Privacy Policy

Effective Date: September 18, 2025

Controller and Contact

The Service is provided by [Legal Entity Name], [Registered Address]. For privacy matters, contact: [privacy@automagical.games]. If applicable, our Data Protection Officer can be reached at: [contact@automagical.games].

What Data We Collect

Account data: email, username, authentication tokens
Service logs and diagnostics: IP address, user agent, timestamps, error/context logs
Story usage data: story/node interactions and preferences
Support/communication: messages you send to us
Cookies and similar: session cookies and consent-managed analytics (see Cookies section)

Purposes and Lawful Bases

Provide and secure the Service (contract)
Account management, authentication, and fraud prevention (contract/legitimate interests)
Service analytics, performance and reliability (legitimate interests; consent for non-essential cookies/analytics)
Email communications (consent for marketing; contract/legitimate interests for transactional/service emails)
Legal compliance and enforcement (legal obligation/legitimate interests)

Data Retention

We keep personal data only as long as necessary for the purposes above:

Account data: for the life of the account; limited backup persistence after deletion
Logs and diagnostics: typically 30–180 days unless required longer for security/legal
Communications: for the time needed to handle the request and for compliance

Data Recipients and Processors

We use service providers to operate the Service. These may include cloud hosting, email delivery, image storage, and logging/monitoring. Some processing may occur outside your country, including outside the EEA/UK. Where required, we implement Standard Contractual Clauses (SCCs) and equivalent safeguards. Key processor categories and typical jurisdictions are listed below (non-exhaustive):

Cloud database and hosting (e.g., US/EU)
Email delivery (e.g., US/EU)
Object storage/CDN (e.g., US/EU)
Error logging and monitoring (e.g., US/EU)

A current list of processors and safeguards is available upon request.

International Transfers

If we transfer your personal data outside the EEA/UK, we rely on SCCs and equivalent safeguards, or other lawful transfer mechanisms.

Your Rights

You have the right to request access, rectification, erasure, restriction, and portability of your personal data, and to object to processing where applicable (including direct marketing). Where processing is based on consent, you may withdraw consent at any time. To exercise your rights, contact [privacy@automagical.games]. You also have the right to lodge a complaint with your local supervisory authority.

Children

The Service is not intended for children under the age of 16 (or the age of digital consent in your jurisdiction). We do not knowingly collect personal data from children without appropriate consent.

Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects on users. Moderation and anti-abuse systems may surface content for review but are not solely determinative.

Cookies and Similar Technologies

We use essential cookies for authentication and site functionality. Non-essential cookies (e.g., analytics) are used only with your consent via a cookie banner/manager. You can change your preferences at any time.

Security

We implement technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Updates to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or prominent notice on the Service. Your continued use of the Service after updates constitutes acceptance of the revised Policy.

Contact

For any questions or to exercise your rights, contact: [privacy@automagical.games].