This policy explains how Fogbreak Studio ([Fogbreak Studio legal entity name], address, "we") handles personal data when you play Fogbreak or use this website. We collect as little as we can: what we need to run a fair game, and more only with your permission.
1. Controller and contact
The controller is [Fogbreak Studio legal entity name], [address, country]. Privacy questions and requests: the support form (topic "Privacy") or [privacy email]. [EU/UK representative and data protection officer, if required.]
2. What we collect
- Account data: a random guest id for this browser, and if you add one, your email address. Your password is sent over an encrypted connection to our game server, which stores only a one-way hash.
- Age category: we ask for a month and year of birth once and keep only the resulting category (child, teen or adult) and the month when the next category starts. We never store the date itself.
- Country: derived from your IP address when the account is created, to apply the right store rules. We do not keep IP addresses in our analytics.
- Game data: progress, items, currencies and their history, run results, settings — what the game needs to work and to stay fair.
- Purchase data: order numbers, items, prices, payment status, refunds and chargebacks. Card details are handled only by our payment partner; we never receive them.
- Support data: your email address and what you write to us.
- Privacy choices: your consent decisions, the policy version and when you made them.
- Operational events: server-side records of what happens in the game and the shop (for example "run finished", "order credited"), used to operate the game, prevent fraud and support you.
- Optional analytics and diagnostics (only with your consent): which screens you open and which in-game choices you make, errors and performance measurements. Never your email, name, chat or date of birth.
- Anonymous start-up statistics: when the game starts, one anonymous message with whether it loaded, a load-time range and the device and browser class. It contains no identifier at all.
3. Why we use it (legal bases)
- To provide the game and your purchases (performance of our contract with you): accounts, progress, delivering what you buy, support.
- To keep the game fair and secure (legitimate interests): fraud and cheat prevention, security logs, operational events, anonymous start-up statistics.
- To meet legal obligations: tax and accounting records of purchases, age-appropriate protections.
- With your consent: analytics, diagnostics and personalised reward ads in the game. You can withdraw consent at any time with "Privacy choices" at the bottom of every page or in your account; it takes effect immediately.
4. Children and teens
For children, real-money purchases, ads, optional analytics and third-party services are switched off, and optional consent cannot be given. Teens get a monthly spending cap and no time-limited or triggered offers. A parent or guardian can contact us through support to review or delete a child's account.
5. Who we share data with
We do not sell personal data and we do not share it for cross-context behavioural advertising. We use service providers who process data on our behalf under contract: hosting [provider, region], payments [payment provider / merchant of record], email [provider, when email is introduced]. This website loads no third-party trackers, fonts or scripts.
6. International transfers
[Where data leaves the EEA/UK: the safeguards used, e.g. adequacy decisions or standard contractual clauses.]
7. How long we keep data
- Account and game data: while your account exists.
- Optional analytics and diagnostics: 180 days. Anonymous start-up statistics: 30 days.
- Operational events: 25 months; after account deletion they are no longer linked to you.
- Purchase records: as long as tax and accounting law requires ([10] years), unlinked from your game profile after deletion.
- Support tickets: 2 years after they are closed. Consent records: while the account exists plus 3 years, as proof.
- Backups: up to 35 days; deletions reach backups as they expire.
8. Your rights
You can access and download your data (account → Download my data, once every 7 days), correct it, delete your account (account → Delete account, with a 14-day grace period you can cancel), object to or restrict processing, and withdraw consent. You may also complain to a data protection authority. In the US, depending on your state, you have rights to know, delete and correct your data and to opt out of sale or sharing (we do neither). We will not discriminate against you for using your rights.
9. Security
Encrypted connections, server-side game logic, hashed passwords, minimal data, separate systems for game data and payments, access controls with two-factor authentication for staff, and audit logs.
10. Storage on your device
See Cookies & Storage. We use no advertising cookies.
11. Changes
We will announce material changes on this site and in the game, and ask for your choices again where consent is involved.