Privacy Policy

This policy explains how Wild Hearts Publishing Pty Ltd (ABN 34 695 911 025) (“we”, “us”) collects and handles your personal information when you use the Havenscar companion. We are based in Australia and handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988. If you are in the UK or EU, the relevant parts of the UK GDPR and GDPR also apply.

What we collect

• Your email address, when you buy. We use it to send your access code and to answer you if something goes wrong.
• Your access code, and whether and when it was redeemed.
• Display names typed by players when they join a session, together with their in-game progress. Players are not asked for an email address or any account.
• Payment information, processed securely by Stripe. We receive confirmation of a payment and your billing email, never your full card number.

There are no user accounts and no passwords. Access is by code alone.

How we use it

• To deliver what you bought and to run your sessions.
• To send you your access code, and to send it again if you ask.
• To respond to your enquiries.
• To keep the service working and secure.

We do not send marketing email, and we do not run third-party analytics or advertising trackers. If that ever changes, we will update this policy first, and any marketing will be sent only with your consent and with a working unsubscribe.

Who we share it with

We do not sell your personal information. We share it only with the providers who help us run the product, each under their own privacy obligations:

• Supabase — database and media hosting.
• Stripe — payment processing.
• Resend — sending your access code email.
• Vercel — application hosting.

Some of these providers store data on servers outside Australia. We take reasonable steps to ensure they protect your information.

Storage on your device

When you redeem an access code, the companion stores that code, your product and your email in your browser’s local storage so you are not asked for it on every visit. It stays on your device until you clear your browser data. We do not use advertising cookies.

How long we keep it

Purchase records — your email address, your access code and its redemption status — are kept for as long as your purchase is active, and for as long as Australian tax and record-keeping law requires (generally at least five years).

Session data is minimal: the display names players type when they join, their in-game resources and progress, and the session’s log of moves. No player email, account or contact detail is ever collected. We delete a session and all of its player data 90 days after the session ends. Sessions that are created but never finished are removed on the same schedule, 90 days after their last activity.

Your rights

You can ask us to access, correct or delete your personal information. To make a request, email info@wildheartspublishing.com.au. If you are unhappy with how we have handled your information, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au), or your local data protection authority.

Children

Purchases are intended for adults. Players who join a session only type a display name and do not create an account or provide other personal information.

Changes and contact

We may update this policy from time to time and will post the new version here. For any privacy question, contact info@wildheartspublishing.com.au.