This policy explains what personal information The Digital Play Lab collects, how we use it, who we share it with, and the choices available to you.
Last updated 18 October 2026.
About us
The Digital Play Lab sells used video games and maintains a catalogue of them. We are based in Mississauga, Ontario, Canada, and operate thedigitalplaylab.com.
If you have a question about this policy, or you would like a copy of your information or would like it removed, please contact us at thedigitalplaylab@gmail.com.
Information we collect
Account information
When you create an account we collect your email address and a password, which is stored in encrypted form and is not visible to us. You may also choose to provide your name and a display name.
Order information
When you place an order we collect your name, delivery address, billing address, email address, telephone number if you provide one, and the details of the items you have ordered.
Payment information
Payments are processed by Stripe. Your card details are provided directly to Stripe and are not stored on our systems. We receive confirmation of the payment, the card type, and the last four digits, which allow us to identify the transaction.
Collection records
If you use the collection feature, we store the information you enter about the items you own, including titles, platforms, editions, condition and any notes or values you record. These records are private to your account unless you choose otherwise.
Connected accounts
If you choose to sign in using Discord, Twitch or Google, we store the account identifier provided by that service, your username or display name there, and the date the connection was made. We use this to identify you when you sign in. We do not have access to your password at those services, and we do not post on your behalf or read your messages. You may disconnect a service at any time from the Connections page in your account.
Website usage
Our hosting provider, Namecheap, records standard server logs including IP address, browser type and the pages requested. These logs support site availability and security.
We use Google Analytics 4 (property G-CTFQNVKEMM), including its ecommerce features, to understand which pages and products are viewed and which orders are completed. This service sets cookies and shares information with Google. You can prevent this using Google’s browser opt-out add-on or your browser’s own privacy settings.
We also keep our own record of how the website is used, so that we can see which pages are useful and what members do after they join. For every visitor this records a random identifier kept in a cookie, the pages viewed and how long each was in view, the website a visitor arrived from, searches typed into this site, the buttons and links used, and whether a phone or a computer was used. For signed-in members it also records the actions taken, such as joining, signing in, adding a game to a collection or list, setting a play status, saying that you want a game, adding to the basket and placing an order, and links those records to the member account. We do not store IP addresses in this record, and we do not record anything typed into forms other than a search or a game title. Browsers that send a Global Privacy Control or Do Not Track signal are not recorded. Records are kept for up to 25 months and are deleted when an account is deleted. To see or delete the record held about you, write to us at the address on our contact page.
How we use your information
We use the information described above to:
- create and maintain your account;
- process your orders, take payment and arrange delivery;
- respond to enquiries, returns and support requests;
- maintain the records we are required to keep for tax purposes;
- keep the website secure and available;
- understand how the website is used so that we can improve it.
We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
Cookies
Cookies are used to keep you signed in, to remember the contents of your basket, and to enable core site functions. Analytics cookies are also used, as described above, and these are optional. We do not use advertising or retargeting cookies.
Service providers
We share information with the following providers, only to the extent necessary for them to perform their service:
- Stripe for payment processing.
- SiteGround for website hosting and data storage.
- Google for website analytics.
- Delivery carriers, who receive the name and address required to deliver your order.
- Discord, Twitch or Google, where you have chosen to connect one of these services.
We may also disclose information where we are required to do so by law.
International transfers
Our hosting and some of our service providers operate outside Canada. Where your information is transferred outside Canada it may be subject to the laws of the country in which it is held, including lawful requests for access by authorities in that country.
How long we keep information
- Order and transaction records: seven years, in line with Canadian tax requirements.
- Account and collection records: until you ask us to delete them.
- Server logs: a short period, after which they are overwritten.
- Analytics data: in accordance with Google’s retention settings, currently fourteen months.
Your rights
Under Canadian privacy law you may ask us to:
- confirm what personal information we hold about you;
- provide you with a copy of it;
- correct information that is inaccurate or incomplete;
- delete your account and the information associated with it;
- stop sending you communications.
Please contact us at thedigitalplaylab@gmail.com and we will respond within thirty days. There is no charge for these requests.
Please note that we are required to retain completed order records for tax purposes and cannot delete these on request. All other information can be removed.
Security
The website is served over HTTPS. Passwords are stored in encrypted form. Card details are handled by Stripe and are not held on our systems. Administrative access is restricted.
While no system can be guaranteed completely secure, we take reasonable steps to protect the information we hold. In the event of a breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will be updated when we do. Where a change is significant, we will notify account holders by email.
Contact and complaints
Please contact us in the first instance at thedigitalplaylab@gmail.com. If you are not satisfied with our response, you may raise the matter with the Office of the Privacy Commissioner of Canada.
The Digital Play Lab is a trading name of Marsons Media Ltd, a corporation incorporated under the federal laws of Canada, with its registered office in the Province of Ontario. Marsons Media Ltd is the data controller responsible for the personal information described in this policy.