Last updated 22 September 2026.
The controller for personal data processed through voltstall.com is the operator of voltstall.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
Nothing else is held. We do not ask your legal name, where you live, when you were born or your telephone number, and we never ask for card details, because this stall sells nothing. The password itself is never kept - only a one-way hash of it. The basis for holding any of this is the contract you entered when you asked for the account. The delete button on your account page clears every row above the moment you press it.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
All of that sits in your own browser. None of it reaches our servers.
Using Google is entirely optional and the email form does the same job. If you pick it, Google asks you to approve the request and then returns three things: a permanent account identifier, your email address, and your first name, which we suggest as a nickname. We ask for no more than that: no contacts, no calendar, no Drive, no profile picture, and no ability to do anything on your behalf. The password stays between you and Google. Whatever Google does with the sign-in on its side is governed by Google's privacy policy, not ours.
Three things are stored: the identifier, the email address, and the nickname you confirm. Delete your account and all three are deleted immediately. Our access can be revoked at any moment under "Third-party apps with account access" in your Google account; nothing breaks, you just use the email form to sign in afterwards. There is no Google script on these pages, so nothing goes to Google unless you choose the Google button. Lawful basis: performance of a contract.
With "Accept all", Google Analytics and Google Ads tags are loaded to measure visits and to see whether an advert led to play - a first spin, for example. What Google receives is your IP address, information about the device, and those events. With "Essential only", the tags still run but in consent mode, which means no cookies and no advertising identifiers. Lawful basis: consent.
The company hosting the site keeps ordinary request logs for a short while, for security. Basis: legitimate interests.
At any time you may see what we hold, correct it, have it erased, limit how it is used, object to that use, or take back your consent. The delete button on the account page removes the account side of it on the spot; clearing this site's data in your browser removes what was left in the browser. You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
You must be 19 or over to use Volt Stall. The coins are virtual, hold no monetary value, and there is no way to buy, sell, withdraw or exchange one. Nothing is for sale, no prize has real-world value, and doing well here says nothing at all about real-money gambling.
If gambling is a problem, help is free and confidential: ConnexOntario 1 866 531 2600, 24 hours a day · Responsible Gambling Council · CCSA · Our responsible play policy