Information handled
Account information includes email, screen name, date of birth, Canada eligibility confirmations and a password hash or a linked Google account identifier. Runtime information includes session identifiers, balance activity, security events, preferences and technical request data.
Purposes
We use information to provide the service, secure accounts, enforce eligibility and breaks, answer support requests, preserve virtual-credit history and meet legal obligations.
Service providers
Our hosting provider processes application traffic and stored account data. Brevo transmits transactional support and password-reset email. ImprovMX forwards mail sent to the public concierge address. Google receives an OAuth request only if you choose Google sign-in.
If you consent to Analytics, Google Analytics 4 receives page-view and device/browser measurement data. Advertising storage, ad personalization and Google signals remain disabled. You may withdraw consent in the Cookie Preference Centre.
Retention and choices
Account and game-ledger records are retained while the profile operates and as reasonably needed for security. OAuth handshakes expire in 10 minutes, pending Google registrations in 15 minutes, password-reset links in one hour, and sessions in up to seven days. Support records are retained only as long as needed for resolution and security. You may change optional cookie choices, request support and use Player Care controls.
Your privacy requests
Contact concierge@lesarrasin.com to request access, correction or deletion where applicable. Identity verification may be required without requesting unnecessary sensitive information.
Security
Passwords are one-way hashed; OAuth state, reset tokens and sessions are time-limited and stored as digests where appropriate. No system can promise absolute security, but access and data are constrained by purpose.