Terms · Privacy · Refund policy · Rules

Privacy

What we collect

The email and stable person id (sub) from the unified account, display name and bio, purchases and receipts, play time, achievements and rankings, account saves, what you post in reviews, discussions, lists and the workshop, friendships, notice settings, and short-lived access logs (IP, browser) for security.

Why

Login, buying and the library, leaderboards and achievements, notices, handling reports, and transaction records the law requires. No tracking for advertising.

Who receives it

The unified account server (login), the payment provider once real payment opens (only what payment needs), and makers get numbers only (players, average play time, sales; never who). Reviews, posts and workshop packs are public with your display name. Otherwise only when the law requires.

How long

While the account exists. On deletion we erase it, except transaction records the e-commerce law requires (contracts, payments and delivery 5 years, consumer complaints 3 years; estimate, to be checked against the statute), which are kept separately for that period and then erased.

Your rights

Change your name, bio and notice email in My info, see your purchases, and ask for your account to be deleted. Contact details below.

Children

No accounts under 14 without a guardian's consent. If we learn a child's data was collected, we erase it.

Cookies

Only the login session, store language and beta-key cookies. No tracking or advertising cookies.

Security

The store never takes a password. Login tokens travel server to server and never land in URLs or logs. Deployed, it is https only.

Contact

Business details go here once the operating entity is decided (test build for now).

The tool that makes games (the Studio) and the unified account have their own policy: Studio privacy policy