Privacy
policy.

Who we are

Neon System Breach is a free social casino website at healerspractice.com for adults aged 18 or over in the United Kingdom: 46 slot-style games played with virtual coins that have no cash value. For any privacy question, email [email protected].

What we collect

• Account details you enter: first name, last name, email address, phone number, date of birth and a password. Your password is stored only as a secure hash, never as you typed it. We also record the date you joined, your last sign-in and a count of failed sign-in attempts (five wrong tries lock the account for 15 minutes).
• Google sign-in: if you choose "Sign up with Google", Google shares your name, verified email address and Google account ID with us; our server checks that with Google. We do not receive your Google password. We then ask you for your phone number and date of birth.
• Game data: your virtual coin balance, the packs you have claimed and the pass you choose.
• Messages: your name, email, topic and anything you write in the contact form.

How the site works with your information

Everything you submit through a form on this site — joining, signing in, Google sign-in and the contact form — is sent to and processed by our own server, not handled inside your browser. The server checks your details, creates or opens your account, verifies a Google sign-in with Google, emails your messages to us, and then returns you to the page.

On our server: only your account details listed above, kept as a protected file that can't be opened from the web; we don't use a database. They stay there until you ask us to delete your account.

In your browser: a copy of your account details so the pages can greet you, your coin balance, claimed packs and pass, and that you confirmed your age. This is kept in session storage for the current browser tab only, is never sent to our server, and is cleared when you close the tab or sign out.

Sign-in cookies

When you sign in, our server sets one strictly necessary cookie that keeps you signed in until you sign out or close your browser, and briefly uses a second one to hand your account details to your browser; that one is removed within two minutes. After a Google sign-in a short-lived cookie carries your name and email to the sign-up form. The site sets no other cookies — see our Cookie policy.

Why we use it

• To run your account and let you sign in from any device.
• To confirm you are 18 or over and in the UK.
• To show your name and coin balance while you play.
• To reply to messages you send us.

Our lawful bases under UK GDPR are the contract we have with you when you create an account, and our legitimate interest in answering your messages and keeping the site for adults only.

Who we share it with

• Google: only if you choose Google sign-in. Google's own privacy policy applies to your Google account.
• Our games: they load from healerspractice.com inside our pages and use your coin balance; nothing else is shared with them.

Nothing is shared with anyone else. We never sell your data and never use it for advertising.

Messages

When you use the contact form, your name, email address, topic and message are emailed from our server to [email protected], and a copy is kept in a protected log on our server so we can answer you and check that the message arrived. We use your message only to reply.

How long we keep it

Account details are kept for as long as you have an account, and deleted when you ask us to close it. Contact form emails and their log copies are kept for up to 12 months and then deleted, unless you ask us to delete them sooner.

Your rights

Under UK data protection law you can ask to see, correct or delete the personal data we hold about you, object to its use, or withdraw consent at any time. Email [email protected] from the address you joined with and we'll do it within a few days; deleting your account removes its file from our server. You can also complain to the Information Commissioner's Office at ico.org.uk.

We protect your account with HTTPS, password hashing and server files that can't be opened from the web. If you think someone else has used your account, contact us straight away.

Children

This site is not for anyone under 18. We ask for your date of birth when you join and refuse anyone younger, and we do not knowingly collect data from children. If you think a child has used the site, contact us and we will delete anything we hold.

Changes

If we change this policy we will update the date at the top of this page.