Last updated 22 September 2026.
The controller for personal data processed through lumenreef.com is the operator of lumenreef.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That table is everything. We do not ask your legal name, your address, your date of birth or your telephone number, and we never ask for card details, because there is nothing here to pay for. Your password is kept only as a hash that cannot be reversed. We hold all of it to give you the account you asked for and for no other reason. Pressing delete on your account page clears every row of it at once.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
All of that stays in the browser you are using. None of it is sent to us.
The Google button is there for convenience; the email form achieves exactly the same thing. Choose it and you are handed to Google to approve the request, after which Google sends back three items: a permanent identifier for your Google account, your email address, and your first name, which we put forward as a nickname you can change. Nothing else is requested - not your contacts, not your calendar, not your Drive, not your photo, and no permission to act as you. Your Google password never reaches us. Google's own privacy policy covers what Google does with the sign-in at its end.
What we keep is the identifier, the email address and whichever nickname you confirm. Nothing else is stored. Delete the account here and all three go at once. You can also withdraw our access whenever you like, from "Third-party apps with account access" in your Google settings - the games carry on working, you simply sign in with an email address and a password from then on. No Google script is loaded on these pages, so nothing reaches Google unless you press the button yourself. Lawful basis: performance of a contract.
Say "Accept all" and we load Google Analytics and Google Ads tags, which count visits and tell us whether an advert ended in somebody actually playing - that a first spin happened, for instance. Google sees your IP address, some device information and those events. Say "Essential only" and the same tags run in consent mode: no cookies, no advertising identifiers. Lawful basis: consent.
Ordinary web-server request logs are kept briefly by our host, for security. Basis: legitimate interests.
At any time you can see what is held, have it corrected or erased, limit or object to how it is used, and withdraw your consent. Deleting the account clears the account records on the spot, and clearing this site's data in your browser removes whatever is left. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Lumen Reef is for adults of 19 and over. Every coin here is virtual, carries no monetary value, and cannot be bought, sold, cashed out or swapped for anything. There is nothing on the site to buy, no prize worth anything in the real world, and a good run here tells you nothing about real-money gambling.
If gambling is a problem, help is free and confidential: ConnexOntario 1 866 531 2600, 24 hours a day · Responsible Gambling Council · CCSA · Our responsible play policy