Privacy Policy

1. Introduction

IslandSpinWorld ("we," "our," or "us") respects your privacy and is committed to protecting it through this Privacy Policy. This document describes the types of information we may collect from you or that you may provide when you visit islandspinworld.com (the "Platform") and our practices for collecting, using, maintaining, protecting, and disclosing that information.

Please read this Policy carefully. By accessing or using the Platform you agree to this Policy and our Terms & Conditions. If you do not agree with our policies and practices, do not use the Platform.

2. Who We Are

IslandSpinWorld is an independent free-to-play social-entertainment website that themes its visuals after classic casino games. We are the data controller for any personal information processed in connection with the Platform.

For all privacy-related inquiries, please contact privacy@islandspinworld.com. We aim to respond within five (5) business days.

3. Information We Collect

We have designed IslandSpinWorld to operate with the smallest possible privacy footprint. We do not require account creation, log-in credentials, names, postal addresses, phone numbers, payment information, or government-issued IDs. The categories of information that may nonetheless be processed in the course of normal Platform operation are described below.

3.1 Information you provide voluntarily

Age confirmation. When you click "Yes, I'm 18+" on the age gate, a small flag (isw_age_ok = "1") is written to your browser's local storage. We never see this value; it lives on your own device and is used only to prevent the gate from re-appearing on subsequent visits.
Email correspondence. If you choose to email us (e.g., at hello@, privacy@, or legal@islandspinworld.com), we will receive whatever information you include — such as your email address, name, and the contents of your message — and we will keep it only as long as necessary to handle your inquiry.
Newsletter sign-up (if used). Our footer contains a newsletter form. The form is currently a UI placeholder and does not transmit your address to any mailing-list provider; however, if and when this changes, we will update this Policy accordingly and obtain your explicit consent.

3.2 Information collected automatically

Server logs. Our hosting provider may automatically log standard request information for security and reliability purposes — including your IP address, the date and time of each request, the URL requested, the HTTP status code returned, the user-agent string of your browser, and the referring URL. These logs are retained for a short rolling window (typically 14 days) before being purged.
Browser storage of game state. Your virtual Island Coin balance is stored in sessionStorage on your device under the key isw_balance. This is a string of digits inside your browser; we do not transmit, copy, or have any way to retrieve it.

3.3 What we do NOT collect

We do not collect names, dates of birth, postal addresses, telephone numbers, or other directly identifying details.
We do not collect financial information — there is nothing to pay for.
We do not collect biometric data, geolocation more precise than IP-derived country, voice recordings, or video.
We do not run advertising pixels (Meta, TikTok, Google Ads, etc.).
We do not build behavioral profiles or run automated decision-making with significant effects.

4. How We Use Information

The limited information described above is used solely for legitimate operational purposes:

To provide and maintain the Services.
To remember your age confirmation so you don't see the gate on every visit.
To preserve your in-session coin balance while your tab is open.
To detect, prevent, and respond to security incidents, abuse, fraud, and technical problems.
To respond to your communications when you contact us.
To comply with legal obligations and enforce our Terms.
To improve the Platform — for example, by reviewing aggregated, non-identifying request statistics.

We will never use your information for purposes incompatible with those listed above without first obtaining your consent.

5. Legal Basis for Processing (EEA & UK)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with comparable rules, our legal basis for collecting and using the information described above will depend on the specific data and the context in which we collect it. We generally rely on:

Legitimate interests (Art. 6(1)(f) GDPR) — operating, securing, and improving the Platform; responding to inquiries; fulfilling our obligations under the Terms.
Consent (Art. 6(1)(a) GDPR) — for non-essential cookies or any future opt-in features such as newsletter sign-up. You may withdraw consent at any time.
Legal obligation (Art. 6(1)(c) GDPR) — when we must retain or disclose information to comply with applicable law.

6. Cookies & Local Storage

"Cookies" and similar technologies (such as localStorage and sessionStorage) are small pieces of data that a website can store on your device. IslandSpinWorld uses an absolute minimum of these.

6.1 What we use

Strictly necessary — local storage. Key isw_age_ok: stores your age confirmation so the modal does not reappear on every visit. No expiration. You may clear it at any time via your browser's site-data controls.
Strictly necessary — session storage. Key isw_balance: stores your in-session virtual coin balance. Cleared automatically when you close the tab.

6.2 What we do not use

Persistent advertising or tracking cookies.
Cross-site identifiers, fingerprinting, or session-replay tools.
Third-party analytics with personal-data sharing (e.g., Google Analytics with default settings).

6.3 Managing your storage

Most modern browsers let you view, block, or delete cookies and local-storage entries through their settings. Doing so will not prevent you from playing — it will simply make the age gate reappear and reset your coin balance.

7. Third-Party Services

We try to avoid third-party dependencies wherever possible. The following services may load assets when you view the Platform:

Google Fonts (fonts.googleapis.com, fonts.gstatic.com). Used solely to deliver the typefaces that style the site. Google's font delivery may log your IP address and user-agent. See Google's Privacy Policy.
Hosting provider. Our hosting provider processes server logs (see § 3.2) on our behalf as a data processor.

We do not embed social-media widgets, advertising networks, or analytics SDKs that share personal data with third parties.

We do not sell, rent, lease, or trade your personal information. Period. We may, however, share information in the following limited circumstances:

Service providers. With vendors who support our infrastructure (e.g., the hosting company), under contractual confidentiality and data-processing terms.
Legal requests. When we are required to do so by law, regulation, valid legal process, or governmental request.
Protection of rights. When we believe in good faith that disclosure is necessary to protect the rights, property, or safety of IslandSpinWorld, our users, or the public.
Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you (e.g., via a banner on the Platform) before personal information is transferred and becomes subject to a different privacy policy.

9. Children & Minors

The Platform is not directed to anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, do not use the Platform and do not send us any personal information.

If you are a parent or guardian and you believe your child has provided personal information to us, please contact privacy@islandspinworld.com and we will promptly delete it from our records.

10. Data Security

We take reasonable and appropriate administrative, technical, and physical measures to protect the limited information processed in connection with the Platform. These include HTTPS encryption in transit, server-side access controls, software-update discipline, and the principle of collecting only what is strictly necessary.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Platform at your own risk.

11. Data Retention

We keep information only as long as necessary for the purposes for which it was collected:

Server access logs: approximately 14 days, then purged.
Email correspondence: for as long as needed to handle the inquiry, plus a reasonable period for record-keeping (typically up to 24 months).
Browser storage entries: controlled by you on your device. We have no copy.

Where information must be retained for legal, regulatory, tax, or accounting purposes, we will keep it for the period required by applicable law.

12. International Data Transfers

Because the Platform is delivered over the internet, technical information such as your IP address may be transferred to, stored in, or processed in countries other than the country in which you live, including countries outside the EEA or the United Kingdom. Where such transfers occur, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your information.

By using the Platform, you understand that your information may be transferred to facilities and servers outside your country of residence.

13. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

Right of access — to ask whether we hold personal information about you and to receive a copy.
Right to rectification — to ask us to correct inaccurate or incomplete information.
Right to erasure ("right to be forgotten") — to ask us to delete personal information.
Right to restrict processing — to ask us to stop or limit how we use your information.
Right to data portability — to receive your information in a structured, machine-readable format.
Right to object — to object to processing based on our legitimate interests.
Right to withdraw consent — for any processing based on consent, at any time, without affecting the lawfulness of prior processing.
Right to lodge a complaint with a supervisory authority (such as your country's data-protection authority).

To exercise any of these rights, email us at privacy@islandspinworld.com. Because we collect very little, we may not actually hold any information that identifies you — but we will always respond.

14. California Residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information, and the right not to be discriminated against for exercising those rights.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We have not done so in the past twelve (12) months and have no plans to do so. To exercise any California-specific right, please contact us at privacy@islandspinworld.com.

15. Do-Not-Track Signals

Some browsers send a "Do Not Track" (DNT) signal. There is currently no industry-wide standard for how to respond to DNT signals. Because we do not engage in cross-site behavioral tracking in the first place, our practices are unaffected by the presence or absence of DNT.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when revisions were most recently made. If we make material changes, we will notify you via a prominent notice on the Platform for at least thirty (30) days before the changes take effect.

Your continued use of the Services after any change in this Policy constitutes your acceptance of the updated Policy.

17. Contact & Data Protection

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your rights, please contact us:

Privacy inquiries: privacy@islandspinworld.com
General inquiries: hello@islandspinworld.com
Web: islandspinworld.com

If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority.

Privacy on this island is the rule, not the exception. 🌺