Privacy

Who we are

Shuriken Studio runs this site and is responsible for your personal data here. Contact: [email protected].

What we collect

• Your email address, to sign you in and send order emails.
• That you passed our age check, and when. We ask for your month and year of birth once, use them to check you can buy, and don't store them.
• Your orders: what you bought, prices and order status.
• Downloads: when each package was downloaded, to support you and to apply our money-back guarantee.
• Model requests: what you asked for on the free library, the page you asked from, and a keyed hash of your IP address (to stop spam; we can't turn it back into your address).
• Your email, if you leave it with a request, to tell you if we make the model (or when orders open). We email you a link to confirm it first. We only take emails from people 16 and over.
• Payment details are collected and processed by the checkout (Payhip). We never see your card number. It tells us that you paid, and may share your name, country and email with us.

Cookies

We use two cookies, both needed for the store to work: one keeps you signed in, and one remembers that you passed the age check. We don't use advertising or tracking cookies. The checkout (Payhip) sets its own cookies when you pay.

Who else processes your data

• Payhip: payments, tax, receipts and downloads for games bought there.
• Resend: sending our emails.
• Cloudflare: storing and delivering game files and images.
• Railway: hosting the website and its database.

We don't sell your personal data or share it for advertising.

Children

Our store is for adults. We turn away anyone under 18 at the age check, before we ask for an email address, and we don't knowingly collect personal data from children under 13. If you think a child has given us their details, contact us and we'll delete them.

How long we keep it

Sign-in links expire after 20 minutes and sessions after 30 days. We keep order records for as long as tax and accounting law requires (typically up to 7 years). You can ask us to delete your account at any time; we'll delete what we aren't required to keep.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected] and we'll reply within 30 days.