Last updated 22 September 2026.
The controller for personal data processed through scarletlantern.com is the operator of scarletlantern.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That table is all of it. We do not ask your legal name, where you live, when you were born or your telephone number, and we never ask for card details, because nothing on this street is sold. The password itself is never stored - only a one-way hash of it. We hold the rest to give you the account you asked for and for no other reason. The delete button on your account page clears every row above it the instant you press it.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
All of that stays in your own browser. None of it reaches us.
The Google route is optional; the email form leads to the same account. Choosing it sends you to Google to approve the request, and Google returns exactly three items: a permanent identifier for your account, your email address, and your first name, which we offer as an opening nickname. Nothing more is requested - no contacts, no calendar, no Drive, no profile photo, no right to act for you - and your password is never passed to us. Google's handling of the sign-in is covered by Google's privacy policy.
Stored: the identifier, the email address, the nickname you confirm. Nothing further. Account deletion removes all three immediately. Access can be revoked at any time through "Third-party apps with account access" in your Google account, leaving the games intact and sign-in by email and password available. No Google script is present on these pages, so nothing goes to Google unless the Google button is pressed. Lawful basis: performance of a contract.
Under "Accept all" we use Google Analytics and Google Ads tags to measure visits and whether advertising led to play - the first spin being the usual marker. Google receives your IP address, device information and those events. Under "Essential only" the tags run in consent mode, which sets no cookies and no advertising identifiers. Lawful basis: consent.
Ordinary request logs are kept briefly by the company hosting the site, for security. Basis: legitimate interests.
At any point you can see what is held, have it corrected or erased, limit how it is used, object to that use, or take your consent back. The delete button removes the account side on the spot; clearing this site's data in the browser removes what remains. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Scarlet Lantern is restricted to adults of 19 and over. Every coin is virtual and holds no monetary value: it cannot be bought, sold, withdrawn or exchanged. Nothing on the site is for sale, no prize of real value is offered, and a winning session here means nothing for real-money gambling.
If gambling is a problem, help is free and confidential: ConnexOntario 1 866 531 2600, 24 hours a day · Responsible Gambling Council · CCSA · Our responsible play policy