Privacy at the Depot | Double Decker Lane (UK GDPR)

Who runs the depot (data controller)

The controller for personal data processed through doubledeckerlane.com is the operator of doubledeckerlane.com. Contact: [email protected].

What your ticket records

What the ticket holds	Why it is on the ticket	How long it stays on board
Nickname	What the game calls you	Held until the ticket is deleted
Email address	Recognising the account when you log back in	Held until the ticket is deleted
Password hash	Checking your login without the depot ever keeping the password	Held until the ticket is deleted
Sign-up date	Replying to your messages, dealing with abuse	Held until the ticket is deleted

Nothing beyond that goes into the ticket machine. We do not ask for your real name, home address, date of birth, phone number or any payment detail, as there is no fare to collect. Your password is held only as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Delete your account from the account page and all of it goes at once.

Kept on your device, not at the depot

What the ticket holds	What the key does	How long it stays on board
Coins, level, missions and your reel settings	Getting back on where you got off	Stays until you wipe this browser’s data
Age confirmation	So the banner does not stop you at every page	Stays until you wipe this browser’s data
Cookie choice	Noting what you chose on consent	Stays until you wipe this browser’s data

This stays on your own device and never reaches us.

Google tags ride only with your consent

Press ‘Accept all’ and Google Analytics and Google Ads tags start measuring visits and whether our adverts led someone to play, a first spin for instance. Google then receives your IP address, device information and those events. Press ‘Essential only’ and the tags run in consent mode, with no cookies and no advertising identifiers. Lawful basis: consent.

Logs kept by the route’s host

Our hosting provider keeps ordinary request logs for a short time for security. Lawful basis: legitimate interests.

Things we stay clear of

Never any payment data: nothing is on sale.
No marketing email lands in your inbox unless you ask.
Your data is not for sale or hire to anybody.
No data handed to gambling operators, and no gambling affiliate links on any page.

What you can ask the depot under UK GDPR

You have the right to access, correct, erase or restrict your data, to object to its processing and to withdraw consent whenever you like. Deleting your account on the account page wipes the account data on the spot; clearing this site’s data in your browser takes away whatever is left. To complain, contact the ICO at ico.org.uk.

Privacy at the bus depot