Privacy Policy.
What information we collect, why, where it's kept and what you can do about it.
Last updated: 31 October 2026Who we are
This policy explains how Reine Labo (reinelabo.com) collects and uses personal information. We are the data controller for the information described here. You can reach us at [email protected].
What we collect
- When you sign up: username, email address and a password. Your password is turned into a scrambled code (a one-way hash) on our server before it is saved, so it is never stored as you typed it. We also record when you joined, your last sign-in and a count of failed sign-in attempts.
- If you use Google: your verified email address, first name and Google account ID, checked by our server directly with Google. You choose your own username.
- While you play (signed in): your coin balance, XP, level, number of games opened, your last few games and when you last collected the daily bonus.
- When you contact us: your name, email, topic and message.
- Security logs: for each form submission — date, form type, result, username/email entered, the page and your IP address. Passwords are never logged.
Where it's kept
Your account is stored on our own server as a protected file that cannot be opened from the web. We don't use public database tables and no queries or records are ever shown on the site. It stays there until you delete your account or ask us to delete it.
Messages sent through the contact or Player Care forms are emailed from our server to our support inbox over an encrypted connection, and a copy is kept in a protected log on our server so we can reply and confirm delivery.
In your browser we only keep your age confirmation and cookie choice (local storage) and a session cookie while you're signed in — see the Cookies Policy.
We never ask for or store card or bank details.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Running your account, coins and levels | Contract (providing the service you asked for) |
| Confirming you're 18+ and in the UK | Legal obligation & legitimate interests |
| Replying to messages and Player Care requests | Legitimate interests / contract |
| Security logs and preventing misuse | Legitimate interests |
We don't sell your data, use it for advertising profiles or send marketing emails.
How long we keep it
- Account data: until you delete your account (or after 24 months of no sign-ins).
- Contact messages and their log entries: up to 12 months, or less once your request is resolved.
- Security logs: up to 12 months.
Who we share it with
- Our email provider (Brevo), which delivers contact messages from our server to our inbox.
- Our hosting provider, which stores the website and account files.
- Google, only if you choose Google sign-in. Google's own privacy policy applies.
Some providers may process data outside the UK; where they do, they use approved safeguards such as UK International Data Transfer Agreements.
Security
All forms are processed server-side. Passwords are hashed, account and log files are blocked from web access, sessions use an HttpOnly cookie, and the site runs over HTTPS. No method is perfectly secure, but we take reasonable steps to protect your information.
Your rights
Under UK data protection law you can ask to see, correct, delete or move your information, or object to how it's used. You can delete your account yourself at any time from My account, which removes it from our server. Send other requests through the contact form or email [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
Reine Labo is only for adults aged 18+. We don't knowingly collect information from anyone under 18 and will delete such accounts if we find them.
Changes
We'll update this page if anything changes. The date at the top shows the latest version.