How we protect your information under the NZ Privacy Act 2020.
Effective Date: 31 March 2026
Last Updated: 31 March 2026
Coral Spin Studio ("we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with the New Zealand Privacy Act 2020. This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and your rights regarding that information. By accessing or using the Coral Spin Studio website at coralspinstudio.com ("the Site"), you acknowledge that you have read and understood this Privacy Policy.
Coral Spin Studio is a free-to-play social entertainment platform that offers browser-based games themed around tropical coral reefs. Our games are designed purely for entertainment and use virtual coral points as a fun score-tracking mechanism. Coral points hold no monetary value and cannot be deposited, withdrawn, purchased, or exchanged for real money, prizes, or goods of any kind. We do not operate a gambling service, and no real-money transactions take place on this Site.
Coral Spin Studio is designed to operate with minimal data collection. We do not require you to register an account, provide your name, create a password, or supply any personal information to use our games. Below is a comprehensive breakdown of the categories of information we may encounter.
If you choose to contact us through our contact form or email address, you may provide your name, email address, and the content of your message. We only collect this information when you actively and voluntarily submit it to us. We do not collect personal information through any other means. We will never ask you to supply sensitive personal information such as financial details, government identifiers, or health records.
When you visit our Site, our web server may automatically collect certain technical data, including your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, and approximate geographic region. This data is collected through standard web server logs and is used solely for the purposes of maintaining site security, monitoring site performance, and understanding aggregate usage patterns. We do not use this data to identify individual users or build personal profiles.
Our Site uses essential cookies and browser local storage to ensure core functionality. Specifically, we use a local storage entry to remember whether you have accepted our cookie notice, and we may use session cookies to maintain site functionality during your visit. We do not use advertising cookies, tracking pixels, third-party analytics platforms, or any form of cross-site tracking technology. For full details on our cookie practices, please see our Cookie Policy.
We do not collect payment information, bank details, credit card numbers, or any financial data. We do not collect identity documents, government-issued identification numbers, tax file numbers, or IRD numbers. We do not collect health information, biometric data, or information about your racial or ethnic origin, political opinions, religious beliefs, or sexual orientation. We do not collect gameplay data linked to identified individuals, nor do we track individual play sessions, outcomes, or behavioural patterns for profiling purposes.
Any information we collect is used strictly for the following purposes:
The New Zealand Privacy Act 2020 establishes thirteen Information Privacy Principles (IPPs) that govern the collection, use, storage, and disclosure of personal information. We are committed to compliance with all applicable IPPs, including but not limited to the following:
Any personal information you provide (such as contact form submissions) is stored securely on servers protected by industry-standard security measures, including HTTPS encryption, firewall protection, and access controls. We limit access to personal information to authorised personnel who require it for the purposes described in this policy. We regularly review our security practices to ensure they remain appropriate and effective.
Server logs containing technical data are retained for a maximum of 90 days before being automatically purged. Contact form submissions are retained only for as long as necessary to respond to your enquiry, and no longer than 12 months unless ongoing correspondence requires retention. We do not sell, rent, or lease personal information to any third party under any circumstances.
Coral Spin Studio uses a minimal number of external services to operate the Site. These include Google Fonts for typography delivery. Google Fonts may log your IP address and browser information when fonts are loaded. We do not use Google Analytics, Facebook Pixel, advertising networks, or any third-party tracking or behavioural profiling services. We do not embed third-party widgets, social media trackers, or external scripts beyond essential web fonts.
Coral Spin Studio is intended for individuals aged 18 years and over. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete that information. If you believe that a person under 18 has provided us with personal information, please contact us at [email protected] so that we can address the matter.
Under the New Zealand Privacy Act 2020, you have the following rights in relation to personal information we may hold about you:
To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request". We will acknowledge your request within five working days and provide a substantive response within 20 working days.
If you are not satisfied with our response to a privacy request or complaint, you may contact the Office of the Privacy Commissioner of New Zealand:
In the event of a notifiable privacy breach as defined under Part 6 of the Privacy Act 2020, we will notify the Office of the Privacy Commissioner and affected individuals as soon as practicable, and no later than 72 hours after becoming aware of the breach. Our notification will include a description of the breach, the type of personal information involved, the likely consequences, and the steps we have taken or propose to take to address the breach and mitigate potential harm.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. If we make material changes that significantly affect how we handle personal information, we will provide a prominent notice on our Site. Your continued use of the Site after any changes indicates your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We value your privacy and are committed to being transparent about our practices. Thank you for trusting Coral Spin Studio with your time and for taking the time to read this policy.