How the Croft Handles Your Data | Shetland Pony Isle (UK GDPR)

Data controller for the croft

The controller for personal data processed through shetlandponyisle.com is the operator of shetlandponyisle.com. Contact: [email protected].

Stored against your croft key

Data on the croft	Reason Peerie keeps it	How long it stays in the creel
Nickname	The name the croft shows for you	Kept until the croft key is deleted
Email address	Telling your croft key from the rest so you can log in again	Kept until the croft key is deleted
Password hash	Checking your password while we never keep the password itself	Kept until the croft key is deleted
Sign-up date	Helping with support and handling abuse	Kept until the croft key is deleted

And that is all of it. Peerie never asks for your real name, address, date of birth, phone number or any payment detail; there is nothing on the island to pay for. Passwords are held only as a one-way hash. Lawful basis: performance of a contract (running the account you asked us for). When you delete your account, everything listed goes immediately, using the button on your account page.

Kept in your browser, never at the croft

Data on the croft	What it is used for on the island	How long it stays in the creel
The coin creel, your level, missions and settings	Letting you carry on from the same ledge	Kept until the browser data is cleared
Age confirmation	Saves asking you over and over	Kept until the browser data is cleared
Cookie choice	Recording the consent you gave Peerie	Kept until the browser data is cleared

None of this leaves your device or reaches the croft.

Google tags need your consent

With ‘Accept all’ chosen, Google Analytics and Google Ads tags measure visits and whether our adverts lead to play, for example whether a first spin took place. Google receives your IP address, device information and those events. With ‘Essential only’ chosen, the tags work in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.

Logs kept by the island’s web host

Standard request logs are kept by our host for a short time, for security. Lawful basis: legitimate interests.

Never on this island

Payment data: none, ever, because nothing is sold.
Marketing email: none, unless you ask Peerie for it.
Selling or renting your data: never, to anyone, not for all the peat on the hill.
Gambling operators and gambling affiliate links: no sharing with either, and no links.

The UK GDPR rights you hold on the island

Your rights cover access, correction, erasure, restriction and objection to processing, and you may withdraw consent at any time. The account page lets you delete your account, which erases its data straight away; clearing this site’s data in your browser deletes whatever remains. If you wish to complain, the ICO is at ico.org.uk.

Privacy on the croft