— LEGAL

Privacy Policy

How we collect, use, and safeguard your information.

Last updated: 21 April 2026

Cosmic Canvas Productions (“Cosmic Canvas Productions,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share, and otherwise process personal data when you visit our websites, play our games, use our apps, participate in demos, betas or playtests, contact our support team, subscribe to our newsletters, enter promotions, join our communities, or otherwise interact with any of our products and services (collectively, the “Services”).

Please read this Privacy Policy carefully to understand how we handle your information.

1. Who We Are

The data controller responsible for your personal data is:

Cosmic Canvas Productions
Legal entity name: Tsampikos Ioannis Alexandrakis
Registered address: Archangelos, 0, Rhodes, Greece
Email: [email protected]
Support contact: [email protected]

2. Scope of This Policy

This Privacy Policy applies to:

our website(s), landing pages, and online stores;
our games for PC, console, mobile, browser, or other platforms;
demos, betas, playtests, downloadable content, and live-operated features;
customer support, newsletters, surveys, promotions, and events;
community or social features that we operate directly.

This Privacy Policy does not apply to third-party websites, app stores, platform providers, payment providers, or community services that we do not control, even if they are linked from or used with our Services. Those third parties may have their own privacy notices and terms.

3. Personal Data We Collect

Depending on how you use our Services, we may collect the following categories of personal data:

A. Information You Provide Directly

We may collect information that you provide to us directly, such as:

your name, display name, or username;
email address and contact details;
account registration details;
messages you send to us through support forms, email, or community channels;
survey responses, contest entries, or feedback;
any other information you choose to provide.

B. Information Collected Automatically

When you use our Services, we may automatically collect certain technical and usage information, such as:

IP address;
device identifiers and advertising identifiers, where applicable;
browser type, operating system, device model, language, and settings;
game or app version;
session data, gameplay events, progress data, crash logs, error reports, and performance diagnostics;
approximate location derived from IP address;
referral URLs, in-game events, and interaction data;
cookie IDs, SDK identifiers, and similar technology data.

C. Information We Receive from Third Parties

We may receive information from third parties, such as platform operators, publishers, payment processors, analytics providers, advertising partners, authentication providers, anti-fraud vendors, cloud service providers, and customer support tools.

This may include, for example:

platform user IDs or account identifiers;
display names or profile names;
purchase confirmations, entitlement data, or subscription status;
fraud-prevention or security signals;
analytics, attribution, or campaign data;
limited transaction or billing-related information.

D. Community and User-Generated Content

If our Services include community, social, multiplayer, or user-generated content features, we may collect information connected to those features, such as player reports, public posts, usernames, shared content, or moderation records.

4. How We Use Personal Data

We may use personal data for the following purposes:

to provide, operate, maintain, and improve our Services;
to create and manage player or user accounts;
to authenticate users and enable gameplay, cloud saves, multiplayer, leaderboards, achievements, and other game features;
to process purchases, confirm entitlements, and provide access to content;
to respond to support requests and communicate with you;
to analyze usage, debug problems, fix bugs, and improve performance, design, and balance;
to protect the security and integrity of our Services;
to detect, investigate, and prevent fraud, abuse, cheating, unauthorized access, and violations of our policies;
to send service-related notices and updates;
to send marketing communications where permitted by law or where you have consented;
to administer surveys, events, contests, or promotions;
to comply with legal obligations and enforce our legal rights.

5. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, we process personal data on one or more of the following legal bases:

Performance of a contract: where processing is necessary to provide you with the Services you request, such as account functionality, gameplay services, support, purchases, and access to content.
Legitimate interests: where processing is necessary for our legitimate interests, such as operating and securing our Services, improving products, preventing fraud and cheating, performing internal analytics, and managing our business, provided those interests are not overridden by your rights and freedoms.
Consent: where required by law, including for certain cookies, similar technologies, optional marketing communications, or specific optional features.
Legal obligation: where processing is necessary to comply with applicable laws, regulations, court orders, tax rules, accounting obligations, or law-enforcement requests.
Vital interests: where necessary in exceptional circumstances to protect someone’s vital interests.

6. Cookies and Similar Technologies

We and our partners may use cookies, pixels, tags, local storage, software development kits (SDKs), device identifiers, and similar technologies on our websites, apps, and games.

We may use these technologies to:

keep our Services functioning properly;
remember your settings and preferences;
understand traffic and user behavior;
analyze game and website performance;
measure the effectiveness of campaigns;
prevent fraud and enhance security;
provide advertising or advertising measurement, where applicable.

Some of these technologies are strictly necessary for the operation of the Services, while others are optional and will be used only where allowed by law and, where required, with your consent.

You can manage your preferences through:

our cookie banner or consent management tool;
your browser settings;
your device privacy settings;
platform-level settings, where available;
any in-game privacy or consent controls we provide.

Please note that disabling certain technologies may affect the availability or functionality of parts of the Services.

7. How We Share Personal Data

We may share personal data with the following categories of recipients, where necessary and appropriate:

hosting, cloud infrastructure, and technical service providers;
analytics, diagnostics, attribution, and crash reporting providers;
customer support and communications providers;
payment processors, e-commerce providers, and fraud-prevention vendors;
platform operators, publishers, distribution partners, and store providers;
advertising, marketing, or measurement partners, where applicable;
professional advisers, auditors, insurers, and legal counsel;
public authorities, regulators, courts, or law enforcement, where required;
actual or potential buyers, investors, or other parties involved in a merger, acquisition, restructuring, financing, or sale of assets.

We require service providers acting on our behalf to process personal data only on appropriate instructions and to protect it with suitable safeguards.

8. International Transfers

Some of our service providers or partners may process personal data outside the country where you live, including outside the European Economic Area (“EEA”) or the United Kingdom.

Where required by applicable law, and where personal data is transferred internationally, we will use appropriate safeguards designed to protect that data, such as:

transfer to countries recognized as providing an adequate level of protection;
Standard Contractual Clauses or equivalent approved transfer mechanisms;
additional contractual, technical, or organizational safeguards where appropriate.

You may contact us using the details below if you would like more information about the safeguards we rely on for international transfers.

9. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and protect our legal rights.

Retention periods may vary depending on the type of data and the purpose of processing. For example, we may retain:

account data for as long as your account remains active and for a reasonable period afterward;
support communications for [insert period];
gameplay, analytics, and crash data for [insert period];
newsletter or marketing data until you unsubscribe or withdraw consent, and for a limited period afterward where necessary to maintain suppression records;
transaction and financial records for as long as required by applicable accounting and tax laws.

Where possible, we may delete, aggregate, or anonymize personal data so that it can no longer be linked to an identifiable individual.

10. Children’s Privacy

Our Services are [not directed to children under [insert age] / directed to a general audience].

We do not knowingly collect personal data from children in violation of applicable law. Where our processing relies on consent and a user is below the age at which they can validly provide consent under applicable law, we may require consent from a parent or legal guardian.

If you believe that a child has provided personal data to us unlawfully, please contact us so that we can investigate and take appropriate action.

11. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

However, no method of transmission over the internet and no method of electronic storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing, including certain processing based on legitimate interests;
withdraw consent at any time, where processing is based on consent;
request portability of the personal data you provided to us, where applicable;
lodge a complaint with a supervisory authority or data protection regulator.

These rights are not absolute and may be subject to legal limitations or exceptions.

To exercise your rights, please contact us at [insert privacy email]. We may need to verify your identity before processing your request.

13. Marketing Communications

Where permitted by law, we may send you news, updates, promotional messages, or information about our games and related services.

Where required, we will do this only with your consent. You can unsubscribe at any time by using the unsubscribe link in the message or by contacting us directly.

Even if you opt out of marketing communications, we may still send you service-related or transactional communications where necessary.

14. Third-Party Services, Platforms, and Links

Our Services may integrate with or be distributed through third-party platforms, stores, engines, middleware providers, payment providers, social networks, community tools, or analytics services.

When you use those third-party services, your information may also be processed under their own privacy policies and terms. We encourage you to review those third-party notices carefully.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technologies, legal obligations, or business practices.

When we make changes, we will post the updated version here and update the “Last updated” date above. Where required by law, we will provide additional notice or seek your consent.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your privacy rights, please contact us at:

Cosmic Canvas Productions
Email: [email protected]
Postal address: Archangelos, 0, Rhodes, Greece
Support: [email protected]

If you are located in the EEA, UK, or another jurisdiction with similar rights, you may also have the right to lodge a complaint with your local data protection authority.