Privacy Policy
What we collect, why we collect it, and how to get it back or get rid of it.
Data controller
Le Macaroon is the controller of personal data used by this service. Our privacy contact can be reached at support@lemacaroon.com. The operator's registered legal details must be completed before production launch.
What we collect
| Category | Examples |
|---|---|
| Identity | Name, date of birth, screen name, ID document at verification |
| Contact | Email, phone, postal address |
| Account | Password hash, security settings, limits, seed pairs |
| Play | Rounds, stakes, results, balances, transaction history |
| Technical | Device and browser details, security logs, and country code. Cookie-consent evidence never stores a raw IP address. |
| Marketing | Your preferences and how you interact with our emails |
Why we collect it
- To run your account and the games — performance of our contract with you.
- To check eligibility — our legitimate interest in keeping the platform 18+ and preventing duplicate accounts.
- To keep play safe — legitimate interest in identifying harmful play patterns and honouring self-exclusions.
- To send marketing — your consent, which you can withdraw at any time from your profile.
- To meet legal and regulatory duties — including responding to lawful requests.
Who we share it with
We do not sell your data. We share only what is needed with the hosting and email providers configured by the operator. There are no payment processors because there are no payments. Optional analytics and marketing storage remain disabled unless you consent and a measurement service is configured. We also disclose data where the law requires it.
How long we keep it
Account and play records are kept while the account is active and for the period reasonably needed for security, disputes and legal obligations after closure. Consent records are append-only evidence tied to a policy version. Marketing preferences are kept until you withdraw consent.
Your rights
- Access — a copy of the data we hold about you.
- Rectification — correction of anything inaccurate.
- Erasure — deletion, except where retention is legally required.
- Restriction — pause our processing while a dispute is resolved.
- Portability — your data in a structured, machine-readable format.
- Objection — to processing based on legitimate interests, including profiling.
- Withdraw consent — at any time, for anything based on consent.
Write to support@lemacaroon.com and we will respond within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada.
Cookies
Covered separately in our cookie policy.
Security
Data is encrypted in transit with TLS 1.3 and at rest. Passwords are hashed with bcrypt. Access to production data is limited to staff who need it, logged, and reviewed quarterly. If a breach affects you we will tell you and the regulator within 72 hours of becoming aware of it.
Contact
Le Macaroon privacy contact — support@lemacaroon.com.
