Privacy policy
How Indusit Valley uses account, play, preference and support information.
The information you provide
An account stores your email, screen name, date of birth, password digest and eligibility and policy confirmations. Passwords are hashed rather than stored as readable text. Guest access uses an identifier and eligibility confirmations without requiring an email or password. Support stores the topic, reply email and message you choose to send.
Records that keep play consistent
We record your shared credit balance, rounds, unfinished features, game progress, free claims, favourites, Valley Log, preferences and care restrictions. Your Valley Log stores optional personal discovery preferences. Session and security records link requests to the right player, enforce limits and prevent duplicate changes.
Why information is used
Account and game data provide the service you request. Security and proportionate operational processing protect access and investigate reported problems. Support information is used to respond to your request. Optional public-browsing measurement uses Keitaro and Microsoft Clarity only after you accept analytics. Advertising storage remains denied.
Sessions and explicit preferences
Essential first-party cookies support authentication, security, consent acknowledgement and play-break enforcement. Player-requested local settings support comfortable presentation and round continuity. The Cookie Policy lists actual names, purposes and durations. Cookie Preferences is available from the footer at any time.
Support and service messages
A support request is saved with a reference. Password recovery creates an expiring one-use link only for an existing account while returning the same public response either way. Brevo processes recipients and messages for transactional delivery; ImprovMX forwards messages to our monitored contact inbox. Cloudflare provides DNS and website delivery. Registration does not subscribe you to advertising. Never send passwords, payment information or unnecessary sensitive personal details to Support.
Optional public participation
If you explicitly join a discovery tournament, your nickname and recorded score appear in its table. Email, date of birth, balance and private game records are not published there. Participation is optional. Deleting an account also removes its challenge entries.
Keeping and deleting records
Account and game records are retained while needed to operate the account and investigate relevant issues. Recovery tokens expire after 30 minutes and sessions after seven days. Temporary rate limits expire automatically. Deleting an account removes linked sessions, balance, rounds, favourites and saved path, and removes identifying support content linked to that account. Any applicable legal retention is limited to its purpose.
Your choices and contact
Review settings, change preferences, start a break or delete your account in the product. You may request access, correction, portability, restriction or erasure where applicable; we may need to verify ownership first. Contact care@indusitvalley.com or use Support for privacy questions. You may also raise a concern with the UK Information Commissioner’s Office at ico.org.uk. No system can guarantee absolute security.
Optional public-browsing analytics
After your choice, Keitaro and Microsoft Clarity helps us understand visits and navigation on signed-out public pages. Keitaro receives the public page path, browser user agent and an IPv4 address when available; we do not send URL queries, account identifiers, balances, game results or form values. Microsoft Clarity, when enabled, processes browser interaction and masked public-page recordings. Text is masked before the recorder loads, and account, support, recovery and game-player pages are excluded. Opening an account dialog stops recording for that document. Clarity is not loaded on URLs containing query strings or fragments. The Clarity project is shared across our operated websites; this site is labelled indusitvalley.com. Analytics providers process data under their applicable terms and retention settings. Change or withdraw your choice in Cookie Preferences. Withdrawal stops new measurement; it does not itself delete records already sent. Contact us with a privacy request.
Palladium — optional passive traffic assessment
After analytics consent on an eligible signed-out public page, our server sends Palladium the public page path, IP address, browser user agent and language to assess automated traffic. URL queries, account details, balances, game results and form values are excluded. The assessment does not select a page, redirect you or alter access or gameplay. Our technical service log records only the public path, response status and assessment flag. Palladium processes the request under its applicable terms. Essential only or withdrawal stops new assessment requests.
18+ · UK only · Fictional Play Credits · No purchases or prizes of value.