SHATTER SEA - PRIVACY POLICY

Last Updated: August 10, 2026

[Have qualified privacy counsel review this Policy before launch. Replace the remaining text in SQUARE BRACKETS with your details.]

1. WHO WE ARE

This Privacy Policy explains how [LEGAL COMPANY / DEVELOPER NAME] ("Shatter Sea", "we", "us", or "our") collects, uses, shares, and protects personal information when you use the Shatter Sea website, game, accounts, multiplayer services, and customer support (the "Services").

We are based in Florida, United States.

Contact: [LEGAL COMPANY / DEVELOPER NAME] [BUSINESS ADDRESS] Florida, United States [PRIVACY EMAIL] [WEBSITE URL]

This Policy describes the data practices of the Services as actually built. If we add new features or providers, we will update this Policy first.

2. INFORMATION WE COLLECT

Account information:

• username
• password, stored only as a cryptographic hash - we never store or see your actual password
• email address, if you choose to set one for account recovery
• internal account identifiers
• linked platform identifiers if you link a Steam, Xbox or PlayStation identity
• one-time link codes you generate to sign in on another device

Game information:

• your characters, inventory, items, credits balance, skins owned and equipped
• structures you build and their locations
• world position and progress
• purchases of credits and skins, including the package bought, price, date and a payment reference
• in-game market listings and earnings
• team membership
• text chat messages you send (global and team chat)
• moderation records and sanctions, such as bans, where enforcement action is taken

Technical information:

• IP address, used for security (limiting repeated failed sign-in attempts) and to determine your country and assign you to nearby game infrastructure
• session tokens
• basic server logs of requests to the website and game services
• game version and connection information needed to run multiplayer

Country lookup is performed against a geolocation database on our own servers; your IP address is not sent to a third party for this purpose.

Support information:

• your username and email
• your messages to support and our replies

We do NOT collect:

• payment card numbers or PayPal credentials (payments happen on Stripe's and PayPal's own systems)
• website analytics or behavioral tracking data
• advertising identifiers
• precise location
• contacts, photos or files from your device

3. HOW WE COLLECT INFORMATION

We collect information:

• directly from you, when you create an account, sign in, play, build, chat, purchase or contact support
• automatically, when your game client or browser communicates with our servers (IP address, session and log data)
• from payment providers, who confirm to us that a payment succeeded, its reference and the package purchased - never your card details
• from platforms such as Steam, if you choose to link a platform identity or purchase through a platform storefront

4. HOW WE USE INFORMATION

We use information to:

• create and maintain your account
• operate the game world, multiplayer, building, combat, teams, chat and the in-game market
• save and restore your progress, including across game regions
• process credit purchases and deliver skins and credits you buy
• keep accounts secure, including limiting repeated failed sign-in attempts
• detect and act on cheating, fraud and abuse
• enforce our Terms and moderate conduct
• provide support and respond to your requests
• send account and service emails such as password resets and verification codes
• comply with law
• establish, exercise or defend legal claims

We do not use your information for advertising, and we do not build marketing profiles.

5. LEGAL BASES

Where applicable law requires a legal basis, we process information because:

• processing is necessary to perform our contract with you (operating the game and your account)
• we have legitimate interests in securing and improving the Services and preventing abuse
• you have provided consent, where we ask for it
• processing is necessary to comply with law

Where processing relies on consent, you may withdraw consent as permitted by law.

6. COOKIES

The website sets exactly one strictly necessary session cookie for sign-in and form security, and nothing else - no analytics, advertising or tracking cookies. Full details are in our Cookie Policy on this website.

7. HOW WE SHARE INFORMATION

Payment providers: Stripe (card payments) and PayPal process payments on their own systems under their own privacy policies. We send them the purchase amount and package description; they tell us whether the payment succeeded.

Email delivery: transactional emails such as password resets are delivered through Mailgun, our email service provider, which processes your email address for that purpose.

Platforms: if you link or sign in with a platform identity such as Steam, or purchase through a platform storefront, that platform processes information under its own policies.

Hosting: our servers run on [HOSTING PROVIDER OR "our own infrastructure"], which stores the data described above on our behalf.

Other players: multiplayer is inherently shared - other players can see your username, your character and its skins, the structures you build, your in-game actions, your chat messages, your market listings, and your team membership.

Legal and safety recipients: we may share information where reasonably necessary to comply with law, investigate abuse or fraud, protect players, secure the Services or enforce agreements.

Business transfers: information may be transferred in a merger, acquisition or sale of assets, subject to applicable law.

We do not sell personal information, and we do not share it for advertising.

8. INTERNATIONAL DATA TRANSFERS

We are based in the United States and information is processed there, and in other countries where our service providers operate. Where required, appropriate safeguards will be used for international transfers.

9. DATA RETENTION

Sign-in sessions expire after 7 days. Failed sign-in attempt records are kept only for the short window needed to limit abuse. Account and game data (your account, inventory, structures, purchases) are kept while your account is active; game worlds may also be reset periodically as described in our Terms. Purchase records are kept as required for accounting and legal obligations. Support correspondence is kept as long as needed to resolve and document the matter.

When information is no longer needed we delete, anonymize or aggregate it, subject to legal, backup and security requirements. You may request deletion of your account as described in Section 11.

10. DATA SECURITY

We use reasonable safeguards designed to protect personal information, including:

• passwords stored only as cryptographic hashes
• session cookies flagged HttpOnly and SameSite so scripts and other sites cannot read them
• the public website kept on separate infrastructure from the game backend, which is not directly reachable from the internet
• rate limiting on sign-in attempts
• payment processing performed entirely by Stripe and PayPal

No online service can guarantee absolute security. Protect your credentials and contact us if you suspect unauthorized access.

11. YOUR PRIVACY RIGHTS

Depending on your location, you may have rights to:

• access your personal information
• correct inaccurate information
• request deletion
• receive a copy of certain information
• restrict or object to certain processing
• withdraw consent
• complain to a privacy authority

Rights may be subject to legal exceptions and identity verification.

Submit requests to: [PRIVACY EMAIL]

12. U.S. PRIVACY RIGHTS

Residents of certain U.S. states may have additional rights under state privacy laws. We do not sell personal information or process it for targeted advertising, so no opt-out of those activities is needed. Where state laws apply, we will honor qualifying requests and will not unlawfully discriminate against you for exercising your rights.

13. FLORIDA

Shatter Sea is based in Florida, United States. We will comply with Florida privacy and consumer-protection requirements applicable to our operations.

14. EEA, UK AND SWITZERLAND

Where European or UK data-protection law applies, you may have additional rights including access, correction, erasure, restriction, portability, objection and the right to complain to a supervisory authority.

Controller: [LEGAL COMPANY / DEVELOPER NAME] [BUSINESS ADDRESS] Florida, United States [PRIVACY EMAIL]

EU/UK Representative, if required: [DETAILS OR REMOVE]

15. CHILDREN'S PRIVACY

Shatter Sea is an online multiplayer survival game that includes combat and player-versus-player gameplay and is not intended for children below [MINIMUM AGE].

We do not knowingly collect children's personal information in violation of applicable law. If we learn that information was improperly collected from a child, we will take appropriate action as required by law. Parents or guardians may contact: [PRIVACY EMAIL]

16. TEXT AND VOICE CHAT

Text chat (global and team) is transmitted through our servers so it can be delivered to other players, and may be reviewed for moderation when conduct is reported.

Voice chat is transmitted in real time to nearby players. We do not record or store voice communications. If voice recording, transcription or automated voice moderation is ever introduced, this Policy will be updated first.

17. ANTI-CHEAT AND SECURITY

Shatter Sea's multiplayer is server-authoritative: our servers validate gameplay actions to detect cheating, exploits and fraud using the gameplay and technical information described above.

We do not currently install separate third-party anti-cheat software on your device. If that changes, this Policy will be updated before deployment.

18. SERVICE COMMUNICATIONS AND MARKETING

We currently send only account and service emails, such as password resets and verification codes. We do not operate a marketing mailing list. If we introduce one, it will be opt-in, and every marketing email will include an unsubscribe link. We may always send necessary account, security, transaction and service messages.

19. THIRD-PARTY SERVICES

The Services may link to third-party services, including payment pages and platform stores. Their privacy practices are governed by their own policies.

20. PRIVACY SIGNALS

We do not sell or share personal information for targeted advertising. Where applicable law requires recognition of a valid opt-out preference signal, such as Global Privacy Control, we will process that signal as required.

21. CHANGES TO THIS POLICY

We may update this Policy as our Services, practices, technology or legal obligations change. We will update the Last Updated date and provide additional notice where required.

22. CONTACT

[LEGAL COMPANY / DEVELOPER NAME] [BUSINESS ADDRESS] Florida, United States [PRIVACY EMAIL] [WEBSITE URL]