Last updated 22 September 2026.
The controller for personal data processed through pewterbay.com is the operator of pewterbay.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That is the whole list. We never ask for your real name, your address, your date of birth, your phone number or any payment detail, because there is nothing on this site to pay for. Your password is stored only as a one-way hash. Lawful basis: performance of a contract (giving you the account you asked for). Deleting your account removes all of it straight away, from a button on your account page.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
This information stays on your device and is not sent to us.
Google sign-in is optional, and the email form gets you to the same place. If you choose it, you are passed to Google to approve the request, and three things come back: a permanent identifier for your Google account, your email address, and your first name, which we offer as a nickname to start with. We ask for nothing more — no contacts, no calendar, no Drive, no profile photo, no power to act in your name. Your Google password is never shared with us. Google's own privacy policy governs its side.
The record is three fields: the identifier, the email address and the nickname you confirm. Delete the account and those three go immediately. Our access can be withdrawn at any time in your Google account, under "Third-party apps with account access"; the games keep working and you sign in with an email address and password instead. No Google script is on these pages, so nothing goes to Google unless you press the button yourself. Lawful basis: performance of a contract.
If you press "Accept all", Google Analytics and Google Ads tags are used to measure visits and to tell whether an advert led to somebody playing — a first spin, say. Google receives your IP address, device information and those events. If you press "Essential only", the tags run in consent mode: no cookies, no advertising identifiers. Lawful basis: consent.
Our host keeps standard request logs for security for a short period. Lawful basis: legitimate interests.
You can access, correct, erase, restrict or object to processing, and withdraw consent at any time. Deleting your account from the account page erases the account data immediately; clearing this site's data in your browser removes the rest. You can complain to the ICO at ico.org.uk.
Pewter Bay is for adults aged 18 and over, and nobody else. Every coin is virtual, worth nothing in money, and cannot be bought, sold, withdrawn or traded. Nothing here is for sale, no prize of real value exists, and being good at this predicts nothing about real-money gambling.
If gambling is a problem, help is free and confidential: National Gambling Helpline 0808 8020 133, 24 hours a day · BeGambleAware · GamCare · Our responsible play policy