Last updated 22 September 2026.
The controller for personal data processed through chalkharbour.com is the operator of chalkharbour.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That is the entire list. We never ask for your real name, your address, your date of birth, your phone number or any payment detail, because there is nothing here to pay for. The password is kept only as a one-way hash. Lawful basis: performance of a contract — giving you the account you asked for. Deleting the account removes all of it at once, and the button is on your account page.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
That stays on your own device and never reaches us.
The Google button is there for convenience; the email form does exactly the same thing. Choose it and you are handed to Google to approve the request, after which Google returns three items: a permanent identifier for your Google account, your email address, and your first name, which we put forward as a nickname you can change. Nothing else is requested — not your contacts, not your calendar, not your Drive, not your photo, and no permission to act as you. Your Google password never reaches us. Google's own privacy policy covers what Google does at its end.
What we keep is the identifier, the email address and whichever nickname you confirm. Nothing else is stored. Delete the account here and all three go at once. You can also withdraw our access whenever you like, from "Third-party apps with account access" in your Google settings — the games carry on working, you simply sign in with an email address and a password from then on. No Google script is loaded on these pages, so nothing reaches Google unless you press the button yourself. Lawful basis: performance of a contract.
Say "Accept all" and we load Google Analytics and Google Ads tags, which count visits and tell us whether an advert ended in somebody actually playing — that a first spin happened, for instance. Google sees your IP address, some device information and those events. Say "Essential only" and the same tags run in consent mode: no cookies, no advertising identifiers. Lawful basis: consent.
Our host keeps ordinary request logs for a short while, for security. Lawful basis: legitimate interests.
You may see what is held, have it corrected or erased, limit or object to how it is used, and take your consent back at any time. Deleting the account from your account page erases the account side immediately; clearing this site's data in your browser clears the rest. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Chalk Harbour is for adults of 19 and over. Every coin here is virtual, carries no monetary value, and cannot be bought, sold, cashed out or swapped for anything. There is nothing on the site to buy, no prize worth anything in the real world, and a good run here tells you nothing about real-money gambling.
If gambling is a problem, help is free and confidential: ConnexOntario 1 866 531 2600, 24 hours a day · Responsible Gambling Council · CCSA · Our responsible play policy