Watercress Weir Privacy Policy — What Hangs on Your Peg (UK GDPR)

Who controls the data on the farm

The controller for personal data processed through watercressweir.com is the operator of watercressweir.com. Contact: [email protected].

What hangs on your wheelhouse peg

On your peg	Why Brooklime needs it	How long the farm keeps it
Nickname	The name chalked over your peg	Until you unhook the peg and delete the account
Email address	Telling your peg from the rest when you log in	Until you unhook the peg and delete the account
Password hash	Letting you log in while the farm never holds your actual password	Until you unhook the peg and delete the account
Sign-up date	Replying to notes and dealing with abuse on the farm	Until you unhook the peg and delete the account

The table above is complete. Brooklime never asks for your real name, address, date of birth, phone number or any payment detail, since nothing on the farm is sold. Of your password we keep only a one-way hash. Lawful basis: performance of a contract (running the account you signed up for). Deleting your account removes every line of it at once, via the button on your account page.

What the browser keeps, not the farm

On your peg	Why your browser holds it, not Brooklime	How long the farm keeps it
Trug, level, missions and each game’s settings	Picking up your spins where you stopped	Until this site’s browser data is wiped
Age confirmation	So the cookie question is not asked page after page	Until this site’s browser data is wiped
Cookie choice	Remembering the cookie answer you gave Brooklime	Until this site’s browser data is wiped

It stays put on your device and never travels to the farm.

Google tags by the stream, only with your yes

If you pick “Accept all”, Google Analytics and Google Ads tags measure visits and whether our adverts lead to play, such as a first spin. That sends Google your IP address, device information and those events. If you pick “Essential only”, the tags stay in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.

Request logs at the web host behind the wheelhouse

Our web host stores routine request logs for a brief period to keep the farm secure. Lawful basis: legitimate interests.

What the farm never does

Payment data never reaches us: the farm has nothing to sell.
Marketing email comes only if you request it.
Not one detail of yours is sold or hired out, to anybody.
No data handed to gambling operators, and not one gambling affiliate link by the stream.

Your UK GDPR rights on the farm

Under UK GDPR you can see what we hold, put it right, have it erased or restricted, object to its processing, or pull your consent at any time. Your account page deletes the account data instantly; wiping this site’s data in your browser clears the remainder. Unhappy with us? Complain to the ICO at ico.org.uk.

Privacy by the cress beds