Privacy Policy

We Create Stuff Inc.

PRIVACY POLICY

Last Modified on August 21st 2024

What’s in this Privacy Policy?

In this Privacy Policy, you’ll find:

What information we collect about you
How we might use that information
What information we might share with others
Your rights and choices about that information

What does this Privacy Policy cover?

We are We Create Stuff Inc. In this document, we will refer to ourselves as “We Create Stuff,” “we,” or “us.” We will refer to you and any other users as “you.”

In this Privacy Policy, we will cover all games provided by We Create Stuff as well as any We Create Stuff-owned websites associated with those games. Together, we’ll refer to these as the “Service.”

By using the Service, you agree to the terms of this Privacy Policy. Please read our Terms of Use, as well, for general guidance about your use of the Service. Except as otherwise expressly agreed, this Privacy Policy and our Terms of Use are the complete agreement between you and We Create Stuff.

What types of personal data do we collect?

Below you’ll find details about the types of personal data we collect from you and how we use it. We call this “processing” your data.

User-Provided Information. We collect certain personal data when you provide it to us, such as:

Contact Information. When you contact us to sign up for our mailing list, for technical support and customer support purposes, or for any other reason, you provide us with personal details such as your email address and username.
Technical Information. The Service may collect your IP address and browser details in order to to analyze user activity and improve and operate the Service.

Automatically Collected Information. We automatically collect certain personal data when you use the Service**.** This includes analytics data, such as insights about your interactions with the Service, your IP address, gameplay data, and user activity on the Service in order to analyze our users’ activity and improve the Service. This also includes information collected and shared with us by our analytics service providers, such as Google Analytics. You can read more about how Google Analytics collects, uses, and shares your personal data, as well as how you can limit that collection and sharing, here: https://policies.google.com/technologies/partner-sites

Use of Collected Information

We utilize the information we collect for different purposes, including:

Offering and Enhancement of the Service. In order to offer, sustain, and refine the Service, and to tailor user experiences.
Customer Service. To address any user queries, send service-related notifications, and deliver customer and technical assistance.
Outreach and Marketing. For the purposes of marketing, promotional materials, and sending you updates about the Service.
Contests and Sweepstakes. For the purposes of operating contests and sweepstakes through the Service, whether run by We Create Stuff or a third-party sponsor, administrator, or service provider.
Updates and Fixes. To review user interactions with and usage of the Service, and any errors or issues with the Service, in order to refine and correct the Service’s features and functionality.
Legal Requirements. To abide by any legal requirements, uphold our Terms of Use, and to safeguard against deceptive activities.
Anonymized Information. In addition to the purposes stated in this Privacy Policy, we may use certain information collected from you in an anonymized form for the purpose of improving the Service, developing new features, conducting data analysis, and enhancing overall user experience. This anonymized information will not personally identify you or any other individual.

Sharing of Information

In order to operate the Service, we need to share certain personal data we collect from you with third parties, including:

Service Providers. We might share your details with third-party entities that assist in the operation and enhancement of the Service. This encompasses storage solutions, data analytics providers, third-party account systems and platforms, payment processors, and other service providers.
Legal Reasons. We may need to share certain personal data if required by the law, judicial orders, or in response to legal requests.
Protection & Security. If we decide that sharing of certain personal data is vital for the safety, rights, or assets of our users, the public, or our business, we may need to disclose that personal data to third parties.
Corporate Changes. Should our entity undergo a merger, acquisition, or asset transaction, your personal details might be part of the transferred assets.

Lawful Bases for Processing Personal Data

In accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws, we process personal data based on the following lawful grounds:

Consent. For personal data collected when you sign up to receiving marketing communications from us, we rely on your explicit consent. You have the right to withdraw your consent at any time (see “How to Contact Us” below or you can opt out of any email communications by clicking the unsubscribe link in each marketing-related email).
Contractual Obligations. We process specific sets of your data to fulfill our contractual obligations to you. This encompasses actions like Service operations and delivery, fulfilling purchases, and ensuring you can use all Service functionality.
Legitimate Interests. For certain data processing activities, we rely on our legitimate business interests. This includes activities like Service improvement and ensuring a safe user environment.
Legal Compliance. There are instances where we’re legally mandated to process your data. This could be due to regulatory requirements, legal requests, or for the prevention of fraud and illegal activities.

For how long do we keep your personal data?

We only keep your personal data as long as it’s required to provide you with the Service. Sometimes a longer period might be required by law.

After that, we will delete your personal data within a reasonable time.

Please note that we may retain some data, if necessary to resolve disputes, enforce our user agreements, or follow any technical and legal requirements related to the Service.

Children’s privacy rights

We don’t knowingly collect any personal data from children under the age of 13. We also don’t knowingly allow them to create accounts, sign up for newsletters, make purchases, or use the Service.

We may also limit our personal data processing for EU users between 13 and 16.

We take children’s privacy seriously and encourage parents to play an active role in their children’s online experience. If you have any concerns about your child’s personal data, please contact us at [email protected].

Transfers of your personal data

Our headquarters is in the United States.

No matter where you live, by using the Service you consent to the processing and transfer of your personal data in and to the United States. Additionally, third party data processing (as described above) will be processed according to the privacy policies of those third parties that we share personal data with.

If you would like more information, please contact us (see “How to Contact Us” below).

Special terms based on where you live

Depending on where you live, you may be subject to certain laws related to our use of your personal data. However, no matter where you live, you have the right to request that we delete any personal data that we have collected from you. If you would like to exercise that right, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

For EU Residents:

We are regulated under the General Data Protection Regulation (GDPR), which applies across the European Union. We are responsible as a controller of personal data for GDPR purposes.

Your rights as an EU resident:

Under the GDPR, EU residents have several important rights:

You can request a copy of your personal data
You can ask us to correct that personal data, delete it, or request that we use it only for certain purposes.
If you’ve consented to our processing, you can change your mind and ask us to stop using your personal data. For example, you can unsubscribe from our mailing list at any time—just click the link in each marketing email.
In some circumstances, you can ask us not to use automated processing or profiling about you.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Also, in some cases where the law requires it, we may not be able to help with the above requests.

UK Residents:

We are regulated under the Data Protection Act 2018 (DPA 2018). As a UK resident, you have the following rights:

Right to be informed: We must provide you with information about how we collect and use your personal data.
Right of access: You can request a copy of your personal data.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data.
Right to erasure: In certain circumstances, you can request the deletion of your personal data.
Right to restrict processing: You can ask us to limit the processing of your personal data in specific situations.
Right to data portability: You can request that we transfer your personal data to another controller or provide it to you in a structured, commonly used format.
Right to object: You can object to the processing of your personal data, particularly for direct marketing.
Rights related to automated decision making: You have rights regarding automated decision-making processes, including profiling.

To exercise these rights, contact us at [email protected]. We’ll respond to valid requests within one month, unless the request is particularly complex.

We may be unable to comply with requests that are manifestly unfounded, excessive, or subject to an exemption under the DPA 2018. We’ll inform you if this is the case.

California Residents:

We are regulated under the California Consumer Privacy Act (CCPA), which applies to California residents.

Under the CCPA, California residents have several important rights:

Right to Know: You can ask us what personal data we hold about you and request a copy. This includes:

The type and specific pieces of personal data we have collected
The types of sources we collect the data from
The purpose for collecting your personal data
The third parties we share that data with

Right to Delete: You can request that we erase your personal data. There are some exceptions to this right, if we:

Need to complete the transaction for which the personal data was collected or if there is an ongoing business relationship or contract with you
Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity
Need to identify and repair errors affecting Service functionality
Exercise free speech or ensure another consumer can exercise (or another lawful right)
Need to comply with the California Electronic Communications Privacy Act
Engage in research in the public interest
Enable solely internal uses that are in line with your expectations for using your personal data
Need to comply with a legal obligation
Otherwise use your personal data internally, in a way that’s compatible with the reason we collected it in the first place

Sale of your personal data: We don’t sell any of your personal data for any purpose.

Other Rights: California residents also have the right to request information about our disclosure of personal data to third parties for direct marketing purposes during the calendar year before your request. This request is free and may be made only once a year.

We also won’t discriminate against you for exercising any of the rights listed above.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Virginia Residents:

We are regulated under the Virginia Consumer Data Protection Act (VCDPA), which applies to Virginia residents.

Under the VCDPA, Virginia residents have several important rights:

The right to access their personal data that we have collected or processed.
The right to request that we delete their personal data.
The right to correct inaccurate personal data.
The right to opt-out of processing of personal data for targeted advertising, sale of personal data and profiling.

Sale of your personal data: We do not sell personal data as the VCDPA defines the term “sale.”

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Colorado Residents:

We are regulated under the Colorado Privacy Act (CPA), which applies to Colorado residents.

Under the CPA, Colorado residents have several important rights:

The right to access their personal data that we have collected or processed.
The right to request a copy of their personal data that we have collected or processed.
The right to request that we delete their personal data.
The right to correct inaccurate personal data.
The right to opt-out of processing of personal data for targeted advertising, sale of personal data and profiling.

Sale of your personal data: We do not sell personal data as the CPA defines a “sale”.

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Connecticut Residents:

We are regulated under the Connecticut Data Privacy Act (CTDPA), which applies to Connecticut residents.

Under the CTDPA, Connecticut residents have several important rights:

The right to access their personal data that we have collected or processed.
The right to request a copy of their personal data that we have collected or processed.
The right to request that we delete their personal data.
The right to correct inaccurate personal data.

Right to Opt Out: The CTDPA allows Connecticut residents to “opt out” of the processing of personal data for targeted advertising, the sale of personal data and profiling. If you are under the age of 16, you have the right to “opt in” to the processing of personal data for targeted advertising, the sale of personal data and profiling.

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Utah Residents:

We are regulated under the Utah Consumer Privacy Act (UCPA), which applies to residents of the State of Utah.

Under the UCPA, Utah residents have several important rights:

The right to confirm our processing of their personal data, and access their personal data that we have collected or processed.
The right to request a copy of their personal data that we have collected or processed.
The right to request that we delete their personal data.
The right to opt out of the processing of personal data for purposes of targeted advertising or the sale of personal data.

Sale of your personal data: We do not sell personal data as the UCPA defines the term “sale.”

To exercise any of these rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of the data.

Texas Residents:

We are regulated under the Texas Data Privacy and Security Act (TDPSA), which applies to residents of the State of Texas.

Under the TDPSA, Texas residents have several important rights:

The right to confirm whether we are processing their personal data and access their personal data.
The right to correct inaccuracies in their personal data, taking into account the nature of the personal data and the purposes of the processing.
The right to request that we delete their personal data.
The right to obtain a copy of their personal data in a portable and readily usable format that allows the consumer to transmit the data to another controller without hindrance.
The right to opt out of the processing of their personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

Sale of your personal data: We do not sell personal data as the TDPSA defines the term “sale.”

To exercise any of these rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of the data.

Oregon Residents:

We are regulated under the Oregon Consumer Privacy Act (OCPA), which applies to residents of the State of Oregon.

Under the OCPA, Oregon residents have several important rights:

The right to confirm whether we are processing their personal data and access their personal data.
The right to request that we correct inaccuracies in their personal data, taking into account the nature of the personal data and the purposes of the processing.
The right to request that we delete their personal data.
The right to obtain a copy of their personal data in a portable and readily usable format that allows the consumer to transmit the data to another controller without hindrance.
The right to opt out of the processing of their personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

Sale of your personal data: We do not sell personal data as the OCPA defines the term “sale.”

To exercise any of these rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of the data.

Canadian Residents:

For Canadian residents, we are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA’s ten fair information principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

Under PIPEDA, you have certain rights regarding your personal information. These rights include:

Right to Access: You have the right to access the personal information we hold about you and request a copy of that information.
Right to Rectification: If you believe that any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
Right to Withdraw Consent: If you have previously provided your consent for the collection, use, or disclosure of your personal information, you have the right to withdraw that consent at any time. Please note that withdrawing your consent may affect our ability to provide certain services to you.
Right to Object: You have the right to object to the collection, use, or disclosure of your personal information for certain purposes, such as direct marketing.
Right to Erasure: In certain circumstances, you have the right to request the deletion or removal of your personal information from our records.
Right to Data Portability: You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another organization.

If you would like to exercise any of those rights, please email us at [email protected]. We will respond to your request or inquiry within a reasonable timeframe and in accordance with applicable laws. We may ask for additional info to verify that you’re the owner of that data.

Please note that there may be limitations on these rights as set out in PIPEDA or other applicable laws.

Brazilian Residents:

We are regulated under the Lei Geral de Proteção de Dados (“LGPD”), which applies to Brazilian residents.

Under the LGPD, Brazilian residents have several important rights:

Know when we use your personal data
Access your personal data, correct any errors, or delete your personal data
Anonymize, block, or delete data that we don’t need or are not processing in compliance with the LGPD
Request we transfer your data to another provider
Be informed about who we share your data with
Be informed about your ability to deny consent and any consequences
To revoke your consent

These rights apply to any personal data collected or processed in Brazil, as well as any personal data processed for the purpose of providing goods or services in Brazil.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

How do we protect personal data?

We have taken steps and put security measures in place to prevent the accidental loss or misuse of personal data.

For example, we limit access to those who have a genuine business need. Those processing your information will do so only in an authorized manner.

We also have procedures in place to deal with any suspected data security breach. We’ll notify you and any applicable regulator of a suspected data security breach when legally required.

Resolving Disputes

We hope that we can resolve any questions or concerns you raise about our use of your personal data.

Please contact us at [email protected] to let us know if you have questions or concerns. We will do our best to resolve the issue.

For EU residents, the GDPR also gives you right to lodge a complaint with a supervisory authority. You may do this in the EEA state where you live, work, or where any alleged infringement occurred.

For UK residents, you can lodge a complaint with the Information Commissioner’s Office (ICO).

How will we notify you of changes?

We last updated this Privacy Policy on August 21st 2024.

We may make further updates from time to time. If we have your email address on file, we will inform you via email. Otherwise, we will post a message on the Service about the change.

How to contact us

Please contact us if you have any questions about this Privacy Policy or your personal data.

You can do so by email at [email protected], or by physical mail at 8 The Green #17223 Dover, DE 19901 United States.