Last updated 22 September 2026.
The controller for personal data processed through emberwharf.com is the operator of emberwharf.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That table is the whole manifest. We never ask your legal name, your address, your date of birth or a telephone number, and card details are never asked for, because nothing on this wharf is sold. The password itself is not kept - only a hash that cannot be read backwards. All of it is held to give you the account you asked for and for nothing else. The delete button on your account page clears every row the moment you press it.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
Every bit of that sits in the browser in front of you. None of it leaves the quay.
The Google button saves you inventing a password; the email form does the same job if you would rather. Use Google and you are taken there to approve the request, after which Google sends back three things: a permanent identifier for your account, your email address, and your first name, which we put up as a starting nickname. We ask for nothing else at all - no contacts, no calendar, no Drive, no profile photo, no ability to act for you - and we never receive the password. Google's own privacy policy covers its side of it.
We store three things: the identifier, the email address and the nickname you confirm. Delete the account and all three are removed at once. Our access can be withdrawn at any time from "Third-party apps with account access" in your Google account - the games continue as before, and you sign in with an email address and password. No Google script loads on these pages, so nothing goes to Google unless you press the Google button yourself. Lawful basis: performance of a contract.
If you accept all, Google Analytics and Google Ads tags are loaded to count visits and to tell us whether an advert led to play - a first spin, typically. Google receives your IP address, device information and those events. If you accept only what is essential, the tags run in consent mode, setting no cookies and no advertising identifiers. Lawful basis: consent.
The company hosting the site keeps ordinary request logs for a short period, for security. Basis: legitimate interests.
At any time you can ask to see what is held, have it corrected or struck off, limit or object to how it is used, and withdraw consent. Deleting the account clears its records straight away; clearing this site's data in the browser clears the rest. You can complain to the ICO at ico.org.uk.
Ember Wharf is an adults-only site for players of 18 and over. Every coin is virtual, holds no monetary value, and cannot be bought, sold, cashed out or exchanged. There is nothing to buy, no prize of real-world value, and doing well here says nothing about real-money gambling.
If gambling is a problem, help is free and confidential: National Gambling Helpline 0808 8020 133, 24 hours a day · BeGambleAware · GamCare · Our responsible play policy