Privacy policy

1. Background

1.1 ScapeWorld Entertainment AB, a private limited liability company incorporated under the laws of Sweden with registration number 559539-3348, registered address at Kolmilevägen 14, 184 38 Åkersberga, Sweden (“ScapeWorld”, “we”, “our”, “us”), operates the website ScapeTheGame currently available via https://scapethegame.com including any subdomain currently operated and/or introduced from time to time, and any other website or web application we operate for the Scape games that links to these terms and policies, such as our creator page and creator portal (the “Website”). We may from time to time make certain services available to you on or via our Website (the “Services”). This Privacy Policy also applies to the games we publish for PC, including their game clients, game servers and online features (the “Games”), as described in section 13.

1.2 ScapeWorld is the data controller with respect to the processing of personal data on the Website, in the Games and through the use of the Services. We have in this Privacy Policy described how we collect, use, share, erase or in other aspects process your personal data through your use of the Website, the Games and Services, and how you may assert your rights under applicable data protection legislation.

1.3 Please note that when you re-direct to third parties via our Website, such as social media providers, such third parties will be the data controllers responsible for the processing of your personal data that is undertaken thereafter; please read their respective privacy policies for more information. In the event that you re-direct to another website operated by us, make sure to read the applicable privacy policy on such website. If you choose to sign in to our Website with your Steam account, or to sign in with or connect your TikTok, Twitch or YouTube account, Valve (which operates Steam), TikTok, Twitch and Google (which operates YouTube) are each responsible as independent data controllers for their own processing of your personal data in connection with the sign-in. Sections 11 and 12 describe how we process the personal data we receive from them.

1.4 We recommend that you from time to time visit our Website to read the most recent version of this Privacy Policy. The date at the top of this page will be updated should we update the content of this Privacy Policy.

2. Collection and Categories of Personal Data

We will generally collect your personal data directly from yourself. Where necessary, however, we may collect your personal data from a third party or via publicly accessible sources. We may currently collect the following categories of personal data from you depending on the functionalities we make available on our Website from time to time:

• Name and contact information, such as your name and email address.

• Your social media profile, such as your name, profile picture and anything else you have made publicly available in your profile that you share with us or from which you have contacted us on social media.

• Other information provided in free text fields, such as the content of any communication you choose to send to us.

• Usage information, technical information and statistics, such as information about how you interact with our Website; technical information about the device, hardware and/or software that you use to access our Website, such as device identifiers, browsers, operating systems; and the general location of your device.

• Account information from third-party sign-in, such as your user ID, display name, profile picture and email address from your social media account, such as TikTok, Twitch or YouTube, as further described in section 11.

• Scape account information, if you create a Scape account, such as your username, the accounts you link to it and the In-Game Items it holds.

• Game information, if you play our Games, such as your sign-in details, Steam ID, gameplay and connection data, reports and moderation records, crash reports and, where a Game offers or uses them, chat messages, voice communications, anti-cheat data and gameplay analytics, as further described in section 13.

• Information collected for a particular Service by virtue of any Supplemental Terms you agree to.

3. Purpose and Legal Grounds

We may process your personal data for different purposes, on the basis of different legal grounds and store your personal data for different periods of time, depending on the processing, and in each case subject to applicable data protection legislation. These purposes and legal grounds primarily include the following activities:

• Performance of contract: We may process your contact information and communication you choose to send to us in free text fields with respect to a support request, question, feedback submission or other content related to a Service you have requested or purchased. If you sign in through a third party, for example a TikTok, Twitch or YouTube account, we process the account information we receive to sign you in, maintain your account and provide the Services you have requested, as further described in section 11. If you take part in any particular Service to which you have agreed to Supplemental Terms, we also process your personal data to perform such agreement with you. If you create a Scape account, we process your Scape account information to provide your account and the In-Game Items on it. If you play our Games, we process your personal data on the legal grounds described in section 13.

• Legitimate interests: We process your name and contact information and any other information provided in free text fields to process your general requests and inquiries, whether by email, social media, or other channel. We will also process usage information, technical information and statistics to better understand our visitors and their preferences (without the use of cookies or other technology that places files on your device). The processing is necessary to fulfil our legitimate interest in conducting our business, providing our Services, responding to your inquiry, providing technical support in connection with our Services, and to improve our Website and Services, which we have determined outweighs your interest not to have your personal data processed for these purposes.

• Legal obligations: We may process personal data as necessary to comply with a legal obligation, for example to provide information to public authorities where we are required to do so by law.

• Consent: We may from time to time allow you to opt-in for electronic direct marketing communications from us without requesting a service from us. The processing is necessary based on your explicit consent to promote us, our business, and our products and services. Should you choose to share your name and contact information, your social media profile, or other similar data, we may process your personal data for the purpose of tailoring our communication to you. We never use account information received through third-party sign-in for direct marketing.

4. Sharing of Your Personal Data

4.1 We may need to share your personal data with a public authority for the purpose of complying with applicable law, in which case the legal ground is to comply with a legal obligation.

4.2 In order to operate and make our Website and Games available to you, we may need to share your personal data with one or multiple group companies for administrative or technical reasons, and with certain selected suppliers, partners and contractors. Such suppliers, partners and contractors could be business partners, consultants or providers of legal, auditing, accounting, technical and IT support/functionalities, content delivery and security providers, game platform providers, and storage providers. They will only process your personal data based on our instructions to them, and we will always ensure that the necessary agreements (for example a so-called data processing agreement) are in place to protect your personal data at all times. The legal ground is our legitimate interest in conducting our business in an efficient manner and by accessing these services and functionalities, which we have determined outweighs your interest not to have your personal data processed for this purpose.

4.3 We may further need to share your personal data with potential investors and/or buyers (including their hired experts) for the purpose of raising capital or selling ScapeWorld (or all or parts of the ScapeWorld’s assets), or if we are otherwise subject to a merger with another company, in which case the legal ground is our legitimate interest to complete such transactions, which we have determined outweighs your interest not to have your personal data processed for this particular purpose.

4.4 Sections 4.2 and 4.3 are subject to the additional restrictions in section 11.4 for personal data we receive through third-party sign-in.

5. Transfers and Storage Period

5.1 Your personal data will generally be processed within the EU/EEA but may vary depending on the suppliers and contractors we engage from time to time. We will retain your personal data for as long as it is necessary in order for us to fulfil the purpose for which we collected your personal data unless we are permitted or required to retain it for a longer period pursuant to applicable law. Personal data we receive through third-party sign-in is retained and deleted as described in section 11.5. Personal data from the Games is retained as described in section 13.9. Please note that we may be required to store certain data for a longer period, even if we state a specific period in this Privacy Policy.

5.2 In the event that you reside in the EU/EEA, and any personal data would be processed outside of the EU/EEA, we will always ensure that a proper transfer mechanism is relied on so that your personal data is safeguarded at all times, as if they were processed within the EU/EEA. Depending on the recipient, we rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework where the recipient is certified under it, or on the European Commission’s standard contractual clauses.

6. Security

We have reasonable and appropriate technical and organisational measures in place in our business to ensure that your personal data is at all times safeguarded and protected against loss, destruction, misuse, and unauthorised access and disclosure. Our employees work under strict confidentiality and follow clear instructions on how to manage your personal data in accordance with applicable data protection legislation and our own policies. We only grant employees access to your personal data when it is necessary in order for them to perform their duties. We continuously evaluate our security measures to remedy any vulnerabilities we may identify in an effort to make sure that your personal data is safe with us.

7. Cookies

We may use cookies and other similar technologies on our Website. You can read more about the different cookies that we use on our Website in our Cookie Policy. You will always be afforded the opportunity to consent to the use of any cookies that are not so-called strictly necessary cookies. Please note that cookies may also be used by third parties if and when you are directed to a third-party website. If you sign in via a third party platform, such as your TikTok, Twitch or YouTube account, we may set a strictly necessary cookie that keeps you signed in, as described in our Cookie Policy and in section 11.7. Our Games also store and read information on your device, as described in section 13.5.

8. Your Rights and How You Can Exercise Them

8.1 You have rights with regard to your personal data. Please read the following sections to understand them, as well as how you can exercise them. You are always welcome to contact us if you need more information about your rights by sending an email to privacy@scapethegame.com.

Right to information: You have the right to be informed about how we process your personal data. We respect this right by being transparent with you in this Privacy Policy.

Right of access: You have the right to obtain access to the personal data we process about you by requesting a copy showing which data we have about you, and how we use it.

Right to rectification: You have the right to request that we correct inaccurate information about you, as well as to complete any incomplete information.

Right to erasure: You sometimes have the right to request the erasure of personal data that concerns you. We are required to erase the personal data in question, for example if the personal data is no longer necessary in relation to the purposes for which the personal data was initially collected. Please note that we are not obliged to delete your personal data if it is necessary to retain it to comply with legal obligations, or for the establishment, exercise or defence of legal claims.

Right to restriction: You have the right to request that we restrict our processing of your personal data if you for example believe that the information we have about you are inaccurate, our processing is unlawful, or we no longer need the information for the purposes they were collected.

Right to object: You have the right to object to our processing of your personal data if our processing is based on a legitimate interest.

Right to data portability: You have the right to request a copy of the personal data in a machine-readable format that concerns you and which we process to perform a contract or based on your consent.

Right to withdraw your consent: You have the right to withdraw your consent to a certain processing activity which we undertake on the basis of your consent.

Right to lodge a complaint: If you have any complaints about the way in which we process your personal data, you are always welcome to reach out to us. You also have the right to lodge a complaint to a supervisory authority (if such exists in your country of residence).

8.2 You can also read more about your rights on the applicable data protection supervisory authority in your country of residence. You can find the contact information of your data protection authority at the below links:

EU/EEA: https://edpb.europa.eu/about-edpb/board/members_en

Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

UK: https://ico.org.uk/global/contact-us/

9. Updates and Contact Information

ScapeWorld reserves the right to introduce updates and make amendments to this Privacy Policy from time to time by updating the “Last Updated” date at the top. This is necessary to ensure that we always provide you with correct and up to date information about how we process your personal data. If you have any questions about the way in which we process your personal data, or about this Privacy Policy, please contact us at privacy@scapethegame.com.

10. United States Residents

10.1 If you are a resident of the United States, including California, Virginia, Colorado, Connecticut, Utah, or other states with applicable privacy laws, you may have additional rights regarding your personal information. These may include

• the right to know what personal information we collect, use, disclose, and sell or share about you;

• the right to request access to, correction of, or deletion of your personal information;

• the right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising;

• the right to limit the use and disclosure of sensitive personal information; and

• the right to non-discrimination for exercising your privacy rights.

10.2 To exercise these rights, please contact us at privacy@scapethegame.com. We may need to verify your identity before processing your request.

10.3 We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), or similar US state privacy laws. We also do not knowingly sell or share the personal information of individuals under the age of 16. If our practices change in the future, we will update this Privacy Policy and provide you with any required notice and opt-out options.

10.4 Our Website, Games and Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it as required by law.

10.5 If you are a California resident, you may also request information about our disclosure of your personal information to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civil Code Section § 1798.83).

11. Signing in with or connecting TikTok, Twitch or YouTube

11.1 Our Website may allow you to sign in with or connect your TikTok, Twitch or YouTube account, for example to verify a channel in the Scape Creator Program. To provide this, our Website uses TikTok Login Kit, the Twitch API and YouTube API Services. When you choose a provider, you are redirected to that provider, which asks you to confirm the information you permit us to receive. We never ask for, receive or store your TikTok, Twitch, Google or YouTube password. The providers process your personal data under their own privacy policies:

• the Google Privacy Policy (http://www.google.com/policies/privacy);

• the Twitch Privacy Notice (https://legal.twitch.com/legal/privacy-notice/); and

• the TikTok Privacy Policy (https://www.tiktok.com/legal/privacy-policy).

11.2 Depending on the provider you choose, we may receive and store the following account information: from TikTok, your TikTok open ID, display name and profile picture; from Twitch, your Twitch user ID, username, display name, profile picture and email address; and from Google and YouTube, your Google account ID, name, email address and profile picture, and your YouTube channel ID and channel name. We also store the access tokens issued by the provider for as long as your account stays connected. Unless you connect a channel to the Scape Creator Program, we do not generally access or store any other information from your TikTok, Twitch, Google or YouTube account, such as your videos, streams, messages, contacts, followers or viewing activity. Section 12 describes the channel information we access if you connect a channel to the Creator Program.

11.3 We use this information only to sign you in, create and maintain your account, keep our Website secure, and provide our Services. The legal ground is performance of contract. We do not use information received through third-party sign-in for advertising or direct marketing, or for any purpose other than providing and improving the features of our Website that you use, including, if you connect a channel to the Scape Creator Program, measuring your content and determining your standing as described in section 12.

11.4 We do not sell, rent or otherwise transfer information received through third-party sign-in. We do not share it with group companies or other third parties, except with suppliers that store and process it on our behalf and under our instructions as described in section 4.2, or where we are required to do so by law. Information received from Twitch is not shared with group companies under section 4.2, or with investors, buyers or a successor entity under section 4.3, without Twitch’s prior permission. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

11.5 We keep this information only for as long as your account stays connected to the provider. We refresh or delete information received through YouTube API Services at least every 30 days. If you disconnect a provider in your account on our Website, delete your account, or ask us to delete your data, we delete the information received from that provider as soon as possible and at the latest within 7 days, unless we are required by law to keep it. Deleting information stored by us does not delete any data stored by TikTok, Twitch, Google or YouTube; to delete that data, use the tools each of those services provides.

11.6 You can revoke our access to your account at any time: by using the disconnect option in your account on our Website; for YouTube, through the Google security settings page at https://security.google.com/settings/security/permissions; for Twitch, under Settings, then Connections in your Twitch account; and for TikTok, under the TikTok app’s settings for connected apps. If you revoke our access through the provider, or reduce the permissions you have given us, we delete the information we received through that access as soon as we become aware of it, and at the latest within 30 days.

11.7 Signing in sets a strictly necessary cookie on your device that keeps you signed in. This cookie is secure, HTTP-only and same-site, and is described in our Cookie Policy. When you are redirected to TikTok, Twitch or Google to sign in, those providers may set their own cookies on their websites under their own policies.

11.8 If you link your Twitch account to our Website to receive Twitch Drops, we receive and store your Twitch user ID and the access tokens Twitch issues, link them to your Scape account, and receive from Twitch the Drops you claim so that we can grant the matching In-Game Items. The legal ground is performance of contract. We keep this information while your Twitch account stays linked and delete it as described in sections 11.5 and 11.6.

12. Scape Creator Program

12.1 This section applies if we invite you to, or you apply to or take part in, the Scape Creator Program (the “Creator Program”), which is governed by our Scape Creator Supplemental Terms (the “Creator Terms”).

12.2 In the Creator Program we may from time to time process the following: (a) your application, including your name or handle, email address, country of residence, preferred language, the type of content you make, how you found the Creator Program (including any referral link you used), confirmation that you are of age of majority, and, if you apply on behalf of a company, its name and your role; (b) your Scape account and the third party account you sign in with, including, for example, Steam ID and the public profile information Steam provides, such as your Steam persona name and avatar if you sign in with Steam, and, if you link it, your Discord user ID; (c) the channels you list when you apply and the channels you verify, including your handles and channel identifiers and, where you verify by placing a code in your channel profile, that code; (d) public information that social media platforms and other platforms make available about those channels and their content, including the reach of the channels you list when you apply, posts carrying #ScapeTheGame or another hashtag we notify you of, or tagging the official Scape account where clause 3.3 of the Creator Terms allows, streams broadcast in the Scape category, views, likes, comments, shares, follower counts and stream statistics, and any performance figures you report to us yourself for a platform we cannot read automatically; (e) data from your Steam measurement link, being clicks, wishlist additions and purchases attributable to it, which Steam provides to us in aggregate and without identifying the people who use the link; (f) your standing in the Creator Program, including your tier, activity score, Founder status, our internal assessment of the quality of your content, your trust status, your progress on quests and other activities, and the rewards and Steam keys granted to you; (g) any content boosted or otherwise featured by us and the advertising results the platform reports for it; (h) a record of your acceptance of the Creator Terms, including the version, the time and the account used; (i) your communications with us; and (j) records of our review of your published content for disclosure, the reasons for any decision to decline your application, and records of any investigation, suspension, removal or challenge relating to you.

12.3 We process this personal data on the following legal grounds. Performance of contract: to assess your application, verify your channels, measure your content, determine your tier and standing, grant rewards and Steam keys, operate Boosts, send you briefs and embargo notices, and administer your exit from the Creator Program. Legitimate interests: to detect and prevent fraud, including purchased engagement and falsified performance data; to review published content for disclosure; to investigate and act on suspected breaches of the Creator Terms; to prevent a person removed for cause from rejoining; to establish, exercise or defend legal claims; and to improve the Creator Program, which we have determined outweighs your interest not to have your personal data processed for these purposes. Legal obligations: to comply with advertising and consumer protection law on the disclosure of commercial content, with sanctions and export control law, and with record-keeping obligations.

12.4 After the Founder window described in the Creator Terms, your tier and activity score are calculated automatically from the performance data described in section 12.2(d). Removal for inactivity after 90 consecutive days below the entry tier threshold is also applied automatically, except where we cannot read your numbers automatically, in which case a person decides. The highest tier, and every suspension or removal for cause, is decided by a person. You may ask us at privacy@scapethegame.com to have a person review any decision about your standing that was made automatically, and to explain how it was reached.

12.5 We share Creator Program personal data only as follows: when we Boost your content, the advertising platform receives the authorisation you created in it and processes data about the Boost as an independent controller under its own terms, and your handle and channel name appear with the boosted content; Valve Corporation, which operates Steam, receives the data needed to deliver Steam keys and to operate your Steam measurement link; if you link Discord, Discord receives the information needed to give you your creator role there; a quest provider, where we use one, receives the information needed for quests and reward claims; and our suppliers, including the provider of the system we use to manage applications and creator records, process Creator Program data on our behalf as described in section 4.2. Section 11.4 continues to apply to information received through TikTok, Twitch or YouTube.

12.6 We keep Creator Program personal data for as long as you take part in the Creator Program. If you leave the Creator Program or are removed for inactivity, we generally keep your Creator Program record for up to 12 months so that you can return with your record recognized and, where the Creator Terms provide, your tier restored. If we decline your application, we keep it for up to 6 months so that we can apply the waiting period before you may apply again and recognise a repeat application. If you are removed for cause, we keep the information needed to prevent you from rejoining, being your name, email address, channel identifiers and Scape and Steam account identifiers, generally for up to 24 months. We keep the record of your acceptance of the Creator Terms generally for up to 24 months after your participation ends, to establish, exercise or defend legal claims. Information we receive from TikTok, Twitch or YouTube is deleted as described in sections 11.5 and 11.6, including when you disconnect a channel, and the Creator Program records we keep after that contain no information received from those platforms.

12.7 If we invite you to the Creator Program before you apply, we process the name, handle and business contact details you publish on your channel pages, such as the email address in your bio, together with public information about your channels, to contact you about the Creator Program. The legal ground is our legitimate interest in inviting creators to the Creator Program. If you do not reply, we delete your details within 6 months. If you unsubscribe, we keep only what we need to make sure we do not contact you again. You can object at any time by unsubscribing or by contacting us at privacy@scapethegame.com.

12.8 The rights described in section 8 apply to Creator Program personal data. In particular, you may object to processing based on our legitimate interests, and you may request a copy of the performance data and standing we hold about you.

13. Our Games

13.1 This section applies when you install, launch or play any of our Games, for example through Steam. Each Game is also governed by its End User License Agreement (the “EULA”).

13.2 When you play our Games we may from time to time process the following: (a) your Scape account and sign-in information, including the email address and name you sign in with, your Steam ID, the public profile information Steam provides, such as your Steam persona name and avatar, and the sign-in tokens that keep you signed in; (b) your game profile, including your username, avatar, cosmetics, emotes, progress and the In-Game Items you hold, including In-Game Items in your Steam inventory; (c) records of In-Game Items you buy through Steam, such as the item, price, currency, time and order reference, but not your payment card details, which Valve processes; (d) device and technical information, such as your IP address and the country or region derived from it, device identifiers, operating system, hardware such as processor, graphics card and memory, and the Game version, language and settings; (e) connection and gameplay information, such as when you launch and close a Game, the servers and instances you join, matchmaking, your position, movement and actions in the Game, session length and connection quality; (f) your friends, parties and groups in the Games, and the invitations you send and receive; (g) where a Game offers text or voice chat, the messages you send and your voice communications; (h) reports you make and reports made about you, the content reported, the results of any automated filtering of usernames and chat messages, and records of our review, our decision, the reasons for it and any appeal; (i) where a Game uses anti-cheat software, the information it collects from your device while the Game runs, such as running processes and loaded software, system configuration and the integrity of the Game files, to detect cheats and unauthorised modifications; (j) crash and error reports, which contain the error message and stack trace, the warning and error log lines from the Game leading up to the error, details of failed requests to our servers and, when a Game crashes, a memory dump, together with the device and Game information described in (d), the name of your computer, the country and city derived from your IP address and a random identifier for your installation, and records of when each play session starts and ends, which we use to measure how often the Games crash; (k) where a Game uses gameplay analytics, events that describe how you use the Games, such as sessions, progress, use of features and purchases, linked to your Scape account or to a pseudonymous identifier; and (l) your communications with us, including support requests, reports and feedback.

13.3 Other players in a Game can see your username, avatar, cosmetics and emotes and, where a Game offers text or voice chat, read the messages you send and hear you in voice chat. Your username may also appear to other players in friends lists, parties and groups. Other players may record or share what they see and hear, and we are not responsible for what they do with it.

13.4 We process this personal data on the following legal grounds. Performance of contract: to sign you in, provide your Scape account, game profile and In-Game Items, run the Games and the game servers, match you with other players, provide friends, parties, groups and any text or voice chat a Game offers, deliver what you buy, and provide updates and support under the EULA. Without this personal data, we cannot provide the Games. Legitimate interests: to keep the Games fair and secure, including through anti-cheat software where a Game uses it and the detection of fraud and abuse; to receive and handle reports, filter usernames and chat messages, investigate suspected breaches of the EULA and act on them; to find and fix crashes, errors and performance problems and measure how often the Games crash; to show gameplay clips, screenshots and usernames in trailers, on social media and in other promotional material, as described in the EULA; where a Game uses gameplay analytics, to understand how the Games are played and improve them; and to establish, exercise or defend legal claims, which we have determined outweighs your interest not to have your personal data processed for these purposes. Legal obligations: to handle notices about illegal content and explain our moderation decisions where the law requires it, to report to or respond to public authorities where we are required to do so, and to keep accounting records of purchases.

13.5 The Games store and read information on your device. Some of this is necessary to provide the Game you asked to play, for example to keep you signed in, save your settings and connect you to the game servers. The Games also store and read information on your device to prepare and send crash and error reports, including keeping a small number of reports on your device until they can be sent, and, where a Game uses them, to collect gameplay analytics and run anti-cheat software. Crash and error reports, including session records, are switched on by default, and you can switch them off at any time in the settings of each Game. Where a Game uses anti-cheat software, it is required to play that Game online, because fair play depends on every player running it. You can object to gameplay analytics, or to any other processing based on our legitimate interests, by contacting us at privacy@scapethegame.com.

13.6 You can report players and content by emailing hello@scapethegame.com or, where a Game offers it, through an in-game report function. Where a Game offers chat, we keep chat messages for a limited period so that reports can be checked. We may use automated tools to filter usernames and chat messages, and where a Game uses anti-cheat software, it may detect cheating and restrict an account automatically. The filters compare usernames and chat messages against lists of words and patterns that break the rules in the EULA, and anti-cheat software compares what it finds on your device with known cheats and unauthorised modifications. A restriction applied automatically can stop you from playing online. Suspensions and bans for player conduct are decided by a person. When we act on your content or your account, we tell you what we did, why, and how you can challenge it, unless the law or a risk of harm to any person prevents us. You may ask us at privacy@scapethegame.com to have a person review any decision that was made automatically, and to explain how it was reached.

13.7 We share personal data from the Games only as follows: other players see what is described in section 13.3; Valve Corporation, which operates Steam, processes your Steam account, your purchases, your Steam inventory and any trading on the Steam Community Market as an independent controller under its own privacy policy; our suppliers, including providers of game servers and multiplayer technology, sign-in, hosting and databases, crash reporting and, where a Game uses them, chat, chat filtering, anti-cheat and analytics services, process personal data on our behalf as described in section 4.2; and public authorities receive personal data where the law requires it, as described in section 4.1.

13.8 To give you a stable connection, the game servers run in several regions, and you may be connected to a server outside the EU/EEA. Your Scape account, your username and the link to your Steam account and inventory are stored in the United States, and crash and error reports are stored in the EU. Section 5.2 describes how we safeguard personal data processed outside the EU/EEA.

13.9 We keep personal data from the Games for as long as your Scape account exists, unless a shorter period applies below. If you ask us to delete your account, we delete or anonymise your game data within 30 days, except what we must keep under this section or by law. Crash and error reports are kept for up to 90 days. Purchase records are kept for as long as accounting law requires, currently seven years.

13.10 The Games are not intended for children under 13, or under a higher minimum age that applies in your country or that a Game sets. If you are under the age of majority in your country, you may only play with the consent and involvement of a parent or guardian. If you believe a child has played without this, contact us at privacy@scapethegame.com and we will delete their personal data as the law requires.

13.11 The rights described in section 8 apply to personal data from the Games, including the right to object described in section 13.5.