Who we are
Yoga With Erik (yogawitherik.com) is the data controller for the information described below. The site is run by , . For privacy matters, use the contact form or email [email protected].
What we collect
| When | What |
|---|---|
| You join with email | First and last name, email, UK mobile number and your password (stored only as a one-way hash), plus the date you joined, your last login and a count of failed logins. |
| You join with Google | Your name, verified email and Google account ID, checked with Google by our server. We ask for your mobile number separately. |
| You play while logged in | Your coin balance, XP, level, which games you've opened and when, and when you last collected a daily top-up. |
| You contact us | Your name, email, topic and message. |
| Security logging | A record of sign-ups, logins and account actions (date, action, email, outcome and a shortened IP address). Passwords are never logged. |
We never request or store card or bank details.
Why we use it
- To run your account and its wallet and levels (performing our contract with you).
- To confirm you're 18+ and in the UK and to stop misuse (legitimate interests and legal duties).
- To answer your messages and act on pause, restriction or deletion requests (legitimate interests).
- To keep the site secure through logs and login limits (legitimate interests).
We don't sell your data or use it for third-party advertising.
Where it lives and how it's protected
Account information is processed and stored on our server, not in your browser, and it's never published in a page, public table or visible database query. Each account is a separate file in a protected folder that can't be opened from the web. Passwords are hashed, the login cookie is HttpOnly and HTTPS-only, and Google sign-ins are verified with Google.
Messages are emailed from our server to our team inbox through our email delivery provider, and a copy is kept in a protected server log so we can reply and confirm delivery.
Who we share it with
- Our hosting provider, which runs the server behind the site.
- Our email delivery provider (Brevo), which delivers messages to our inbox.
- Google, only if you choose Google sign-in.
- Authorities, where the law requires.
If a provider processes data outside the UK, we rely on UK adequacy regulations or approved safeguards such as the International Data Transfer Agreement.
How long we keep it
- Accounts: until you delete yours, or after 24 months with no login.
- Messages: until your request is resolved, and no longer than 12 months.
- Security logs: up to 12 months.
Your rights
Under UK GDPR you can ask to see, correct or delete your data, restrict or object to how we use it, and receive a portable copy. You can delete your account yourself from My lounge. For anything else, use the contact form and we'll reply within one month.
You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Under-18s
The Lounge is for adults only. We don't knowingly collect data from anyone under 18, and we'll delete any such account we find.
Cookies
We use one essential cookie to keep you logged in, plus browser storage for your age confirmation and cookie choice. Details are in the Cookies Policy.
Updates
We'll update this page if anything changes. Check the date at the top for the latest version.