Privacy Policy – Tabula rasa
Effective Date: 20th February 2026
Starlit Lion Games Ltd ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you play Tabula Rasa and interact with us.
1. Data We Collect
We may collect the following data when you use the game:
A) Gameplay analytics (only if you consent in‑game)
Analytics Identifier: a random analytics ID stored on your device once you allow analytics.
Context IDs: a per‑session ID and per‑run ID to understand playtime and run outcomes.
Gameplay events: e.g., cards offered/selected/upgraded, artifacts offered/taken, encounter types and results, durations.
Technical data: game version, settings, platform. We do not collect your name, email, or contacts via analytics.
B) Diagnostics & crash reports (always on)
Crash data: crash dumps and error logs such as stack traces, module names, Unreal Engine version, hardware/OS details, build metadata.
Correlation helper: the analytics ID is included in the crash context so we can correlate a crash with recent gameplay analytics to investigate stability issues.
C) Support communications (if you contact us)
If you email us, we will process your name, email address, and the contents of your message to handle your request.
2. How We Use Your Data
Your data is used for the following purposes:
Balance & improve gameplay: tuning card cost/rarity, encounter difficulty, and pacing; understanding feature adoption and player flow. (Analytics: consent required)
Stability, safety & performance: diagnosing crashes and technical issues; preventing abuse. (Diagnostics: legitimate interests)
Support: responding to emails and resolving issues you report. (Legitimate interests / contract, where applicable)
You can enable or disable analytics at any time in Settings → Game → Analytics. Disabling analytics stops further analytics collection; diagnostics/crash reporting may continue so we can maintain the game.
3. Legal Basis for Processing
We rely on the following legal bases:
Consent (analytics): We only collect gameplay analytics after you grant consent in‑game. You can withdraw consent at any time in the game's Settings; this will not affect the lawfulness of processing before withdrawal.
Legitimate interests (diagnostics and support): We process crash/diagnostic data and support emails to keep the game stable and respond to you. We assess these interests against your rights and implement safeguards.
4. Data Retention
We retain data only as long as necessary for the purposes described above:
Analytics events: retained for up to 7 years.
Crash/diagnostic logs: retained for up to 12 months.
Support emails: retained for up to 24 months after resolution.
We may retain minimal records where necessary to demonstrate compliance (e.g. consent records).
5. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
Encryption: data is encrypted in transit and at rest by our service providers where applicable.
Access controls: access is restricted to authorized personnel using strong authentication.
Data minimization: we collect only what we need and do not retain data longer than necessary.
6. Your Rights
Under applicable data‑protection laws (including UK GDPR/EU GDPR), you have the following rights:
Right of access – request a copy of your personal data.
Right to rectification – request correction of inaccurate or incomplete data.
Right to erasure – request deletion of your personal data when it is no longer necessary.
Right to withdraw consent – withdraw your analytics consent at any time in Settings.
Right to object – object to certain processing based on legitimate interests.
To exercise these rights, please email david@starlitliongames.com. For deletion requests relating to analytics, we will locate your analytics profile using details you provide (this requires your analytics ID, which is shown in Settings → Game → Analytics) and confirm when deletion has been completed.
7. Data Transfers & Processors
We use reputable third‑party processors acting on our instructions:
Analytics: PostHog (EU Cloud). Stores pseudonymous analytics IDs and gameplay events for balance and product improvement.
Crash reporting/diagnostics: Backtrace (or equivalent crash platform). Receives crash dumps and device/engine metadata, along with the analytics ID for correlation.
Email & productivity: Google Workspace (email and document storage) if you contact us.
Where processing involves transfers outside the UK/EU, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms, and we aim to keep analytics processing in the EU where available.
8. Data Controller
Starlit Lion Games Ltd is registered with the Information Commissioner’s Office (ICO) under registration number ZC095224.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and provide the updated policy in‑game and on our website.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:
Email: david@starlitliongames.com
Privacy Policy - Playtesting
Effective Date: 20th February 2026
Starlit Lion Games Ltd ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you participate in our playtests and interact with us.
1. Data We Collect
We may collect the following personal data from you:
Name: For identification and communication purposes.
Email Address: For essential communication, sharing files, and sending updates.
Bank Details: For processing payments in return for playtesting.
2. How We Use Your Data
Your personal data will be used for the following purposes:
Essential Communication: We will use your name and email address to communicate essential information regarding the operation of the playtest, including instructions, updates, and any issues that may arise.
Sharing Files: We will use your name and email address to share files related to the playtest, such as game builds and testing materials.
Game and Future Playtest Updates (with consent): If you provide additional consent, we will use your name and email address to keep you informed about updates to the game you are playtesting and any future playtesting opportunities.
Updates About Future Games (with consent): With your consent, we may use your name and email address to inform you about future games we develop.
Inclusion in Game Credits (with consent): If you agree, we may include your name in the credits of the game you are playtesting.
Processing Payments: We will use your bank details solely for processing payments in return for your participation in the playtest. Bank details will not be retained after the payment is completed.
3. Legal Basis for Processing
We rely on the following legal bases for processing your personal data:
Contractual Necessity: Processing your name, email address, and bank details is necessary to fulfill our obligations under the playtesting agreement, such as communicating with you, sharing files, and making payments.
Consent: For any additional uses of your data, such as receiving updates about future games or including your name in the game credits, we will seek your explicit consent.
4. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal or reporting requirements:
Name and Email Address: Retained for the duration of the playtest and for any additional consented communications until you withdraw consent.
Bank Details: Used solely for the purpose of making payments and will be deleted immediately after the payment is processed.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
Encryption: Data is encrypted both in transit and at rest.
Access Controls: Access to your data is restricted to authorized personnel only, with secure credentials and two-factor authentication (2FA) in place.
Data Minimization: We only collect the data we need for the purposes stated and do not retain data longer than necessary.
6. Your Rights
Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold about you.
Right to Erasure: You can request that we delete your personal data when it is no longer necessary for the purposes it was collected.
Right to Withdraw Consent: You can withdraw your consent for any additional uses of your data at any time.
Right to Object: You can object to the processing of your data for certain purposes.
To exercise any of these rights, please contact us at david@starlitliongames.com.
7. Data Transfers
As we use Google Workspace to store and process your data, which may involve data transfers outside the EU, we ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and compliance with relevant data protection frameworks.
8. Data Controller
Starlit Lion Games Ltd is registered with the Information Commissioner’s Office (ICO) under registration number ZC095224.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and provide the updated policy on our website.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
Email: david@starlitliongames.com