Privacy notice
Last updated: 26-10-2026
Slot Harbour is a free, just-for-fun slot game site run by an individual, as a hobby project. This notice explains what personal data the site holds about you, why, and what you can do about it.
What I collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Your email address, display name and a secure hash of your password | To create and run your account, confirm your email address, and send password reset emails | Providing the service you signed up for |
| Your confirmation that you are 18 or over and live in the UK or Europe, and when you gave it | To keep the site to the audience it is meant for | Legitimate interests |
| Your play credit, the games you play, your stakes and results, and your sound, stake and gamble settings | To run the games and show your history on your account page | Providing the service you signed up for |
| Your IP address, browser details and the times you sign in, plus the email address entered in a failed sign-in or password reset | To keep the site secure, stop abuse and fix faults | Legitimate interests |
I do not use your data for marketing, I do not sell it, and I do not profile you. The only emails the site sends are account emails (confirming your address and resetting your password).
Cookies and similar storage
The site uses only what it needs to work, so it does not ask for cookie consent:
slots_sid: keeps you signed in. It is removed when you sign out or when your sign-in expires.- A session cookie: carries security tokens and on-screen messages between pages.
- Browser local storage: if your connection drops in the middle of a spin, the game keeps a note of that spin in your browser so it can finish it when you come back. The note is removed once the spin is complete.
There are no analytics, advertising or tracking cookies, and no third-party content apart from the Cloudflare security check described below.
Who else handles your data
- Cloudflare: the site runs behind Cloudflare's network, which passes on every request, and Cloudflare Turnstile checks that sign-in, registration and password reset forms are used by a person rather than a bot. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Some of these providers may process data outside the UK and Europe. Where they do, they rely on the legal safeguards for international transfers that UK and EU data protection law requires.
How long I keep it
- Security and error logs, including IP addresses: 30 days.
- Spin recovery records: 14 days.
- Your account and game history: for as long as your account exists. Rounds older than 30 days are moved to archive files.
- If your account is deleted, your email address, display name and password are removed straight away. Your credit history and game results are kept against an anonymous account number, so the game statistics and fairness records stay complete, but they can no longer be linked to you.
Your rights
Under UK and EU data protection law you can ask to:
- get a copy of the personal data I hold about you;
- have it corrected;
- have your data deleted;
- object to, or restrict, how I use it;
- receive your data in a portable format.
You can delete your account from your account profile page, or for anything use the contact page to send me a message.
Changes
If this notice changes, the date at the top will be updated. If a change affects how your data is used, I will tell you by email or on the site before it takes effect.