How Pawpaw Bazaar Handles Data (PIPEDA)

The data controller for the bazaar

The controller for personal data processed through pawpawbazaar.com is the operator of pawpawbazaar.com. Contact: [email protected].

What your stall-key account holds

What we hold about you	What the bazaar uses it for	How long the bazaar keeps it
Nickname	Showing your nickname at the bazaar stalls	As long as the stall account exists
Email address	Telling the account apart so you can log in again	As long as the stall account exists
Password hash	Logging you in while we never hold the password	As long as the stall account exists
Sign-up date	Answering support questions and handling abuse	As long as the stall account exists

Nothing more is collected. We do not ask for your real name, address, date of birth, phone number or any payment details, since this site has nothing to pay for. Your password exists here only as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Delete your account and all of it goes immediately; the button is on your account page.

What your browser keeps for the bazaar

What we hold about you	The job it does at the bazaar	How long the bazaar keeps it
Coins, level, missions and per-stall settings	Letting you carry on where you left off	Until the data in this browser is wiped
Age confirmation	Not asking the same question page after page	Until the data in this browser is wiped
Cookie choice	Keeping a note of your consent for the bazaar	Until the data in this browser is wiped

It all remains on your device and is never sent to us.

Google tags at the bazaar, but only if you agree

With “Accept all”, Google Analytics and Google Ads tags measure visits and whether our adverts lead people to play, for instance that a first spin took place. Google is sent your IP address, device information and those events. With “Essential only”, the tags run in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.

Logs kept by our hosting provider

Our hosting provider holds standard request logs for a short time, for security. Lawful basis: legitimate interests.

Things we stay away from

Payment data never: there is nothing for sale.
Marketing email only when you request it.
Your data is not sold or rented to anyone at all.
No data handed to gambling operators and no gambling affiliate links.

What PIPEDA entitles you to

You may access, correct, erase or restrict your data, object to processing and withdraw consent whenever you like. Deleting your account on the account page erases account data immediately, and clearing this site’s data in your browser deletes whatever is left. To complain, contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

How the bazaar handles your data