Who we are
This Privacy Policy explains how Turismsv collects and uses personal data when you use turismsv.com. The data controller is (company number ), . You can reach us about privacy at any time through our contact form or by email at , choosing the topic "Privacy question".
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
| Data | When | Why |
|---|---|---|
| First and last name, email address, UK phone number | When you create an account | To create and run your account, and to contact you about it |
| Password (stored only as a one-way hash) | Email sign-up | To let you sign in securely. We can never see your actual password |
| Google account ID, name and verified email | If you choose "Continue with Google" | To sign you in with Google |
| Coin balance, XP, level, games opened, bonus times | While you use your account | To run your wallet, levels and passport |
| Name, email, topic and message | When you use the contact or Player Care form | To answer you and act on requests such as breaks or deletion |
| Date, time, event type and IP address | Sign-ups, sign-ins, form messages and bonuses | To keep the service secure, stop misuse and investigate problems |
We don't collect payment details, because nothing on Turismsv can be bought. We don't knowingly collect data from anyone under 18.
Our lawful bases
- Contract: to provide your account and the features you sign up for.
- Legitimate interests: to keep the site secure, prevent fraud and misuse, answer your messages and improve the site.
- Legal obligation: where we must keep or share information by law.
- Consent: for any optional cookies (see our Cookie Policy). You can withdraw consent at any time.
How we keep your data safe
All forms on Turismsv (sign-up, sign-in, contact and Player Care) are processed on our own server, not in your browser. In practice that means:
- the whole site runs over an encrypted HTTPS connection;
- your account is stored in a protected area of our server that can't be opened from the web;
- passwords are scrambled with strong one-way hashing before they're saved;
- sign-in uses a secure, HTTP-only session cookie that page scripts can't read;
- repeated wrong passwords temporarily lock sign-in to stop guessing;
- contact messages are sent from our server to our team through an encrypted email service and are never shown publicly.
Who we share data with
We never sell your personal data. We share it only with service providers who help us run Turismsv, under contracts that protect it:
- Our web hosting provider, which stores the site and account files;
- Our email delivery provider, which carries contact and Player Care messages to our inbox;
- Google, only if you choose to sign in with Google (see Google's own privacy policy).
We may also share information if the law requires it or to protect the safety of our players.
International transfers
Some providers, such as Google or our email provider, may process data outside the UK. Where they do, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum.
How long we keep it
- Account data: until you delete your account, or after 24 months without a sign-in, when we may close it.
- Contact and Player Care messages: up to 24 months, so we can follow up and keep records of break or restriction requests.
- Security logs: up to 12 months.
When you delete your account, your account file is removed from our server straight away. A short record that the deletion happened may be kept in our security log.
Your rights
You have the right to: access your data; correct it; have it deleted; restrict or object to how we use it; receive it in a portable format; and withdraw consent. To use any of these rights, contact us through our contact form or by email at . We'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to help first.
Cookies
We use one strictly necessary cookie to keep you signed in and a few browser storage items to remember your choices. Full details are in our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version. If we make a significant change we'll show a notice on the site.