Legal

Privacy Policy

This policy describes what information Sixsmith Games collects, why it is collected, and when it may be shared in connection with the services.

Effective October 4, 2026Current version
This policy reflects account sign-in, subscription checkout, account-linked operational activity, privacy-minimized first-party website analytics, optional provider measurement, and blog comments. Product-activity retention periods remain subject to legal and privacy review before production ingestion is enabled.

1. What this policy covers

This Privacy Policy explains how Sixsmith Games collects, uses, shares, and protects information when you visit our website, create an account, make a purchase, post a comment, or use our apps and related services.

We collect the information reasonably needed to run the services, support users, process payments, secure accounts, and improve the products.

2. Information you give us

You may give us information directly when you create an account, subscribe, contact us, or post content. Depending on what you do, this may include your name, email address, profile details, comment text, support messages, and other content you choose to submit.

If you post a blog comment or other public content, that content may be visible to other users together with your display name and the date it was posted.

3. Information collected automatically

We and our service providers may automatically collect technical and usage information such as IP address, browser type, device information, pages viewed, referring pages, approximate location derived from IP, timestamps, and interactions with the services.

The public site uses Vercel Web Analytics for aggregate page measurement without analytics cookies. Vercel derives a temporary visitor hash from the request, discards that visitor session after 24 hours, and does not let Sixsmith Games identify a person or follow them across different days or websites from that data.

The public site also sends a limited set of first-party events to Sixsmith Games Operations. These events can include a redacted public page, timestamp, referring source, bounded campaign tags, country code, device category, selected product links, and visible active time. Before you allow optional tracking, these events contain no visitor ID, session ID, account ID, IP address, raw browser user agent, or free-form content.

If you allow optional tracking, first-party events may include a random session identifier stored only for the current browser tab. It is not your Clerk account ID and is not used to create a persistent anonymous profile. It helps us count sessions and understand actions within that tab.

When you use a signed-in Sixsmith Games product, we may record account-linked operational activity such as creating or archiving a room or project, starting or completing a mission or game session, completing a typing exercise, or confirming a connected product workflow. These records use a stable account-provider identifier and are kept separate from optional click, screen-flow, and diagnostic analytics.

Operational activity records contain bounded event names, timestamps, outcomes, source and product identifiers, and limited summaries or counters needed for support and product operations. They are not intended to include campaign text, notes, chat, prompts, character sheets, typed text, keystrokes, map contents, or unrestricted product content.

Google Analytics and Meta measurement load only after you allow optional tracking. We also use cookies or similar technologies when needed for authentication, session management, security, and purchases.

4. Payments and subscription data

Payments are processed by Stripe or another payment processor we choose. We may receive subscription and transaction details such as plan name, billing status, renewal dates, and a limited payment record needed to manage access and support your account.

We do not intentionally store your full payment card number on our own servers when Stripe handles the checkout flow.

5. How we use information

We use information to provide and improve the services, create and manage accounts, authenticate users, process subscriptions, respond to support requests, moderate comments, send service messages, prevent abuse, comply with legal obligations, and understand how the site is being used.

  • To sign you in and keep your account secure.
  • To grant access to subscriptions and purchased features.
  • To process billing, taxes, and receipts.
  • To operate comments, support, and product communications.
  • To analyze traffic and improve performance, content, and features.
  • To provide account support using confirmed product activity and owned-object summaries.

6. How we share information

We may share information with service providers that help us run the services. Based on the systems currently used by this site, those providers may include account and authentication providers such as Clerk, payment processors such as Stripe, aggregate web analytics and hosting providers such as Vercel, optional analytics providers such as Google Analytics, optional marketing measurement providers such as Meta, code or content storage providers such as GitHub, and email or notification providers.

We may also share information if required by law, to protect rights and safety, to enforce our terms, or in connection with a merger, acquisition, financing, or sale of assets.

We do not share more information than is reasonably necessary for those purposes.

7. Data retention

We keep information for as long as reasonably needed to provide the services, maintain business and tax records, resolve disputes, enforce agreements, and meet legal requirements. Different data types may be kept for different periods depending on why they were collected.

Vercel Web Analytics discards its temporary visitor session after 24 hours and retains aggregate reporting data according to the configured Vercel plan. Optional analytics and marketing data follow the retention settings configured with those providers. Identified operational activity uses separate retention rules; the proposed starting periods are 13 months for detailed events and 36 months for daily aggregates, subject to legal and privacy review before production rollout.

Privacy-minimized first-party website events are retained for up to 120 days. They are kept separate from account-linked product activity and billing records.

8. Your choices

You can often access or update account information through your account provider, browser settings, or device settings. You can also contact us if you want to request access, correction, or deletion of personal information, subject to verification and any legal exceptions that apply.

The Privacy settings control on the site lets you allow or withdraw optional analytics and marketing measurement. That choice does not remove account-linked operational records required to operate and support signed-in products. You may contact us to request deletion of personal information and product activity, subject to identity verification and legal exceptions. You can also control cookies through your browser, but some parts of the services may not work properly if authentication or purchase cookies are disabled.

If optional tracking is off, the site may still record the limited first-party events described above without a visitor or session identifier. This supports aggregate traffic, page timing, and product-link reporting while avoiding a persistent anonymous profile.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, but no system is perfectly secure. Please use strong passwords, secure your devices, and avoid sharing account credentials.

10. Children's privacy

The services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without legally valid consent. If you believe a child has provided us personal information inappropriately, please contact us so we can review and delete it when appropriate.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the effective date and may provide additional notice when appropriate. Your continued use of the services after the updated policy takes effect means the new policy applies going forward.

12. Contact

For privacy questions or requests, contact info@sixsmithgames.com.