Privacy Policy

This Privacy Policy describes how Voidforge Studio ('we', 'us', or 'our') collects, uses, shares, and protects your personal information when you play Retropolis. Voidforge Studio is the data controller responsible for your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• • Contractual necessity: Processing gameplay data and account information is necessary to provide you with the game service.
• • Legitimate interests: We process certain data for security, anti-cheat measures, and service improvement, where our interests do not override your rights.
• • Consent: Where required (such as for geolocation access), we rely on your explicit consent, which you can withdraw at any time through your device settings.
• • Legal obligation: We may process data when required to comply with applicable laws.

Information We Collect

How We Use Your Information

• • To provide, operate, and maintain the gaming experience
• • To enable location-based gameplay features (location data is processed in real-time only and not stored)
• • To provide customer support and respond to your inquiries
• • To maintain game security, detect cheating, and enforce our Terms of Service
• • To analyze usage patterns and improve the game
• • To send you service-related notifications (such as updates, security alerts, or changes to our terms)

Data Sharing and Third Parties

• • We do NOT sell or rent your personal information to third parties.
• • We share data with service providers who help us operate the game (such as hosting providers, analytics services, and authentication services). These providers are bound by data processing agreements and may only use your data as instructed by us.
• • Our key service providers include: Vercel (hosting, USA), Google Firebase (authentication and database, USA), and RevenueCat (purchase management, USA).
• • We may share anonymized, aggregated data that cannot identify you for analytics and research purposes.
• • We may disclose your information if required by law, court order, or governmental authority, or to protect our legal rights.

International Data Transfers

• • Your data may be transferred to and processed in the United States by our service providers (including Google Firebase, Vercel, and RevenueCat). These transfers are made pursuant to appropriate safeguards, including the EU-US Data Privacy Framework where applicable, and Standard Contractual Clauses approved by the European Commission.
• • You may request a copy of the safeguards in place by contacting us at the address below.

Data Retention

• • We retain your personal data for as long as your account is active and as needed to provide you with the game services.
• • After you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as financial records, which may be retained for up to 10 years as required by French law).
• • Anonymized analytics data that cannot identify you may be retained indefinitely for statistical purposes.

Your Data Rights

Under GDPR and other applicable data protection laws, you have the following rights:

• • Right of access: You can request a copy of all personal data we hold about you.
• • Right to rectification: You can request correction of inaccurate personal data.
• • Right to erasure: You can request complete deletion of your account and all associated personal data.
• • Right to restriction: You can request that we restrict processing of your data in certain circumstances.
• • Right to data portability: You can request your data in a structured, machine-readable format.
• • Right to object: You can object to processing based on legitimate interests.
• • Right to withdraw consent: Where processing is based on consent (such as geolocation), you can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL) — www.cnil.fr.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• • Right to Know: You may request that we disclose what personal information we collect, use, and share about you.
• • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• • Right to Opt Out of Sale: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of personal information we collect: identifiers (username, email), geolocation data (real-time only, not stored), internet activity (gameplay data, device information), and commercial information (purchase history).

To exercise your California privacy rights, contact us at: [email protected].

Cookies and Tracking Technologies

• • Our website may use essential cookies necessary for the site to function properly. We do not use advertising or tracking cookies.
• • We use anonymized analytics to understand how the game is played and to improve the experience. This data cannot be used to identify you personally.
• • Third-party services integrated into the game (such as Firebase) may use their own tracking technologies, subject to their respective privacy policies.

Data Security

• • We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (TLS) and access controls.
• • However, no method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.
• • You are responsible for keeping your account credentials secure and should contact us immediately if you suspect unauthorized access to your account.

Children's Privacy

• • Retropolis is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
• • If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to promptly delete that information.
• • If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] so we can take appropriate action.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the 'Last updated' date. For significant changes, we will also provide notice through the game or via email.

We encourage you to review this Privacy Policy periodically.