Privacy Policy

Edition …

The controller of your personal data is Mootrix Studio. Write to us at support about anything on this page.

The short version

We keep an email address, a username, a password hash and what you have bought. Each game keeps its own save. We do not sell any of it, we do not run advertising networks, and we do not track you across other websites. You can download everything we hold, or have it all deleted, from your account page.

What we collect, and why

• Email address — to confirm the account, reset a password, send receipts, and tell you about a suspension or a deletion. Necessary to perform our contract with you.
• Username — shown to other players in the games.
• Password — stored only as an argon2 hash. We cannot read it, and neither can anyone who obtains the database.
• Purchases — what was bought, when, for how much. Kept because tax law requires it and because you are entitled to a receipt. Card details are handled by our payment provider and never reach us.
• Consent records — which edition of the terms you accepted, when, and the IP address it came from. This is the evidence that the agreement exists.
• Signed-in devices — a name for each machine the launcher is signed in on, and when it was last used, so you can recognise and revoke one.
• Game data — each game keeps what it needs to be a game: progress, collections, ranks, and who you have played. It is held separately from your account and keyed to it.
• Server logs — IP addresses and request records, kept briefly to keep the service running and to stop abuse. Our legitimate interest in operating a service that works.

Cookies

One cookie, which holds your sign-in session. It is strictly necessary for the site to work and is not used for tracking or advertising, which is why there is no cookie banner asking you to accept it. Signing out removes it.

Who else sees it

Only the people we need to run the service: our hosting provider (Amazon Web Services), our payment provider (Stripe, who handle card data under their own policy), and our email provider. Each processes data on our instructions. We do not sell your data and we do not share it for advertising.

We will disclose data if the law requires it, and we will tell you when we are allowed to.

Where it is kept

On servers in the United States. Where data is transferred out of the EEA or the UK, it is covered by the European Commission's Standard Contractual Clauses.

How long we keep it

Your account and its game data for as long as the account exists. Once you delete it, everything is erased — from this service and from every game — after the 7 day cancellation window. Purchase records survive in an anonymised form, holding an amount, a date and a currency but no link to you, because tax law requires them to.

Server logs are kept for a short period and then discarded.

Your rights

Under the GDPR and similar laws you may ask for a copy of your data, correct it, have it deleted, restrict or object to how we use it, or take it elsewhere in a portable form. Two of those are buttons rather than requests:

• Download my data on your account page gives you everything, from this service and from every game, as one JSON file.
• Delete my account erases all of it, everywhere.

For anything else, write to support. We answer within 30 days. If you are unhappy with our answer, you may complain to your national data protection authority.

Children

The service is not for children under 16 (or the local age of digital consent, if that is higher). We do not knowingly collect their data; if we learn that we have, we delete the account.

Security

Passwords are hashed with argon2. Sign-in tokens are stored as digests, not in the clear, so a copy of the database is not a drawer full of working sessions. Traffic is encrypted in transit. Access to production data is limited to those who need it.

No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.

Changes

We publish a new edition when this policy changes in substance, and ask you to accept it before you play on. Each edition is identified by its date.