Privacy Policy | Scan Decinc

This policy explains what personal information Scan Decinc ("we", "us") collects when you use scandecinc.com, why we collect it, who sees it and what your rights are under UK data protection law. We are the "data controller" for the information described here.

What we collect

When you sign up: a username, your email address and a password. Your password is turned into a scrambled code (a "hash") before it is saved, so we cannot read it and it is never stored as you typed it.
If you use Google sign-in: your verified email address, first name and Google account ID, which Google confirms to our server. We never see your Google password.
Your play details: your coin balance, experience points (XP), level, the date you joined, your last sign-in and which games you opened and when (used for your level and daily bonus).
When you contact us: your name, email address, topic, message and the IP address you sent it from.
Security records: a log of important events such as sign-ups, sign-ins, failed sign-ins and form submissions, with the date, time and IP address. Passwords are never written to logs.
On your device: a note that you confirmed you are 18+ and your cookie choice (see the Cookie Policy).

We do not ask for or store card or bank details, because nothing on Scan Decinc costs money.

How and where it is kept

Everything you enter in our forms is sent to our servers and handled there. The pages you see never contain the details of other people or any internal records. Account information is kept on our secure servers in protected storage that cannot be opened from the web. Messages you send us are emailed from our server to our support team, and a copy is kept in a protected log so we can reply and check that the message arrived.

Why we use your information

To create and run your account, coins, levels and daily bonus (to provide the service you asked for).
To check that you are 18+ and in the UK (our legal and responsible-play duties).
To reply when you contact us (to provide the service and answer your request).
To keep the Website safe, spot misuse and fix problems (our legitimate interest in running a secure service).

Who we share it with

We do not sell your information. We share it only with services that help us run the Website:

Brevo, our email delivery service, which carries messages sent through our contact and support forms to our team.
Google, only if you choose "Continue with Google". Google's own privacy policy applies to that sign-in.
Our hosting and game servers, which store and deliver the Website and load our games inside your page.
Authorities or advisers, where the law requires it or to protect our rights.

Some of these services may process information outside the UK. Where they do, we rely on safeguards the law accepts, such as approved contract terms.

How long we keep it

Your account stays until you delete it from your account page or ask us to delete it.
Contact messages are kept only as long as needed to deal with your request and any follow-up, then deleted.
Security logs are kept for a limited period and then removed.

Your rights

Under UK GDPR and the Data Protection Act 2018 you can ask to see the information we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable form. You can delete your account yourself at any time from your account page. For anything else, send a request through our contact form. We will reply as soon as we can and within one month.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk.

Security

We protect your information with measures such as scrambled (hashed) passwords, protected storage, locked-down server files, limits on repeated sign-in attempts and spam checks on our forms. No website can promise perfect security, so please also choose a strong, unique password and never share it.

Children

Scan Decinc is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you think a child has created an account, please tell us and we will remove it.

Changes

We may update this policy. The date at the top shows the latest version.