Privacy Policy
Draft pending legal review. Governing details may be refined by counsel before final publication.
We keep data collection to the minimum needed to run the game. This policy explains what we collect, why, who processes it, and the choices you have. Questions: winterhillmediagroup@gmail.com.
1. Data we collect
Guest play: a random, anonymous account identifier (a UUID). No name, email, or contact details.
If you create an account (Google or email): your email address, and — for Google sign-in — the name and profile image Google provides, plus an account identifier.
Game data: your Tycoon save, Runner records, Berry Circuit journey progress, and in-game settings.
Purchases: records of purchases (item, amount, currency, timestamps, and Stripe identifiers). Card details are entered on Stripe's hosted checkout and handled entirely by Stripe; we never receive or store your card number.
Technical & diagnostic: IP address, device/browser information, and error diagnostics, from our hosting and monitoring providers, used to keep the service working.
2. How we use data
To provide the game and sync progress across devices; process and fulfill purchases and prevent fraud; diagnose crashes and improve reliability; and comply with legal, tax, and accounting obligations. Legal bases (where GDPR/UK GDPR applies): performance of a contract, legitimate interests (security, reliability), consent (where required), and legal obligation.
3. Service providers (subprocessors)
We share data only with providers that process it on our behalf. We do not sell personal data.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication, backend functions | Account id, email (if provided), save data, purchase records, logs |
| Stripe | Payment processing | Your email + card data (collected by Stripe), purchase metadata |
| Vercel | Web hosting / delivery | IP address, request logs |
| "Sign in with Google" (only if you use it) | Google profile (email, name, avatar) | |
| Sentry | Error monitoring | Error diagnostics, IP, device/browser info |
4. Retention
We keep account and save data until you delete your account. Purchase and transaction records may be retained as required for tax, accounting, and fraud-prevention purposes (Stripe retains payment records under its own policy). Diagnostic logs are kept for a limited period.
5. Your rights & choices
You may have the right to access, correct, export, delete, or restrict processing of your personal data, and to object to certain processing.
Delete your data: open the profile panel at the Arcade hub and choose "Delete profile & cloud data" (or use Tycoon's Account panel) to permanently remove your account, cloud progress, and purchase records (subject to records we must retain by law). Other requests: winterhillmediagroup@gmail.com. EEA/UK users may also complain to their local data-protection authority.
6. International transfers
Our providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses).
7. Children
The game is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
8. Security
We protect data with row-level security (each user can access only their own rows), encryption in transit and at rest, server-side validation of purchases, and least-privilege access to secrets. No system is perfectly secure, but we work to safeguard your information.
9. Changes
We may update this policy; we'll post the new effective date here and, for material changes, provide a more prominent notice.