Privacy at the Mill | Russet Cider Mill (UK GDPR)

Who answers for your data at the mill

The controller for personal data processed through russetcidermill.com is the operator of russetcidermill.com. Contact: [email protected].

What sits behind your cellar key

What the mill keeps	Why Quillan keeps it	How long it stays in the cellar
Nickname	The name shown beside your spins	Until you hand your cellar key back
Email address	Matching you to your cellar key at log-in	Until you hand your cellar key back
Password hash	Checking your log-in without our ever storing the password itself	Until you hand your cellar key back
Sign-up date	Replying when you write, and stopping misuse	Until you hand your cellar key back

Nothing else is collected. We never ask for your real name, home address, date of birth, phone number or any payment detail, since nothing at the mill is for sale. Your password is kept only as a one-way hash. Lawful basis: performance of a contract (providing the account you requested). Deleting your account wipes all of it at once, and your account page has a button for exactly that.

What stays in your browser, not at the mill

What the mill keeps	Kept there for	How long it stays in the cellar
Your coin count, level, missions and game settings	Carrying on at the reel you left	Until you sweep this site’s data from your browser
Age confirmation	Not asking about cookies on every page you open	Until you sweep this site’s data from your browser
Cookie choice	Recording the cookie choice you made	Until you sweep this site’s data from your browser

None of this leaves your device; the mill never sees it.

Google tags, poured only with your yes

Pick “Accept all” and the mill switches on Google Analytics and Google Ads tags, which measure visits and whether our adverts lead to play, a first spin for instance. Google then receives your IP address, device information and those events. Pick “Essential only” and the tags run in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.

Request logs at the mill’s host

Our host keeps routine request logs for security, and only for a short while. Lawful basis: legitimate interests.

What the mill will not do with your data

Never any payment data: nothing here can be bought.
Marketing email only if you ask us to send it.
The mill never sells or rents your data to anyone.
No sharing with gambling operators, and no gambling affiliate links on the hill.

Your UK GDPR rights at the mill

At any time you may access, correct, erase or restrict your data, object to its processing, or withdraw consent. Deleting your account on the account page erases the account data straight away; clearing this site’s data in your browser removes what is left. Complaints can go to the ICO at ico.org.uk.

How the mill handles your data