-lived security logs

For security, our hosting provider holds ordinary request logs for a brief period. Lawful basis: legitimate interests.

Things the shop never does

No payment data is ever taken, since nothing is for sale.
No marketing email, unless you request it.
Your data is not for sale or rent, to anyone.
Gambling operators get nothing from us, and no gambling affiliate link appears here.

Your PIPEDA rights, in full

You are entitled to access, correct or erase your data, to restrict or object to its processing, and to withdraw consent whenever you wish. The delete button on the account page wipes the account data on the spot; clearing this site’s data in your browser takes care of the rest. Complaints may be made to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Privacy at the apothecary