This Privacy Policy describes how Ratlab Studios ("we", "us") collects, uses, and protects your personal data when you use playreigngame.com, the REIGN community forum, and the REIGN game (collectively, the "Service").
Translations of this document into other languages are provided for convenience only. The English version is the legally binding version.
1. Who we are
Ratlab Studios is an independent game studio operated by Luis Padilla. Contact: luis.padilla@playreigngame.com.
2. Data we collect
We collect the following categories of data:
- Account data — when you create a forum account: username, email, country (optional), and a hashed password. Provided by you via the registration form.
- Forum content — threads, posts, replies, reactions, and image uploads that you publish on the forum. Public by default.
- Email subscriptions — your email address if you subscribe to REIGN updates via our newsletter form.
- Technical data — IP address (hashed), browser type, device type, country (inferred from IP), and pages visited. Collected for security and analytics.
- Cookies — see Section 7 below.
We do not collect: real names (unless you choose to disclose), government IDs, phone numbers, payment information (handled by Steam at point of sale).
3. How we use your data
- To operate the Service (auth, forum, email delivery).
- To send you transactional emails (verification, password reset).
- To send you product updates if you opt in via the newsletter.
- To detect abuse, spam, and security threats.
- To improve the Service based on aggregate analytics.
We do not sell, rent, or share your data with third parties for marketing purposes. We do not run advertising on the Service.
4. Legal bases (GDPR)
For users in the European Economic Area, we rely on the following legal bases:
- Contract — to provide the account and forum services you signed up for.
- Legitimate interest — for fraud detection, security, and product improvement.
- Consent — for analytics cookies and email marketing (you can withdraw consent at any time).
5. Data processors we use
We share data with the following infrastructure providers, who process it on our behalf under data processing agreements:
- Supabase (database + authentication) — stores your account, forum content, and email subscriptions. Hosted in our chosen region.
- Vercel (hosting + serverless functions) — serves the website and processes requests. Vercel Privacy Policy.
- Resend (email delivery) — sends transactional and newsletter emails. Resend Privacy Policy.
- Vercel Analytics (privacy-friendly web analytics, no cookies for visitor tracking).
6. Data retention
- Account data: kept while your account is active. Deleted within 30 days of account deletion request.
- Forum content: kept indefinitely while your account is active, as it's part of the public community archive. You can request deletion.
- Email subscriptions: kept until you unsubscribe.
- Logs and analytics: kept for up to 90 days.
7. Cookies and similar technologies
We use the following types of cookies:
- Necessary cookies — required for the Service to function (e.g., authentication session cookies). Cannot be disabled.
- Analytics cookies — Vercel Analytics uses privacy-friendly, cookieless analytics. No personal tracking.
We do not use marketing or third-party tracking cookies. The cookie banner on the site lets you accept or reject non-essential cookies.
8. Your rights
You have the right to:
- Access — request a copy of your personal data.
- Correct — update inaccurate information (you can edit your profile directly).
- Delete — request deletion of your account and associated data.
- Port — receive your data in a machine-readable format.
- Object — to processing based on legitimate interest.
- Withdraw consent — for analytics or marketing emails at any time.
- Lodge a complaint — with your local data protection authority.
To exercise any of these rights, email luis.padilla@playreigngame.com. We aim to respond within 14 days.
9. Children
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, contact us and we will delete it.
10. International transfers
Your data may be processed in jurisdictions outside your country (notably the United States, where our infrastructure providers operate). Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
11. Security
We use industry-standard security measures: HTTPS everywhere, hashed passwords, encrypted data at rest, and row-level security on the database. No system is 100% secure; if a breach affects your data, we will notify you and the relevant authorities within 72 hours where legally required.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via email (if you have an account) and on the site. The "Last updated" date at the top reflects the most recent version.
13. Contact
Questions about privacy or data protection: luis.padilla@playreigngame.com.