Last updated: August 5, 2026
This policy explains what personal data GameDesigners.online, operated by GameDesigners.online (contact: [email protected]), collects and how we use it. We are the data controller for that data.
1. Data we collect
- Account data — email address, username, and password (stored hashed, never in plain text).
- Order data — billing name, billing address, billing country, purchase history. Billing country is required to calculate tax correctly.
- Payment data — processed directly by our payment provider. We receive only a transaction reference and the last four digits of the card. We never receive or store full card numbers.
- Seller data — for marketplace sellers: payout details, and any tax identifiers required by law.
- Technical data — IP address, browser type, pages viewed, and referring URL, collected in server logs and analytics.
- Communications — messages you send us, and newsletter subscription status if you opt in.
2. Why we use it (legal bases)
- To perform our contract with you — creating your account, processing payment, delivering downloads, providing support.
- To comply with legal obligations — tax records, invoicing, accounting retention, and responding to lawful requests.
- Legitimate interests — securing the Site, preventing fraud and abuse, and understanding aggregate usage to improve the Site.
- Consent — marketing emails and non-essential cookies. You may withdraw consent at any time.
3. Sharing
We share data only with processors that make the service work: our payment provider (to take payment), our hosting provider (to run the Site), our email provider (to send receipts and, if you opted in, newsletters), and our analytics provider. Where you buy from a marketplace Seller, that Seller receives the information necessary to fulfil and support your order. We do not sell your personal data.
4. International transfers
We operate globally, so your data may be processed outside your country. Where data leaves the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
5. Retention
Account and order records are kept for as long as your account is active and afterwards for the period required by tax and accounting law (typically up to 10 years). Server logs are kept for a short operational period. Newsletter data is kept until you unsubscribe.
6. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. Under the CCPA, California residents may request disclosure or deletion and may opt out of “sale” of personal information — we do not sell personal information. To exercise any right, email [email protected]. We will respond within the period required by law. You may also complain to your local data protection authority.
7. Cookies
We use strictly necessary cookies to keep you logged in and to hold your shopping cart — these cannot be switched off. We use analytics cookies only where you consent. You can clear or block cookies in your browser, though the cart and login will stop working without the necessary ones.
8. Security
The Site is served over HTTPS, passwords are hashed, payment data is handled by a PCI-DSS compliant provider, and paid files are served through an authenticated handler rather than public URLs.
9. Children
The Site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.