Privacy

Who we are

Shuriken Studio runs this site and is responsible for your personal data here. Contact: [email protected].

What we collect

• Your account: your email address, confirmed by the link we send, to sign you in and send order emails. No password.
• That you're 16 or older: you tick a box saying so when you give us your email, and we record when. We never ask for your date of birth.
• Your orders: what you bought, prices and order status.
• Downloads: when each package was downloaded, to support you and to apply our money-back guarantee.
• Model requests: what you asked for on the free library, the page you asked from, and a keyed hash of your IP address (to stop spam; we can't turn it back into your address).
• Your email, if you leave it with a request, to tell you if we make the model (or when orders open). We email you a link to confirm it first, and confirming it makes your account. We only take emails from people 16 and over.
• Payment details are collected and processed by the checkout (Payhip). We never see your card number. It tells us that you paid, and may share your name, country and email with us.

Cookies

We use one cookie, needed for the store to work: it keeps you signed in. We don't use advertising or tracking cookies. The checkout (Payhip) sets its own cookies when you pay.

Who else processes your data

• Payhip: payments, tax, receipts and downloads for games bought there.
• Resend: sending our emails.
• Cloudflare: storing and delivering game files and images.
• Fly.io: hosting the website and its database.

We don't sell your personal data or share it for advertising.

Children

Buying a game is for adults (or a parent buying for a child): you confirm you're 18 or older at checkout. Accounts and emails are for people 16 and over, and we don't knowingly collect personal data from children under 13. If you think a child has given us their details, contact us and we'll delete them.

How long we keep it

Sign-in links expire after 20 minutes and sessions after 30 days. We keep order records for as long as tax and accounting law requires (typically up to 7 years). You can ask us to delete your account at any time; we'll delete what we aren't required to keep.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected] and we'll reply within 30 days.