Privacy Policy

ROCOSTA GAMES

Players, community members, website visitors, Discord users, and beta testers

Effective date: Jun - 2025 | Last updated: 27 of May - 2026|

PLEASE READ CAREFULLY. This Privacy Policy explains how Rocosta Games collects, uses, shares, and protects personal information about you when you visit our websites, play our games, participate in our official Discord servers, follow us on social media, take part in beta tests, or otherwise interact with our community channels. It is designed to comply with the European Union and United Kingdom General Data Protection Regulation (GDPR/UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable global privacy laws.

This Privacy Policy works alongside our Community Confidentiality & Idea-Submission Agreement (NDA). The NDA governs what information you must keep confidential when participating in restricted channels, beta tests, and similar non-public materials. This Privacy Policy governs how we treat information about you.

Who We Are

Rocosta Games is a company organized under the laws of the State of Texas, United States of America ("Rocosta," "Company," "we," "us," or "our"). For EU and UK data-protection purposes, Rocosta Games is the "controller" of the personal data described in this Privacy Policy.

Privacy email: privacy@rocostagames.com

Because we are a small studio, we don't have a dedicated Data Protection Officer or an Article 27 representative. Privacy questions go directly to our team at the email above and we will do our best to respond quickly.

Scope of This Policy

This Policy applies to personal information processed by Rocosta Games in connection with:

Our official websites, storefronts, and landing pages.
Our published, pre-release, and beta video games, demos, and prototypes.
Our official Discord servers and any restricted channels, roles, or beta-tester groups.
Our official social-media accounts and the comments, messages, and submissions you direct to them.
Contests, giveaways, surveys, polls, and idea-submission programs we run.
Customer support, business communications, and any other interaction you have with us.

It does not apply to third-party platforms (such as Discord, Steam, Apple, Google, X, YouTube, Twitch, or Meta) that have their own privacy policies and terms. We encourage you to review those policies.

Personal Information We Collect

We collect personal information in three ways: directly from you, automatically through your use of our services, and from third parties (such as platform partners, payment processors, fraud prevention vendors, and publicly available sources).

Identity & Contact — Name, Discord username, gamer tag, email address, physical/billing address (if you make a purchase or receive a prize), country of residence. (You provide it directly.)
Account & Profile — Login credentials (hashed), account preferences, language, avatars, linked third-party accounts (Discord, Steam, Apple, Google, etc.). (You provide it; some fields auto-populate via SSO.)
Community Activity — Public messages, comments, posts, replies, reactions, polls, votes, contest entries, fan creations, ideas, feedback, and submissions made on our Discord, website, or social-media channels. (You generate it through participation.)
Beta & Playtest Data — In-game telemetry, gameplay events, crash logs, device performance, save data, bug reports, screenshots, and recordings you upload. (Collected automatically while you play; some you submit.)
Device & Technical — IP address, device identifiers, operating system, browser type, hardware model, language settings, time zone. (Collected automatically.)
Usage & Analytics — Pages viewed, features used, click events, session duration, referral source, error events, performance metrics. (Collected automatically via cookies and SDKs.)
Communications — Support tickets, survey responses, NDA acceptance records, email correspondence, moderation logs. (You provide it; some are logged automatically.)
Transactional — Order history, refund records, redemption codes. Card numbers are processed by our payment processors and never stored by Rocosta Games. (You provide it; payment data handled by third parties.)
Sensitive (limited) — Age confirmation, parental-consent records where applicable. We do not knowingly collect health, biometric, precise geolocation, or other sensitive categories. (You provide it where required by law.)

Children: Our community channels are intended for users who are at least the age of majority in their jurisdiction (and in any event at least 18 years old, or 13 with verifiable parental or legal guardian consent where permitted). We do not knowingly collect personal information from children under 13 (or under 16 in the EU/UK where required). If you believe a child has provided us with personal data, please contact us so we can delete it.

How We Use Personal Information

We use personal information for the following purposes. For users in the EU, UK, and other jurisdictions that require a lawful basis, the basis on which we rely is shown alongside each purpose.

We are a small studio and we do not make important decisions about you using only automated systems. If we ever rely on a third-party tool (for example, a basic anti-spam or anti-fraud filter), and you feel its result was wrong, just contact us and a person on our team will look at it.

Operate our games, websites, Discord servers, and community channels — Legal basis: performance of contract; legitimate interests.
Authenticate users, prevent fraud, enforce our NDA, and moderate communities — Legal basis: legitimate interests; legal obligations.
Run beta tests, playtests, contests, surveys, and idea-submission programs — Legal basis: performance of contract; consent where applicable.
Process orders, deliver prizes, and provide customer support — Legal basis: performance of contract; legitimate interests.
Improve and develop our games and services using analytics and telemetry — Legal basis: legitimate interests; consent for non-essential analytics in regions that require it.
Send service messages, security alerts, and (with your consent) newsletters and marketing — Legal basis: consent; legitimate interests.
Comply with legal, tax, accounting, and regulatory obligations — Legal basis: legal obligation.
Defend legal claims and protect the rights, safety, and property of Rocosta, our users, and the public — Legal basis: legitimate interests; legal obligations.

Cookies and Similar Technologies

Our website and the third-party services we use may set cookies and similar technologies on your device. In plain terms, we use them to keep you signed in, remember your preferences, understand basic traffic and how features are used, and help keep our services secure.

We do not run our own advertising network and we do not sell or share your personal information for cross-context behavioral advertising. You can manage or block cookies through your browser settings; some parts of our site may not work as well if you do. If we ever add a cookie banner or in-product privacy controls, you'll be able to change your choices there as well.

How We Share Personal Information

We share personal information only as described below. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Service providers — As a small studio, we depend on common online and cloud services to run the business. These typically include a website and game host, file storage, Discord (for our community), email and newsletter tools, a payment processor, basic analytics, and customer-support tools. They access your information only as needed to provide their service to us.
Platform partners — When you link a third-party account (Discord, Steam, Apple, Google, etc.), we exchange limited information with that platform to authenticate you, deliver content, and run features such as friends lists, leaderboards, and achievements.
Community visibility — Posts, comments, replies, reactions, and submissions you make in public or semi-public channels are visible to other community members and, in some cases, the general public. Do not post information you do not want others to see.
Legal, safety, and corporate transactions — We may disclose personal information when reasonably necessary to: (a) comply with law, legal process, or a government request; (b) enforce our terms, including the NDA; (c) detect, prevent, or address fraud, abuse, security, or technical issues; or (d) facilitate a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy or notify you and offer choices where required.
No "sale" or "sharing" under CCPA/CPRA — Rocosta Games does not sell personal information and does not share personal information for cross-context behavioral advertising. We have not done so in the previous 12 months and have no plans to do so. If our practices ever change, we will update this Policy and provide a clear opt-out before any such activity begins.

International Data Transfers

Rocosta Games is based in Texas, United States. Your personal information will likely be stored or processed on servers in the United States and, depending on the provider, in other countries. Those countries may have data-protection rules that differ from your own.

We choose reputable providers and rely on the transfer protections those providers already offer (for example, Standard Contractual Clauses or equivalent mechanisms where required). We do not negotiate custom cross-border transfer agreements ourselves. If you'd like to know which providers handle your data or what protections they apply, please email us.

How Long We Keep Personal Information

We keep personal information only for as long as we actually need it for the purposes described in this Policy, or for as long as the law requires.

We keep your account and community data while your account is active or while you are participating in our community.
We keep records that prove you accepted the NDA for as long as the NDA is relevant, plus a reasonable period afterward.
We keep purchase and payment records for as long as tax and accounting laws require.
We keep support emails and similar communications for a reasonable time so we can follow up if needed.

When we no longer need personal information, we delete it or rely on the third-party services we use to delete it under their own retention rules. If you'd like us to delete your data sooner, see the section on Your Privacy Rights below.

How We Protect Personal Information

Rocosta Games is a small company. We rely on reputable third-party cloud and online services to store and process personal information, and we apply common-sense administrative and technical practices on top of them — for example, strong passwords, limited access, and keeping our software up to date.

No method of transmission or storage is completely secure, and we cannot promise absolute security. If we ever become aware of a personal-data breach that is likely to put your rights at risk, we will notify you and the relevant authorities as required by applicable law.

Your Privacy Rights

Depending on where you live, you may have the following rights with respect to your personal information:

Access — Request a copy of the personal data we hold about you.
Rectification — Ask us to correct inaccurate or incomplete data.
Erasure / Deletion — Ask us to delete your data, subject to legal and contractual exceptions.
Restriction — Ask us to limit how we use your data while we resolve a concern.
Objection — Object to processing based on legitimate interests, including profiling.
Portability — Receive your data in a structured, machine-readable format.
Withdraw consent — Withdraw any consent you previously gave, at any time.
Opt out of sale or sharing — Direct us not to "sell" or "share" your personal information for cross-context behavioral advertising (CCPA/CPRA).
Limit use of sensitive PI — Direct us to limit our use of sensitive personal information to permitted purposes (CCPA/CPRA).
Non-discrimination — Receive equal service and pricing whether or not you exercise your rights.
Lodge a complaint — Complain to your local data-protection authority if you believe we have violated applicable law.
How to exercise your rights — Email us at privacy@rocostagames.com and tell us what you'd like us to do. We'll get back to you within the time the law requires (about one month in the EU/UK and up to 45 days in California). We may ask you to verify your identity before we delete data or send a copy of your information.
Authorized agents (California) — If you live in a state that lets an authorized agent submit a privacy request on your behalf, that's fine — we'll ask for something in writing showing you authorized them, and we may reach out to you directly to confirm.
Appeals — If we deny your request and you live somewhere that gives you a right to appeal (including Virginia, Colorado, Connecticut, Texas, and similar U.S. states), you can appeal by replying to our email with "Privacy Appeal" in the subject line. If we still can't help, we'll point you to your state attorney general.

Additional Information for EU, UK, and Swiss Users

If you are in the EEA, the UK, or Switzerland, you can complain to your local data-protection authority if you think we're handling your data incorrectly. We'd appreciate the chance to fix things first, so please reach out to us before going that route.

If we're relying on your consent for something, you can take it back at any time (it won't undo what we already did before then). If we're relying on our legitimate interests, you can object based on your situation and we'll take a fresh look.

Additional Information for U.S. State Residents

This section applies to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other U.S. states with comprehensive privacy laws.

Categories collected and disclosed: the categories listed in the "Personal Information We Collect" section.
Sources: you, your devices, our service providers, platform partners, and publicly available sources.
Business and commercial purposes: the purposes listed in the "How We Use Your Information" section.
Categories "sold" or "shared": none. We do not sell personal information and do not share it for cross-context behavioral advertising, including with respect to consumers under 16.
Sensitive personal information: we use sensitive personal information only for purposes permitted under CCPA/CPRA, such as providing the services you request, security, and fraud prevention. You may still ask us to limit certain uses where we are not relying on a permitted purpose.

Relationship to the Community NDA

Our Community Confidentiality & Idea-Submission Agreement (the "NDA") and this Privacy Policy serve different purposes:

The NDA protects our non-public information (unreleased games, builds, designs, business plans, etc.) and explains the rights you grant us in any submissions you choose to send.
This Privacy Policy explains how we treat personal information about you, including data we collect when you accept the NDA, join restricted channels, or take part in beta tests.

If you accept the NDA, we keep a record of your acceptance (Discord username, email, IP address, timestamp, and the version of the NDA you accepted) so we can prove the agreement is enforceable. We treat that record as personal information under this Policy.

Third-Party Sites and Services

Our websites, games, and community channels may link to or interoperate with third-party sites and services. We are not responsible for the privacy practices of those third parties. When you leave our channels, please review the privacy notices of any service you visit.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, give you reasonable advance notice (for example, via email, in-product banner, or a pinned post on our official channels) and, where required, ask for your consent. Continued use of our services after the effective date of an updated Policy means you accept the changes.

How to Contact Us

If you have questions, complaints, or requests about this Privacy Policy or our data practices, please contact us:

Email: privacy@rocostagames.com

Governing Law

This Privacy Policy is governed by the laws of the State of Texas, United States of America, without regard to its conflict-of-laws principles, except that mandatory consumer-protection or data-protection rules of your country or state of residence will continue to apply where they cannot be derogated from by contract.