← Back to Manor

Privacy Policy

Last Updated: July 4, 2026

1. Information We Collect

We collect information to run the game securely, process payments, and optimize your gameplay experience:

A. Information You Provide Voluntarily

• Account Details: When you register, we collect your username, email address, and password (securely hashed).
• Payment Information: If you purchase virtual items, quests, or in-game currencies, our third-party payment processors (such as Stripe or PayPal) collect your billing details, including credit card numbers, billing addresses, and contact info. We do not store your credit card numbers on our servers.
• Support Requests: If you contact us for support, we collect the details you provide.

B. Information Collected Automatically

• Gameplay Data: We record details about your in-game activities, including character progression, manor buildings, market transactions, recruitments, and general interactions.
• Log and Device Data: When you connect, our servers log your IP address, browser type, operating system, and referral URLs.
• Cookies and Local Storage: We use cookies and local browser storage (such as localStorage) to keep you logged in and maintain session state.

2. Analytics and Tracking (Google Analytics & Mixpanel)

To better understand player behavior, improve game balance, and debug errors, we use third-party analytics integrations:

• Google Analytics: We use Google Analytics to track site traffic, user demographics, and general engagement.
• Mixpanel: We use Mixpanel to track specific gameplay actions (e.g., unlocking a quest, completing an encounter, trading on the market).
• Data Collected by Analytics: The data transmitted includes hashed or anonymized user IDs, session activity, device type, region, and custom in-game events. No raw passwords or credit card details are ever shared.

3. How We Use Your Information

1. Account Management: To create, maintain, and secure your player profile.
2. Game Performance: To run and optimize game mechanics, database queries, and the player-driven market.
3. Payments: To facilitate and verify billing transactions for quests and in-game items.
4. Product Optimization: To analyze gameplay telemetry via Mixpanel and Google Analytics, helping us balance the economy and fix bugs.
5. Security: To detect and prevent multi-accounting, botting, hacking, or cheating.

4. Lawful Bases for Processing (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a Contract: To create your account, handle game logic, and process in-game purchases.
• Consent: When you voluntarily agree to analytics tracking (Google Analytics/Mixpanel) or cookies.
• Legitimate Interests: To secure our servers, prevent fraud, debug technical issues, and improve the game.
• Legal Obligations: To comply with accounting, tax, or other legal requirements.

5. Regional Privacy Rights

A. EEA, UK, and Swiss Residents (GDPR)

You have the following rights under the GDPR: Right to Access, Rectification, Erasure (Right to be Forgotten), Restriction of Processing, Data Portability, Object to processing, and to Withdraw Consent at any time.

B. California Residents (CCPA/CPRA)

Under the CCPA/CPRA, you have the: Right to Know, Delete, Correct, Opt-Out of Sale/Share (we do not sell your personal data), and the Right to Non-Discrimination.

6. Data Retention Policy

• Account Data: Retained as long as your account remains active. If your account is inactive for more than 24 consecutive months, we reserve the right to delete your profile.
• Payment & Transaction History: Retained for a minimum of 7 years to comply with financial audits and tax laws.
• Technical & Security Logs: Automatically cleared or anonymized within 90 days.
• Backup Data: Database backups are stored securely and overwritten within a 30-day rotation cycle.

7. International Data Transfers

Scarlet Chains is operated globally, and your personal data may be transferred to, stored, and processed in countries outside of your home country (including the United States), where data protection laws may differ. When transferring data from the EEA/UK, we use Standard Contractual Clauses (SCCs) to protect your privacy.

8. Data Security

We implement industry-standard security measures to safeguard your credentials and billing confirmations. All communication is protected using HTTPS/TLS encryption. Database access is strictly restricted to authorized development personnel.

9. Policy Updates

We may update this Privacy Policy periodically. We will notify you of any material changes by updating the date at the top of this policy and, if necessary, displaying a notice upon login.