Policy last revised at the workbench on 22 September 2026.
The controller for personal data processed through winduptoyshop.com is the operator of winduptoyshop.com. Contact: [email protected].
| In the box | Why it is on the shelf | How long Humphrey keeps it |
|---|---|---|
| Nickname | Your name on the shelf label | For as long as your account is open |
| Email address | Finding your toy box when you log back in | For as long as your account is open |
| Password hash | A login check that never lets us see the password itself | For as long as your account is open |
| Sign-up date | Replying to help notes and stopping misuse | For as long as your account is open |
The list stops there. Your real name, address, date of birth, phone number and payment details are never requested; with nothing on sale in this shop there would be no use for them. The password is held only as a one-way hash. Lawful basis: performance of a contract (supplying the account you requested). Deleting the account wipes every item at once, using the button on your account page.
| In the box | What the toy box uses it for | How long Humphrey keeps it |
|---|---|---|
| Coins, level, missions and how each toy is set up | Picking up where you stopped | Up to the day you clear browser data |
| Age confirmation | So the banner asks you once, not on every shelf | Up to the day you clear browser data |
| Cookie choice | Storing what you told the cookie banner | Up to the day you clear browser data |
All of this stays on your own device; none of it reaches us.
Google Analytics and Google Ads tags run only after ‘Accept all’ is pressed. They then measure visits and whether our adverts lead to play (a first spin, say), and Google receives your IP address, device information and those events. After ‘Essential only’, the tags work in consent mode: no cookies, no advertising identifiers. Lawful basis: consent.
Our web host keeps the usual request logs, briefly, to guard the shop’s security. Lawful basis: legitimate interests.
Whenever you like, you may access, correct, erase or restrict your data, object to its processing and withdraw consent. Deleting your account on the account page erases its data straight away, and clearing this site’s data in your browser deals with the remainder. If you wish to complain, the Office of the Privacy Commissioner of Canada is at priv.gc.ca.
Windup Toy Shop is for adults aged 19 or over. The reels turn on virtual coins with no monetary value, and those coins cannot be bought, sold, withdrawn or exchanged. The shop keeps no coin counter and no payment page, gives out no prizes of real-world value, and success on these shelves does not imply future success at real-money gambling.
Gambling worries? Help is free and confidential: ConnexOntario 1-866-531-2600, any hour of the day or night · CCSA · Responsible Gambling Council · How the shop keeps play in proportion