Last updated 22 September 2026.
The controller for personal data processed through verdantmill.com is the operator of verdantmill.com. Contact: [email protected].
| Item | Why | Retention |
|---|---|---|
| Nickname | Naming you in the game | Until you delete the account |
| Email address | Identifying the account so you can log back in | Until you delete the account |
| Password hash | Letting you log in without us ever holding the password | Until you delete the account |
| Sign-up date | Support and abuse handling | Until you delete the account |
| Google account identifier | Only if you chose to sign in with Google, so we recognise you next time | Until you delete the account |
That is all of it. We never ask your real name, your address, your date of birth, your phone number or anything to do with payment, because nothing here can be bought. The password exists only as a one-way hash. Lawful basis: performance of a contract — the account you came for. Delete it from your account page and every part of it goes at once.
| Item | Purpose | Retention |
|---|---|---|
| Coin balance, level, missions, game settings | Continuing your game | Until you clear browser data |
| Age confirmation | Not asking again on every page | Until you clear browser data |
| Cookie choice | Remembering your consent | Until you clear browser data |
That lives on your device alone and never travels to us.
Signing in through Google is a convenience rather than a requirement; the email form does the same job. Use it and Google shows you the request to approve, then returns three things: a permanent identifier for your Google account, your email address, and your first name, which we propose as a nickname. That is the whole list. No contacts, no calendar, no Drive, no profile photo, no permission to act on your behalf, and no sight of your password. What Google does with the sign-in is a matter for Google's privacy policy.
We store the identifier, the email address and the nickname you confirm, and we store nothing else. Delete the account here and all three are gone at once. You can revoke our access whenever you want to, in "Third-party apps with account access" inside your Google account — the games are unaffected and you sign in by email and password after that. No Google script loads on these pages, so nothing is sent to Google unless you press the Google button. Lawful basis: performance of a contract.
Pick "Accept all" and we use Google Analytics and Google Ads tags to count visits and to find out whether an advert ended in play, for instance a first spin. Google gets your IP address, information about your device, and those events. Pick "Essential only" and the tags operate in consent mode, without cookies and without advertising identifiers. Lawful basis: consent.
The host holds ordinary request logs for a short time, purely for security. Lawful basis: legitimate interests.
You may look at what is held, have it corrected or wiped, limit or object to its use, and take consent back at any moment. Deleting the account from your account page clears the account data at once; clearing the site's data in your browser clears everything else. You can complain to the ICO at ico.org.uk.
Verdant Mill is an adults-only site, 18 and over. Coins are virtual, hold no monetary value and cannot be purchased, sold, withdrawn or exchanged. There is nothing to buy, no prize of real-world value, and what you manage here says nothing about real-money gambling.
If gambling is a problem, help is free and confidential: National Gambling Helpline 0808 8020 133, 24 hours a day · BeGambleAware · GamCare · Our responsible play policy