Privacy Notice from the Oak Post Office | Autumn Post Lane (UK GDPR)

Who holds the key to your data (controller)

The controller for personal data processed through autumnpostlane.com is the operator of autumnpostlane.com. Contact: hello@autumnpostlane.com.

What your box holds

What is filed	Reason for filing	How long it is filed
Name on the box	The name you go by on the lane	Until your box is closed for good
Email for the box	Matching your log-in to the right pigeonhole	Until your box is closed for good
Password hash	Checking your password without our ever holding it	Until your box is closed for good
Sign-up date	Handling support letters and abuse	Until your box is closed for good

Nothing else is filed. We never request your real name, address, date of birth, phone number or any payment detail, since nothing on the lane is for sale. Your password is held only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked for). Deleting your account removes every part of it at once; the button is on your account page.

What your browser keeps on its own

What is filed	Why the browser keeps it for Pelham	How long it is filed
Coins, level, missions and your reel settings for each world	So your game carries on from the last spin	Until the lane’s data is swept out of this browser
Age confirmation	So the banner is not re-delivered on every page	Until the lane’s data is swept out of this browser
Cookie choice	Filing the cookie answer you gave	Until the lane’s data is swept out of this browser

All of this is kept on your device; none of it is posted to us.

Google tags, posted only with consent

If you press “Accept all”, Google Analytics and Google Ads tags measure visits and whether our adverts lead to play, such as a first spin. Google then receives your IP address, device information and those events. If you press “Essential only”, the tags run in consent mode without cookies and without advertising identifiers. Lawful basis: consent.

Request logs at the lane’s web host

Our host keeps routine request logs for a short while, for security. Lawful basis: legitimate interests.

Things the lane will not do

Never any payment data, as nothing is sold.
No marketing letters or emails unless you request them.
No selling or renting of your details to anyone at all.
Nothing is passed to gambling operators, and the lane carries no gambling affiliate links at all.

Rights UK GDPR gives you at the lane

You have the right to access, correct, erase or restrict your data, to object to processing, and to withdraw consent at any time. Deleting your account on the account page erases the account data straight away, and clearing this site’s data in your browser removes what remains. Complaints may be made to the ICO at ico.org.uk.

Your privacy at the post office