Privacy Policy – Tabula rasa

Effective Date: 26 August 2025

David Linfield ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you play Tabula Rasa and interact with us.

1. Data We Collect

We may collect the following data when you use the game:

A) Gameplay analytics (only if you consent in‑game)

  • Analytics Identifier: a random analytics ID stored on your device once you allow analytics.

  • Context IDs: a per‑session ID and per‑run ID to understand playtime and run outcomes.

  • Gameplay events: e.g., cards offered/selected/upgraded, artifacts offered/taken, encounter types and results, durations.

  • Technical data: game version, settings, platform. We do not collect your name, email, or contacts via analytics.

B) Diagnostics & crash reports (always on)

  • Crash data: crash dumps and error logs such as stack traces, module names, Unreal Engine version, hardware/OS details, build metadata.

  • Correlation helper: the analytics ID is included in the crash context so we can correlate a crash with recent gameplay analytics to investigate stability issues.

C) Support communications (if you contact us)

  • If you email us, we will process your name, email address, and the contents of your message to handle your request.

2. How We Use Your Data

Your data is used for the following purposes:

  • Balance & improve gameplay: tuning card cost/rarity, encounter difficulty, and pacing; understanding feature adoption and player flow. (Analytics: consent required)

  • Stability, safety & performance: diagnosing crashes and technical issues; preventing abuse. (Diagnostics: legitimate interests)

  • Support: responding to emails and resolving issues you report. (Legitimate interests / contract, where applicable)

You can enable or disable analytics at any time in Settings → Game → Analytics. Disabling analytics stops further analytics collection; diagnostics/crash reporting may continue so we can maintain the game.

3. Legal Basis for Processing

We rely on the following legal bases:

  • Consent (analytics): We only collect gameplay analytics after you grant consent in‑game. You can withdraw consent at any time in the game's Settings; this will not affect the lawfulness of processing before withdrawal.

  • Legitimate interests (diagnostics and support): We process crash/diagnostic data and support emails to keep the game stable and respond to you. We assess these interests against your rights and implement safeguards.

4. Data Retention

We retain data only as long as necessary for the purposes described above:

  • Analytics events: retained for up to 7 years.

  • Crash/diagnostic logs: retained for up to 12 months.

  • Support emails: retained for up to 24 months after resolution.

We may retain minimal records where necessary to demonstrate compliance (e.g. consent records).

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption: data is encrypted in transit and at rest by our service providers where applicable.

  • Access controls: access is restricted to authorized personnel using strong authentication.

  • Data minimization: we collect only what we need and do not retain data longer than necessary.

6. Your Rights

Under applicable data‑protection laws (including UK GDPR/EU GDPR), you have the following rights:

  • Right of access – request a copy of your personal data.

  • Right to rectification – request correction of inaccurate or incomplete data.

  • Right to erasure – request deletion of your personal data when it is no longer necessary.

  • Right to withdraw consent – withdraw your analytics consent at any time in Settings.

  • Right to object – object to certain processing based on legitimate interests.

To exercise these rights, please email david@starlitliongames.com. For deletion requests relating to analytics, we will locate your analytics profile using details you provide (this requires your analytics ID, which is shown in Settings → Game → Analytics) and confirm when deletion has been completed.

7. Data Transfers & Processors

We use reputable third‑party processors acting on our instructions:

  • Analytics: PostHog (EU Cloud). Stores pseudonymous analytics IDs and gameplay events for balance and product improvement.

  • Crash reporting/diagnostics: Backtrace (or equivalent crash platform). Receives crash dumps and device/engine metadata, along with the analytics ID for correlation.

  • Email & productivity: Google Workspace (email and document storage) if you contact us.

Where processing involves transfers outside the UK/EU, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms, and we aim to keep analytics processing in the EU where available.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and provide the updated policy in‑game and on our website.

9. Acting as a Private Individual and Future Company Formation

Currently, all interactions, agreements, and intellectual property related to Tabula Rasa (Codename) are managed by me, David Linfield, as a private individual. I am developing Tabula Rasa and other related projects independently.

10. Future Company Formation and Assignment of Agreements and IP

I intend to form a company in the future, which will take over all rights, obligations, and responsibilities related to Tabula Rasa and associated activities, including this policy. Upon formation, all intellectual property created by me will be assigned to the company. This assignment will include all agreements currently in place, which will automatically transfer to the newly formed company without altering any terms or conditions. You will be notified of the company formation, and from that point onward, the company will be the legal entity responsible for managing all aspects of this policy and related activities.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact:

Email: david@starlitliongames.com

Privacy Policy - Playtesting

Effective Date: 2024/09/09

David Linfield ("we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you participate in our playtests and interact with us.

1. Data We Collect

We may collect the following personal data from you:

  • Name: For identification and communication purposes.

  • Email Address: For essential communication, sharing files, and sending updates.

  • Payment Details: For processing payments in return for playtesting.

2. How We Use Your Data

Your personal data will be used for the following purposes:

  • Essential Communication: We will use your name and email address to communicate essential information regarding the operation of the playtest, including instructions, updates, and any issues that may arise.

  • Sharing Files: We will use your name and email address to share files related to the playtest, such as game builds and testing materials.

  • Game and Future Playtest Updates (with consent): If you provide additional consent, we will use your name and email address to keep you informed about updates to the game you are playtesting and any future playtesting opportunities.

  • Updates About Future Games (with consent): With your consent, we may use your name and email address to inform you about future games we develop.

  • Inclusion in Game Credits (with consent): If you agree, we may include your name in the credits of the game you are playtesting.

  • Processing & Recording Payments: We will use your payment details for processing payments in return for your participation in the playtest, and for our tax records.

3. Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

  • Contractual Necessity: Processing your name, email address, and payment details is necessary to fulfill our obligations under the playtesting agreement, such as communicating with you, sharing files, and making payments.

  • Consent: For any additional uses of your data, such as receiving updates about future games or including your name in the game credits, we will seek your explicit consent.

4. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal or reporting requirements:

  • Name and Email Address: Retained for the duration of the playtest and for any additional consented communications until you withdraw consent.

  • Payment Details: As long as is required by HMRC.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption: Data is encrypted both in transit and at rest.

  • Access Controls: Access to your data is restricted to authorized personnel only, with secure credentials and two-factor authentication (2FA) in place.

  • Data Minimization: We only collect the data we need for the purposes stated and do not retain data longer than necessary.

6. Your Rights

Under GDPR and other applicable data protection laws, you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold about you.

  • Right to Erasure: You can request that we delete your personal data when it is no longer necessary for the purposes it was collected.

  • Right to Withdraw Consent: You can withdraw your consent for any additional uses of your data at any time.

  • Right to Object: You can object to the processing of your data for certain purposes.

To exercise any of these rights, please contact us at david@starlitliongames.com.

7. Data Transfers

As we use Google Workspace to store and process your data, which may involve data transfers outside the EU, we ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and compliance with relevant data protection frameworks.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes and provide the updated policy on our website.

9. Acting as a Private Individual and Future Company Formation

Currently, all interactions, agreements, and intellectual property related to Tabula Rasa (Codename) are managed by me, David Linfield, as a private individual. I am in the process of developing Tabula Rasa (Codename) and other related projects independently.

10. Future Company Formation and Assignment of Agreements and IP

Please note that I intend to form a company in the future, which will take over all rights, obligations, and responsibilities related to Tabula Rasa (Codename) and any associated activities, including this agreement. Upon the formation of this company, all intellectual property created by me, including but not limited to the game, related content, and any associated assets, will be assigned to the company. This assignment will include all agreements currently in place, including this one, which will automatically transfer to the newly formed company without altering any terms or conditions.

You will be notified of the company formation, and from that point onward, the company will be the legal entity responsible for managing all aspects of this agreement and any other related activities.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

Email: david@starlitliongames.com