Privacy and UK GDPR on the Lea

Data controller for the lea

The controller for personal data processed through hedgerowballoons.com is the operator of hedgerowballoons.com. Contact: [email protected].

What the flight book records

Flight-book entry	Why Hobbin notes it	How long it stays in the book
Crew name	The name shown on your basket	Until you delete the account, no longer
Inbox address	Recognising you at each new login	Until you delete the account, no longer
Password hash	Confirming a login while the password itself is never kept	Until you delete the account, no longer
Sign-up date	Replying to help requests and stopping misuse	Until you delete the account, no longer

Nothing more goes in the flight book. Hobbin never asks for your real name, your home address, your date of birth, a phone number or a single payment detail, since no stall on the lea takes money. Your password is kept only as a one-way hash. Lawful basis: performance of a contract (providing the account you asked for). One press of the delete button on your account page wipes every entry.

Kept by your browser, not by us

Flight-book entry	Why your browser keeps it	How long it stays in the book
Coins, level, missions and each balloon’s own settings	Picking your flight up where it paused	Until your browser data is wiped
Age confirmation	Not quizzing you afresh on every page	Until your browser data is wiped
Cookie choice	Your cookie answer, pinned in the basket	Until your browser data is wiped

Every bit of it stays on your own device, and none of it reaches us.

Google tags, only on your yes

If you pick “Accept all”, Google Analytics and Google Ads tags measure visits and whether an advert of ours led someone to the lea to play, for instance a first spin taking place. Google receives your IP address, device information and those events. If you pick “Essential only”, the same tags run in consent mode, setting no cookies and using no advertising identifiers. Lawful basis: consent.

What our web host jots in its logs

For security our host keeps ordinary request logs, held only briefly. Lawful basis: legitimate interests.

Things the crew never does

Payment data: none, ever, as nothing is sold.
Marketing emails reach only those who ask for them.
Nobody gets your data from us, by sale or by hire.
Not a scrap shared with gambling operators, and no gambling affiliate links anywhere.

Your data rights on the lea

At any time you may access your data, correct or erase it, restrict or object to its processing, and withdraw consent. The delete button on your account page erases the account data straight away; clearing this site’s data in your browser sweeps away what is left on your side. You may complain to the ICO at ico.org.uk.

Privacy in the flight book