1. Introduction
Crystal Garden Hub ("Crystal Garden Hub", "we", "us" or "our") operates crystalgardenhub.com, a free online social casino built around a single exclusive game, Crystal Bloom Quest. Our platform is designed for entertainment only. Players spin the crystal reels, grow a living garden and collect virtual coins that have no monetary value and cannot be redeemed, exchanged, transferred or withdrawn for cash or anything of value. There is no real-money wagering anywhere on the site.
This Privacy Policy explains how we collect, use, share and protect information about you when you visit our website, create an account, play Crystal Bloom Quest or otherwise interact with our free social casino experience. It also describes the choices and rights you have regarding your information.
By accessing or using Crystal Garden Hub, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle information as described here, please do not use the site. This policy should be read together with our Terms & Conditions, our Cookie Policy and our Responsible Play commitment, which together govern your use of the platform. Crystal Garden Hub is intended solely for adults aged 18 and over.
2. Information We Collect
We collect information in a few different ways: information you provide directly, information generated as you play, and information gathered automatically through your device and browser. We aim to collect only what we genuinely need to run the hub, keep it secure and make the game enjoyable.
Account details
When you create a free account, we collect the email address you register with and the password you set. Passwords are stored in a hashed, non-readable form. You may also choose a display name or profile name that other members of the community can see. Providing a real name is not required to play.
Gameplay data
As you play Crystal Bloom Quest, we record information that lets us save your progress and sync it between your devices. This includes:
- Your virtual coin balances and how they change over time;
- Your garden progress, seasons reached and growth-meter status;
- Collections, albums, blooms and other items you have unlocked;
- Achievements, player level, daily reward streaks and seasonal quest progress;
- In-game preferences and settings you have chosen.
Because virtual coins carry no monetary value, this data reflects only your in-game experience and is never a record of money won, lost or held.
Technical and device data
When you visit the site, our systems automatically receive certain technical information, including your IP address, browser type and version, device type, operating system, screen or viewport characteristics, the pages you view, referring pages and the dates and times of your visits. From your IP address we may derive an approximate, city- or country-level location; we do not collect precise GPS location.
Cookies and similar technologies
We use cookies and comparable technologies such as local storage to keep you signed in, remember your preferences, maintain your session and understand how the game is enjoyed. You can learn more, and manage your choices, in our Cookie Policy.
Communications you send us
If you contact our Player Support Team, respond to a survey or otherwise communicate with us, we keep a record of that correspondence, including your email address and the contents of your message, so that we can respond and improve our support.
Optional data from social sign-in
When you create an account, you provide an email address and choose a password. We store your email address together with a securely hashed, irreversible version of your password - never the password itself - so we can recognise you when you sign in and keep your account safe. You can update or delete this information at any time, as described below.
3. How We Use Your Information
We use the information described above for the following purposes:
- To run and secure the game - operate Crystal Bloom Quest, authenticate your sign-in, and protect your account and our systems.
- To save and sync your progress - store your garden, virtual coin balances, collections and seasons so they follow you across sessions and devices.
- To personalise your experience - remember your preferences and tailor aspects of the game, rewards and content to how you like to play.
- To provide support - respond to your questions, troubleshoot issues and follow up on your requests.
- To send service messages - deliver important account, security and administrative notices, and, where you have opted in, occasional updates about new seasons, features or promotions. You can unsubscribe from optional messages at any time.
- To understand and improve the product - analyse how the hub and the game are used, in aggregated or de-identified form where practical, so we can fix problems and make the experience better.
- To prevent fraud and abuse - detect, investigate and stop cheating, exploitation of the game, unauthorised access and other harmful activity.
- To comply with law - meet our legal and regulatory obligations and enforce our Terms & Conditions.
4. Legal Bases for Processing
Where data protection law such as the UK and EEA General Data Protection Regulation (GDPR) applies, we rely on one or more of the following legal bases to process your information:
- Consent - for activities that require it, such as optional analytics cookies or marketing messages. Where we rely on consent, you may withdraw it at any time without affecting processing that already took place.
- Performance of a contract - to provide the service you sign up for under our Terms & Conditions, including creating your account and saving your gameplay.
- Legitimate interests - to run, secure and improve the hub, prevent fraud and abuse and understand how our free social casino experience is used, provided those interests are not overridden by your rights and freedoms.
- Legal obligations - where we must process information to comply with applicable laws, regulations or valid legal requests.
5. Cookies and Similar Technologies
Cookies are small files placed on your device, and similar technologies such as local storage and pixels perform comparable functions. We use strictly necessary cookies to keep the hub running, to keep you signed in and to remember your consent choices, and we use optional cookies to help us understand how Crystal Bloom Quest is enjoyed so we can improve it.
You are shown a cookie notice when you first visit and can accept all cookies or choose essential cookies only. You can also manage cookies through your browser settings. For a full description of the cookies we use and how to control them, please see our Cookie Policy.
6. How We Share Information
We do not sell your personal information, and we do not share it with third parties for their own independent marketing. We share information only in the limited circumstances described below.
- Trusted service providers - we work with carefully selected companies that process information on our behalf and under our instructions, such as hosting and infrastructure providers and analytics providers. These processors may only use your information to perform services for us and are bound by appropriate confidentiality and data protection obligations.
- Legal and regulatory disclosure - we may disclose information where we are required to do so by law, regulation, court order or a valid request from a competent authority.
- Protection of rights and safety - we may share information where necessary to enforce our Terms & Conditions, investigate potential violations, prevent fraud or abuse, or protect the rights, property and safety of Crystal Garden Hub, our players or others.
- Business transfers - if we are involved in a merger, acquisition, reorganisation or sale of assets, information may be transferred as part of that transaction. We will take steps to ensure your information remains protected and, where required, notify you of any material change.
7. Data Retention
We keep your information only for as long as it is needed for the purposes set out in this policy, or for as long as we are required to retain it to meet legal, regulatory, security or dispute-resolution needs.
In practice, we retain your account and gameplay data while your account remains active so that your garden, virtual coins and progress are there whenever you return. If you close your account, or if your account becomes inactive for an extended period, we will delete or anonymise the associated personal information when it is no longer needed, unless a longer retention period is required or permitted by law. Backup copies may persist for a limited time before being overwritten in the ordinary course of our operations.
8. How We Protect Your Information
We take the security of your information seriously and use a range of technical and organisational measures designed to protect it against unauthorised access, loss, misuse or alteration. These measures include encryption of data in transit, hashing of passwords, access controls that limit who can view personal information, and monitoring of our systems for suspicious activity.
You also play an important role in keeping your account secure: choose a strong, unique password, keep it confidential and sign out on shared devices. Please remember that no method of transmission over the internet or method of electronic storage is completely secure. While we work hard to safeguard your information, we cannot guarantee absolute security. If we ever become aware of a data breach that affects you, we will act in accordance with our legal obligations, including notifying you and the relevant authorities where required.
9. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights in relation to your personal information:
- Access - request a copy of the personal information we hold about you.
- Correction - ask us to correct information that is inaccurate or incomplete.
- Deletion - ask us to delete your personal information in certain circumstances.
- Restriction - ask us to limit how we process your information in certain circumstances.
- Portability - ask to receive certain information in a structured, commonly used, machine-readable format.
- Objection - object to processing that relies on our legitimate interests, or to direct marketing.
- Withdraw consent - where we rely on your consent, withdraw it at any time.
If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR, and you also have the right to lodge a complaint with your local data protection authority. If you are a resident of California or another US state with applicable privacy laws, you may have rights to know about, access and delete personal information and to opt out of certain types of sharing; as noted above, we do not sell personal information. We will not discriminate against you for exercising any of your rights.
To exercise any of these rights, please email us at privacy@crystalgardenhub.com or reach us through our Contact page. We may need to verify your identity before acting on your request, and we will respond within the timeframes required by applicable law.
10. Children's Privacy
Crystal Garden Hub is strictly intended for adults aged 18 and over. Our free online social casino experience is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18.
If you are a parent or guardian and believe that a minor has registered or provided us with personal information, please contact us at privacy@crystalgardenhub.com. If we learn that we have collected information from a person under 18, we will take steps to close the account and delete the associated information as soon as reasonably possible.
11. International Data Transfers
Crystal Garden Hub is available to players in different countries, and the service providers who help us run the hub may be located in, or process information in, countries other than your own. This means your information may be transferred to and processed in a country whose data protection laws differ from those where you live.
Where we transfer personal information across borders, we take steps to ensure it continues to receive an appropriate level of protection, including by using recognised safeguards such as standard contractual clauses or by transferring to jurisdictions that provide an adequate level of protection, where these mechanisms apply.
12. Third-Party Links
Our website may contain links to third-party websites and services that we do not operate or control. For example, the social media icons in our footer link to external platforms such as Facebook, Instagram, YouTube and X. If you follow a link to an external site, you leave Crystal Garden Hub, and this Privacy Policy no longer applies.
We are not responsible for the content, privacy practices or security of any third-party site. We encourage you to read the privacy policy of any website you visit before providing it with personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our game, technology, legal requirements or for other operational reasons. When we make changes, we will revise the "Last updated" date at the top of this page.
If we make material changes, we will provide a more prominent notice, such as a notice on the site or, where appropriate, a message to the email address associated with your account. We encourage you to review this policy periodically. Your continued use of Crystal Garden Hub after an update takes effect means you accept the revised policy.
14. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or how we handle your information, we are here to help. You can reach us in the following ways:
- By email at privacy@crystalgardenhub.com
- Through our Contact page
Please address correspondence to the Player Support Team, Crystal Garden Hub. We will do our best to respond promptly and to resolve any concern you may have about your privacy on our free social casino platform.