Privacy Policy
Last Modified on June 12, 2026
What’s In This Privacy Policy?
This Privacy Policy explains:
- What information we collect about you
- How we use that information
- What information we share with others
- Your rights and choices about your information
What Does This Privacy Policy Cover?
We are Gwythdarian LLC (“Gwythdarian”, “we”, or “us”). This Privacy Policy applies to StariumXCV (the “Game”) and the Website it is hosted on. (Together, we’ll refer to these as the “Service”) By using the Service, you agree to the terms of this Privacy Policy. Please read our Terms of Service as well, for general guidance about your use of the Service. Except as otherwise expressly agreed, this Privacy Policy and our Terms of Service are the complete agreement between you and Gwythdarian.
What Information Do We Collect?
We collect and process different types of personal data depending on how you interact with our Service. We are sensitive to our User’s privacy and security. To this end we have created our products and Services with a Light Touch, requiring only an email address to identify an account holder. Here’s an overview of the information we collect:
Contact Information
When you interact with us such as when you create an account on our website, we collect your email address.
Account and Profile Information
When you create or update an account with us, we collect certain information to manage your account, including your account creation date, account status, display name/profile name, email address, login history, password (hashed), and username. We use this information to authenticate identity and secure access, create and manage your user account, enable multiplayer features, enable social features, and enforce platform rules and security measures.
Device and Behavior Information
We automatically collect certain technical and analytic information from you and your device when you use our Service, including your device specifications (device type, model, operating system, browser), gameplay statistics (progression, engagement, retention), network data (IP address, connection info), and usage patterns (features accessed, time spent, navigation). We use this information to analyze user behavior and preferences, develop new features, ensure Service compatibility and performance, improve design and user experience, prevent fraud and abuse, and troubleshoot technical issues.
- Technical Service Providers: We may share certain personal data with trusted service providers who help us operate and improve our Service, to analyze how our services are used, deliver content efficiently, enable real-time features, host our services and store your data securely, manage user authentication, and provide content delivery services.
- Business Service Providers: We work with certain business partners and service providers to assist with providing the Service to our users, such as to host the Game through Amazon Web Services and process payments through Polar.
- Payment Processors: We share data with our third-party payment processors partners to comply with financial regulations, detect suspicious transactions, handle chargebacks, handle payment disputes, maintain payment records, prevent credit card fraud, prevent fraudulent transactions, process international payments, process payments and transactions, process refunds, reconcile payments and accounts, validate billing information, and verify payment methods.
How Long Do We Keep Your Data?
We only keep your personal data as long as it’s required to provide you with the Service. Sometimes a longer period might be required by law. After that, we will delete your personal data within a reasonable time. Please note that we may retain some data, if necessary to:
- Resolve disputes
- Enforce our user agreements
- Follow any technical and legal requirements related to the Service
Children’s Privacy Rights
We don’t knowingly collect any personal data from children under the age of 13. We also don’t knowingly allow them to create accounts, sign up for newsletters, make purchases, or use the Service. We may also limit our personal data processing for EU users between 13 and 16. We take children’s privacy seriously and encourage parents to play an active role in their children’s online experience. If you have any concerns about your child’s personal data, please contact us at [email protected].
Cookies
Cookies are used for critical non-invasive actions of the Service. Check out our Cookie Policy:
We use session cookies solely to maintain your login state while using the Service. These cookies are strictly necessary for the Service to function and are automatically deleted when you close your browser. We do not use tracking, analytics, or advertising cookies. Because these cookies are not used, no consent is required under applicable law, but we want you to know they exist.
Your Rights and Choices
We believe in giving users control over their personal data. This section outlines your rights (some of which may be based on where you reside) and how to exercise them.
All Users
Regardless of your location, you have the right to:
- Request deletion of your personal data
- Opt out of marketing communications
- Access and update your Account information
- Manage notification preferences
If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional information to verify that you’re the owner of that data.
EU and UK Residents
We are regulated under the General Data Protection Regulation (GDPR), which applies across the European Union. We are responsible as a controller of personal data for GDPR purposes.
Additionally, UK residents have similar rights to the above under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For more information on your rights under the UK GDPR, you can visit the Information Commissioner's Office (ICO) website at www.ico.org.uk.
Legal Basis for processing your personal data
In accordance with the General Data Protection Regulation (GDPR) and UK data protection law, we process your personal data based on the following legal grounds:
- Consent: For personal data collected when you provide it to us directly, we may rely on your explicit consent. In these situations, you have the right to withdraw your consent at any time (see “How to Contact Us” below).
- Contractual Obligations: We process specific sets of your data to fulfill our contractual obligations to you. This encompasses actions like account creation, and general Service operations and delivery.
- Legitimate Interests: For certain data processing activities, we rely on our legitimate business interests. This includes activities like Service error correction, updates, and improvements, and ensuring a safe user environment.
- Legal Compliance: There are instances where we’re legally mandated to process your data. This could be due to regulatory requirements, legal requests, or for the prevention of fraud and illegal activities.
Your rights under GDPR and UK GDPR
Under the GDPR, EU and UK residents have several important rights:
- You can request a copy of your personal data
- You can ask us to correct that personal data, delete it, or request that we use it only for certain purposes.
- If you’ve consented to our processing, you can change your mind and ask us to stop using your personal data. For example, you can unsubscribe from our mailing list at any time – just click the link in each marketing email.
- In some circumstances, you can ask us not to use automated processing or profiling about you.
If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data. Also, in some cases where the law requires it, we may not be able to help with the above requests.
US Residents - State-Specific Privacy Rights
For residents of states with comprehensive privacy laws (including California, Virginia, Colorado, Connecticut, Utah, Texas, and Oregon), you may have additional rights, depending on your state’s law. These include:
Access and Control Rights
- Request a copy of your personal data
- Correct inaccurate personal information
- Request deletion of your personal data
- Receive your data in a portable format
Right to Opt Out of
- Targeted advertising
- Sale of personal data
- Profiling and automated decision-making
Important Notes
In addition to the above rights, we also agree to the following with respect to US users’ personal data:
- We will not discriminate against you for exercising your rights
- We do not sell personal data as defined by state privacy laws
- We do not engage in automated decision-making that produces legal effects
- We protect sensitive personal data with additional safeguards
California Resident Rights
In addition to the above rights, for California residents under the California Consumer Privacy Act (CCPA), you have the right to designate an authorized agent to make requests on your behalf. If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.
Canadian Residents
For Canadian residents, we are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA’s ten fair information principles include accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance. Under PIPEDA, you have certain rights regarding your personal information. These rights include:
- Right to Access: You have the right to access the personal information we hold about you and request a copy of that information.
- Right to Rectification: If you believe that any of the personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
- Right to Withdraw Consent: If you have previously provided your consent for the collection, use, or disclosure of your personal information, you have the right to withdraw that consent at any time. Please note that withdrawing your consent may affect our ability to provide certain services to you.
- Right to Object: You have the right to object to the collection, use, or disclosure of your personal information for certain purposes, such as direct marketing.
- Right to Erasure: In certain circumstances, you have the right to request the deletion or removal of your personal information from our records.
- Right to Data Portability: You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another organization.
If you would like to exercise any of those rights, please email us at [email protected]. We will respond to your request or inquiry within a reasonable timeframe and in accordance with applicable laws. We may ask for additional info to verify that you’re the owner of that data. Please note that there may be limitations on these rights as set out in PIPEDA or other applicable laws.
Brazilian Residents
We are regulated under the Lei Geral de Proteção de Dados (“LGPD”), which applies to Brazilian residents. Under the LGPD, Brazilian residents have several important rights:
- Know when we use your personal data
- Access your personal data, correct any errors, or delete your personal data
- Anonymize, block, or delete data that we don’t need or are not processing in compliance with the LGPD
- Request we transfer your data to another provider
- Be informed about who we share your data with
- Be informed about your ability to deny consent and any consequences
- To revoke your consent
These rights apply to any personal data collected or processed in Brazil, as well as any personal data processed for the purpose of providing goods or services in Brazil. If you would like to exercise any of those rights, please email us at [email protected]. We may ask for additional info to verify that you’re the owner of that data.
International Data Transfers
Our headquarters is in the United States. Our Services are hosted by Amazon Web Services (AWS) which is based in the United States. Personal data of EEAA Users is transferred to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission ensuring adequate protection of your data. No matter where you live, by using the Service you consent to the processing and transfer of your personal data in and to the United States. This processing will be under the privacy policies of third parties that we share personal data with. If you would like more information, please contact us (see “How to contact us” below).
Security Measures
In general, our best security measure is simply to minimize the amount of data that we collect from our Users as a matter of policy. We avoid collecting any data from Users whenever we can.
Where we do have to collect data from our Users, we have taken steps and put security measures in place to prevent the accidental loss or misuse of personal data. For example, we limit access to those who have a genuine business need. Those processing your information will do so only in an authorized manner. We use other security measures, as well:
- Anti-virus software
- Encryption at rest
- Encryption in transit
- Firewall
- Role-based access controls
Lastly, we have procedures in place to deal with any suspected data security breach. We’ll notify you and any applicable regulator of a suspected data security breach when legally required.
Resolving Disputes
We hope that we can resolve any questions or concerns you raise about our use of your personal data. Please contact us at [email protected] to let us know if you have questions or concerns. We will do our best to resolve the issue. For EU residents, the GDPR also gives you the right to lodge a complaint with a supervisory authority. You may do this in the EEA state where you live, work, or where any alleged infringement occurred.
Changes to This Privacy Policy
We last updated this Privacy Policy on June 12, 2026.
We may make further updates from time to time, which will be reflected in the latest version posted on the Service. For major changes, if we have your email address on file, we will inform you via email. Otherwise, we will post a message on the Service about the change.
Contact Us
Please contact us if you have any questions about this Privacy Policy or your personal data. You can do so using the following contact info:
- Email: [email protected]
- Postal Mail: 1887 Holton Rd. STE D PMB 220, Muskegon, MI 49445
