1.  What’s in this Privacy Policy?

In this Privacy Policy, you’ll find:

• What information we collect about you
• How we might use that information
• What information we might share with others
• Your rights and choices about that information

2.  What does this Privacy Policy cover?

We are Sea Stories Creative Studios LLC. In this document, we will refer to ourselves as “Sea Stories Creative,” “we,” or “us.” We will refer to you and any other users as “you.”  

In this Privacy Policy, we will cover Sea Stories Creative’s games, websites (such as seastoriescreative.com, stellardriveempire.com, and voidpilotslegacy.com), and other software products. Together, we’ll refer to these as the “Service.”

By using the Service, you agree to the terms of this Privacy Policy. Please read our Terms of Use, as well, for general guidance about your use of the Service. Except as otherwise expressly agreed, this Privacy Policy and our Terms of Use are the complete agreement between you and Sea Stories Creative.

4.  Use of Collected Information

We utilize the information we collect for different purposes, including:

• Offer and Enhance the Service. In order to offer, sustain, and refine the Service, and to tailor user experiences.
• Customer Service. To address any user queries, send service-related notifications, and deliver customer and technical assistance.
• Outreach and Marketing. For the purposes of marketing, promotional materials, and sending you updates about the Service.
• Contests and Sweepstakes. For the purposes of operating contests and sweepstakes through the Service, whether run by Sea Stories Creative or a third party sponsor, administrator, or service provider.
• Interest-based Advertising. To display advertisements on the Service tailored to your specific interests.
• Updates and Fixes. To review user interactions, usage of the Service, and any errors or issues with the Service, in order to refine and correct the Service’s features and functionality.
• Legal Requirements. To abide by any legal requirements, uphold our Terms of Use, and to safeguard against deceptive activities.
• Anonymized Information. In addition to the purposes stated in this Privacy Policy, we may use certain information collected from you in an anonymized form for the purpose of improving the Service, developing new features, conducting data analysis, and enhancing overall user experience. This anonymized information will not personally identify you or any other individual.

5.  Sharing of Information

In order to operate the Service, we need to share certain personal data we collect from you with third parties, including:

• With Other Users. To offer the Service’s functionality, we need to share certain Communication Data if you’ve posted or communicated any on public-facing portions of the Service.
• Service Providers. We might share your details with third-party entities that assist in the operation and enhancement of the Service. This means storage solutions, data analysis providers, payment processors, third-party account systems and platforms, and other service providers.
• Legal Reasons. We may need to share certain personal data if required by the law, judicial orders, or in response to legal requests.
• Protection & Security. If we decide that sharing of certain personal data is vital for the safety, rights, or assets of our users, the public, or our business, we may need to disclose that personal data to third parties.
• Corporate Changes. Should our entity undergo a merger, acquisition, or asset transaction, your personal details might be part of the transferred assets.

SMS-specific Policies.

Third Parties that Help Provide the Messaging Service: We will not share your opt-in to an SMS short code campaign with a third party for purposes unrelated to supporting you in connection with that campaign. We may share your Personal Data with third parties that help us provide the messaging service, including, but not limited to, platform providers, phone companies, and other vendors who assist us in the delivery of text messages.

Additional Disclosures: Affiliates: We may disclose the Personal Data to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your Personal Data will be subject to this Policy. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6.  Lawful Bases for Processing Personal Data

In accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws, we process personal data based on the following lawful grounds:

• Consent. For personal data collected when you contact us, we rely on your explicit consent. You have the right to withdraw your consent at any time (see “How to Contact Us” below or you can opt out of any email communications by clicking the unsubscribe link in each marketing-related email and in-Service collection on the Service itself).
• Contractual Obligations. We process specific sets of your data to fulfill our contractual obligations to you. This encompasses actions like account creation, Service operations and delivery, fulfilling purchases, and ensuring you can interact with other users when using that functionality.
• Legitimate Interests. For certain data processing activities, we rely on our legitimate business interests. This includes activities like Service improvement, interest-based advertising on the Service, marketing efforts, and ensuring a safe user environment.
• Legal Compliance. There are instances where we’re legally mandated to process your data. This could be due to regulatory requirements, legal requests, or for the prevention of fraud and illegal activities.

7.  How long do we keep your personal data?

We only keep your personal data as long as it’s required to provide you with the Service. Sometimes a longer period might be required by law.

After that, we will delete your personal data within a reasonable time.

Please note that we may retain some data, if necessary to:

• resolve disputes,
• enforce our user agreements,
• follow any technical and legal requirements related to the Service.

“Do Not Track” Signals: Because there’s not yet a consensus on how companies should respond to web browser-based or other “do not track” mechanisms yet, we do not respond to web browser-based do not track signals.

Mobile Advertising Opt-Out: If you would like more information about online advertising and your choices about not having personal data used to personalize ads for you, please see the following links:

• If you have an Android device, see Google’s instructions here: https://support.google.com/ads/answer/2662856?co=GENIE.Platform%3DAndroid&hl=en
  
• If you have an iOS device, see Apples’ instructions here: https://support.apple.com/en-us/HT205223
  
• For general information on opting out of network-based advertising, see the following link: http://www.networkadvertising.org/managing/opt_out.asp
  

8.  Children’s privacy rights

We don’t knowingly collect any personal data from children under the age of 13. We also don’t knowingly allow them to create accounts, sign up for newsletters, make purchases, or use the Service.

We may also limit our personal data processing for EU users between 13 and 16.

We take children’s privacy seriously and encourage parents to play an active role in their children’s online experience. If you have any concerns about your child’s personal data, please contact us at [email protected].

9.  Transfers of your personal data

Our headquarters is in the United States.

No matter where you live, by using the Service you consent to the processing and transfer of your personal data in and to the United States. This processing will be under the privacy policies of third parties that we share personal data with.

The laws of these countries governing data collection and use may not be as comprehensive or protective as the laws of the country where you live.

If you would like more information, please contact us (see “How to contact us” below).

10. Special terms based on where you live

Depending on where you live, you may be subject to certain laws related to our use of your personal data.

For EU Residents:

We are regulated under the General Data Protection Regulation (GDPR), which applies across the European Union (including in the United Kingdom). We are responsible as a controller of personal data for GDPR purposes.

Your rights as an EU resident:

Under the GDPR, EU residents have several important rights:

• You can ask us to correct that personal data, delete it, or request that we use it only for certain purposes.
• If you’ve consented to our processing, you can change your mind and ask us to stop using your personal data. For example, you can unsubscribe from our mailing list at any time – just click the link in each marketing email.
• In some circumstances, you can ask us not to use automated processing or profiling about you.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Also, in some cases where the law requires it, we may not be able to help with the above requests.

California Residents:

We are regulated under the California Consumer Privacy Act (CCPA), which applies to California residents.

Under the CCPA, California residents have several important rights:

Right to Know: You can ask us what personal data we hold about you and request a copy. This includes:

• The type and specific pieces of personal data we have collected
• The types of sources we collect the data from
• The purpose for collecting your personal data
• The third parties we share that data with

Right to Delete: You can request that we erase your personal data. There are some exceptions to this right, if we:

• Need to complete the transaction for which the personal data was collected or if there is an ongoing business relationship or contract with you
• Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity
• Need to identify and repair errors affecting Service functionality
• Exercise free speech or ensure another consumer can exercise (or another lawful right)
• Need to comply with the California Electronic Communications Privacy Act
• Engage in research in the public interest
• Enable solely internal uses that are in line with your expectations for using your personal data
• Need to comply with a legal obligation
• Otherwise use your personal data internally, in a way that’s compatible with the reason we collected it in the first place

Sale of your personal data: 

Other Rights: California residents also have the right to request information about our disclosure of personal data to third parties for direct marketing purposes during the calendar year before your request. This request is free and may be made only once a year.

We also won’t discriminate against you for exercising any of the rights listed above.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Virginia Residents:

We are regulated under the Virginia Consumer Data Protection Act (VCDPA), which applies to Virginia residents.

Under the VCDPA, Virginia residents have several important rights:

• The right to access their personal data that we have collected or processed.
• The right to request that we delete their personal data.
• The right to correct inaccurate personal data.
• The right to opt-out of processing of personal data for targeted advertising, sale of personal data and profiling.

Sale of your personal data: We do not sell personal data as the VCDPA defines the term “sale.”

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

Canadian Residents:

For Canadian residents, we are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA’s ten fair information principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

Under PIPEDA, you have certain rights regarding your personal information. These rights include:

1.  Right to Access: You have the right to access the personal information we hold about you and request a copy of that information.

2.  Right to Rectification: If you believe that any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.

3.  Right to Withdraw Consent: If you have previously provided your consent for the collection, use, or disclosure of your personal information, you have the right to withdraw that consent at any time. Please note that withdrawing your consent may affect our ability to provide certain services to you.

4.  Right to Object: You have the right to object to the collection, use, or disclosure of your personal information for certain purposes, such as direct marketing.

5.  Right to Erasure: In certain circumstances, you have the right to request the deletion or removal of your personal information from our records.

6.  Right to Data Portability: You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another organization.

To exercise any of these rights, please email us at [email protected]. We may ask for additional info to verify that you're the owner of the data.

Please note that there may be limitations on these rights as set out in PIPEDA or other applicable laws.

Brazilian Residents:

We are regulated under the Lei Geral de Proteção de Dados (“LGPD”), which applies to Brazilian residents.

Under the LGPD, Brazilian residents have several important rights:

• Know when we use your personal data
• Access your personal data, correct any errors, or delete your personal data
• Anonymize, block, or delete data that we don’t need or are not processing in compliance with the LGPD
• Request we transfer your data to another provider
• Be informed about who we share your data with
• Be informed about your ability to deny consent and any consequences
• To revoke your consent

These rights apply to any personal data collected or processed in Brazil, as well as any personal data processed for the purpose of providing goods or services in Brazil.

If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.

11.  How do we protect personal data?

We have taken steps and put security measures in place to prevent the accidental loss or misuse of personal data.

For example, we limit access to those who have a genuine business need. Those processing your information will do so only in an authorized manner.

We use other security measures, as well, such as Anti-virus software, encryption, firewalls, multi-factor authentication and role-based access controls.

We also have procedures in place to deal with any suspected data security breach. We’ll notify you and any applicable regulator of a suspected data security breach when legally required.