Privacy at Clockwork Attic | Your PIPEDA Rights

Who keeps the attic’s data

The controller for personal data processed through clockworkattic.com is the operator of clockworkattic.com. Contact: [email protected].

What sits in your workbench account

What we store	Why the attic stores it	How long the attic keeps it
Nickname	The name the toys call you	Until you delete the workbench account
Email address	Recognising your account when you climb back up	Until you delete the workbench account
Password hash	Checking your login while the real password never reaches us	Until you delete the workbench account
Sign-up date	Answering you, and stopping misuse	Until you delete the workbench account

Nothing else is collected. We never ask for your real name, address, date of birth, phone number or any payment detail, since the attic has nothing to sell. Your password is kept only as a one-way hash. Lawful basis: performance of a contract (providing the account you requested). Deleting your account wipes all of it at once, and your account page has a button for exactly that.

Left in your browser’s toybox

What we store	What it is for in the attic	How long the attic keeps it
Coins, level, missions and toy settings	Letting the toys carry on where you stopped	Until you clear this browser’s data
Age confirmation	So the banner does not repeat on each page	Until you clear this browser’s data
Cookie choice	Your consent choice	Until you clear this browser’s data

All of this sits on your own device; none of it travels to us.

Google tags wait for your nod

Pick “Accept all” and we load Google Analytics and Google Ads tags to measure visits and whether our adverts lead to play, such as a first spin taking place. Google then receives your IP address, device information and those events. Pick “Essential only” and the same tags run in consent mode without cookies and without advertising identifiers. Lawful basis: consent.

Our host’s security request logs

For security, our host holds ordinary request logs for a short while. Lawful basis: legitimate interests.

What the workshop never does with data

We never take payment data, because nothing is for sale.
Workshop marketing email reaches you only if you have asked for it.
The workshop never sells or rents out your data.
Gambling operators get nothing from us, and the attic carries no gambling affiliate links.

Your PIPEDA rights in the attic

At any time you may access, correct, erase or restrict your data, object to its processing and withdraw consent. Deleting your account on the account page erases the account data straight away; clearing this site’s data in your browser takes care of the rest. Complaints can go to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Privacy, plainly put