1. Who is responsible
RooksBiz provides Station Noir and is the data controller for the personal information processed to operate the game. This notice describes that processing. Paddle and Google also process information under their own privacy notices when providing their respective services.
2. Information and purposes
- Account information: email address, username, account identifier, authentication credentials and session information are used to create accounts, sign you in, recover access and associate game records with you. If you use a supported social sign-in provider, we receive the account information needed for sign-in.
- Game and reward records: case identifiers, solve times, wrong guesses, points, daily bonus claims, reward references and case unlocks are used to deliver the game, maintain balances, prevent duplicate rewards and display leaderboard results. Your username and solve times may be visible to other visitors on the public leaderboard.
- Purchase records: order and transaction identifiers, selected case, account identifier and payment status are used to verify orders and grant access. Paddle handles payment details; Station Noir does not collect or store full payment card numbers.
- Technical and advertising information: IP address, browser/device information, session identifiers, error reports and request logs may be processed to deliver and secure the site and diagnose problems. Google advertising services may process cookies, device identifiers and ad interaction data to deliver, measure and protect ads.
- Support correspondence: information you provide when seeking assistance is used to respond and resolve requests.
3. Legal bases
Where data-protection law requires a legal basis, we rely on performance of our contract for account access, gameplay and case delivery; legitimate interests for security, fraud prevention, operational diagnostics and responding to requests; legal obligations for required transaction records; and consent where required for non-essential cookies or personalized advertising. You may withdraw consent without affecting processing that occurred before withdrawal.
4. Sharing information
We share necessary information with hosting, authentication, database and operational service providers, including Lovable Cloud, to run and secure Station Noir. Public leaderboard information is visible to other visitors.
Paddle is our Merchant of Record and receives information necessary for product sales, payments, tax compliance, invoicing, order support and refunds. See Paddle’s Privacy Policy.
Google receives information through its advertising services, including AdSense and rewarded ads when available. See Google’s Privacy Policy and how Google uses information from partner sites. Information may also be shared with professional legal or accounting advisers and public authorities where necessary or required by law.
5. Cookies and browser storage
Essential browser storage and session technologies keep you signed in and support account security and checkout. Google and Paddle may use their own cookies or similar technologies. Advertising cookies and identifiers may support ad delivery, measurement and personalization. Operational usage information may be used to diagnose and improve service reliability.
You can manage or delete cookies and site storage through your browser settings, although doing so may sign you out or interrupt checkout. Manage Google advertising preferences through My Ad Center. Where a consent choice is presented, you can use it to manage non-essential processing. Browser controls and this notice do not replace any consent that is required by law.
6. Retention
Account and game records are retained while needed to provide your account, earned rewards and continuing case access. We retain order and security records as necessary for legal obligations, dispute resolution and fraud prevention. Information is deleted or anonymized when it is no longer needed for those purposes, subject to required retention and backup cycles.
7. Security and international processing
We use appropriate technical and organizational measures, including encrypted connections and access controls, to protect personal information. No online service can guarantee absolute security.
Our providers may process information in countries other than yours. Where UK or EEA transfer rules apply, transfers must use an applicable adequacy decision or appropriate safeguards, such as Standard Contractual Clauses.
8. Your rights
Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent where processing is based on consent. You may also complain to your local data-protection authority. For UK/EEA requests, the normal response period is one month, with lawful extensions where necessary.
Requests concerning RooksBiz’s account or game records should be sent to Lquiroz777@gmail.com, identifying the account concerned. We may need to verify your identity before acting. For information controlled by Paddle, including payment-related privacy requests, use the contact methods in Paddle’s Privacy Policy or visit paddle.net. For Google-controlled advertising data, use Google’s privacy controls and contact channels.
9. Updates
We may update this notice when our practices or legal requirements change. The effective date above identifies the current version, and material changes will be communicated through the service as appropriate.
10. Contact
Write to RooksBiz at Lquiroz777@gmail.com for privacy requests, or for help with a purchase that Paddle cannot resolve. Refunds are requested within 30 days of your order date — see our Refund Policy.