Privacy Policy

Effective Date: October 17, 2026 Last Updated: October 17, 2026
Publisher: Red Warden Studios LLC Governing State: Kentucky, United States
Contact for privacy requests: support@redwardenstudios.com

Red Warden Studios LLC ("Red Warden," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we do and do not collect in connection with the redwardenstudios.com website (the "Site"), purchases of our products, and our products themselves (each a "Product"), and how that information is handled. It is written to apply globally, including to visitors in the EU/UK and California.

By using the Site or a Product, you agree to the practices described in this Policy.

1. Our Privacy-First Design

We deliberately collect as little information about you as possible. The Site is an informational and checkout-referral site with an optional free account. You can read every page and buy every product without one. Creating an account takes an email address and no password — we sign you in with a single-use link instead. Section 4 sets out exactly what an account holds.

Our Products are built to keep your content on your own device wherever possible. Exactly what each Product handles is listed in that Product's Add-on (see Section 2).

2. What Each Product Handles

Per-product data handling is listed in that Product's Add-on: what stays on your device, what is sent and to whom (including any third-party services or API keys you supply), whether the Product contacts us or checks for updates, any reporting feature, and how long anything we receive is kept. If a Product's Add-on says it handles data differently from this master, the Add-on controls for that Product only. Where an Add-on says a Product has no account requirement, a Site account is never needed to use it; a Site account is only ever about the Site.

3. Information We Collect Through Purchases

Checkout on the Site is handled by our third-party merchant of record (Creem (creem.io)), which processes your payment and collects the billing information necessary to complete the transaction (such as your name, email address, billing location, and payment method details) under its own privacy policy. From that process we receive limited order information — typically your email address, order identifier, and country/tax region — which we use to:

Deliver your license key;
Provide customer support and handle activation or delivery issues;
Keep records of the transaction for accounting, tax, and legal-compliance purposes; and
Detect and prevent fraud and abuse.

Products sold through a third-party store (for example, Google Play) are handled entirely by that store under its own privacy policy. We typically do not receive your email address or payment details from a store purchase; the store gives us order and sales reporting (such as order identifiers, country or tax region, and counts of installs, refunds, ratings and reviews), which we use for accounting, tax, fraud prevention, and to understand how a Product is performing. If you contact us for support and choose to give us your email address, we hold it for that purpose only. The Product's Add-on says whether this applies.

Red Warden does not receive or store your full payment card details. Payment data you enter at checkout is governed by the privacy policy of our merchant of record or the store, whichever applies to your purchase. We encourage you to review it.

4. Information We Collect Through the Website

Contact form. If you contact us through the Site, we collect the information you provide — typically your name, email address, inquiry type, and message — solely to respond to your inquiry. Our contact form is processed by Formspree, a third-party form-handling service that receives your submission and forwards it to us. Formspree processes this data on our behalf under its own privacy policy.
Server and hosting logs. Our website host may automatically record standard technical log data (such as IP address, browser type, and pages requested) for security, diagnostics, and abuse prevention. This is standard practice for virtually all websites.
Site accounts. The Site offers a free, optional account. If you create one we hold your email address, an optional display name, the avatar you pick, your account tier, and the dates your account was created, verified and last used. There is no password — not stored, not hashed, not anywhere. You sign in through a single-use link we email you, which expires in fifteen minutes and is stored only as an irreversible hash, so a copy of our database contains no working login link. We record the IP address that asked for a link, solely to rate-limit abuse of the sign-in form, and delete it seven days later.
What an account stores. Items you save with the Shield (what you saved, its title and link, and whether you asked to be notified about it); a link between your email and your purchase record at our payment processor, so the Site can show you what you already own; and, if you use the Mythril Arcade, the handle you choose and the scores you set. Your arcade handle is shown publicly on the leaderboards — that is what it is for, so pick it accordingly. You can play the arcade without an account at all: scores are held against an anonymous player id kept by your own browser, and you can claim them into an account later, or never.

5. Cookies and Analytics

We aim to use the least tracking necessary, and we tell you plainly what is in use. Cookies and similar technologies on the Site fall into three categories:

(a) Strictly necessary. Cookies or local storage required for the Site to load and function securely. These are always active and do not require consent.

(b) Analytics / performance. We use our own cookieless website measurement, running on our own servers, to understand aggregate traffic — which pages are read, roughly how long for, how far down the page people get, and which sites and search or AI tools send visitors to us. It sets no cookie, stores no identifier on your device, and cannot follow you to any other website. We may additionally use a privacy-respecting third-party service such as Cloudflare Web Analytics, which is also cookieless, for country-level and page-speed reporting.

Because we set no identifier, we work out whether two page views came from the same person by combining your IP address and browser user-agent with a secret value that changes every day and turning the result into an irreversible code. The daily secret is permanently deleted after two days. From that point the stored records cannot be linked back to you or to each other — not by us, and not by anyone who obtained the data. A consequence worth stating plainly: we cannot recognise a returning visitor across days, and we have chosen that trade deliberately. We do not store your IP address, and we discard the query string of any address you arrive on. Records are deleted after 400 days.

Turning it off. There are two ways, and both stop the measurement entirely rather than merely anonymising it further. First, we honour Do Not Track and Global Privacy Control: if either is switched on in your browser, this Site sends no measurement at all. It has worked this way since 12 August 2026. Second, you can visit redwardenstudios.com/?rws-metrics=off to switch measurement off for that browser. That second option is the only circumstance in which our measurement writes anything to your device — a single marker recording your choice, holding no identifier, readable by this Site alone and by no other. Visiting /?rws-metrics=on removes it. The setting belongs to one browser on one device, so it would need repeating on a phone.

If we later adopt a cookie-based analytics service (such as Google Analytics 4), we will disclose it here and, where required, request your consent through a cookie-consent banner before it runs.

(c) Advertising. We do not currently use advertising or cross-site tracking cookies. If in the future we introduce advertising technologies, we will update this Policy, identify the providers, and — where required by law — obtain your consent through a cookie-consent banner before any advertising cookies are set.

Where a cookie-consent banner is presented, you can accept or decline the non-essential categories and change your choice at any time. Because our current analytics are cookieless and we run no advertising trackers, at present there is nothing non-essential to consent to.

A Cookie preferences control is available in the footer of every page. Opening it shows each category, whether anything in that category is currently in use, and lets you set or change your choice. Your choice is stored in a first-party cookie on this site for twelve months and is never shared. If we later add a category, or change what an existing one covers, we will ask again rather than carry your previous answer over.

6. How We Use Information

We use the limited information described above only to:

Fulfill and support your purchase (deliver license keys and provide customer support);
Respond to inquiries you send us;
Operate, secure, and improve the Site;
Comply with legal, tax, and accounting obligations; and
Detect, prevent, and address fraud, abuse, or security issues.

We do not sell your personal information, and we do not use your information for third-party advertising.

We share information only with:

Our payment processors (our merchant of record, and any third-party store a Product is sold through) — to process payments and deliver licenses;
Our form processor (Formspree) — to receive and forward contact-form messages;
Other providers named in a Product's Add-on (for example, a diagnostic endpoint provider for a reporting feature you choose to use);
Service providers who help us operate (for example, our website hosting and business email providers), bound to handle data only on our behalf;
Authorities or third parties where required by law, to enforce our agreements, or to protect the rights, safety, and property of Red Warden or others; and
A successor entity in connection with a merger, acquisition, or sale of assets, consistent with this Policy.

8. Data Retention

We retain the limited order and contact information described above only as long as necessary for the purposes set out in this Policy — for example, to provide support, honor your license, and meet tax and legal-record obligations — after which it is deleted or anonymized.

Account information is kept for as long as your account exists. Sign-in links, and the IP address recorded when one was requested, are deleted seven days after the link expires. If you ask us to close your account we delete it, together with your saved items, your purchase link and your arcade handle; scores already posted to a closed leaderboard season stay on the board under that handle, because a historical result that changes retroactively is not a record of anything.

Retention for anything a Product sends us is stated in that Product's Add-on. Because your content otherwise remains on your own device, you control its retention and deletion directly.

9. Your Privacy Rights

EU / UK residents (GDPR). You have the right to access the personal data we hold about you, and to request its correction, deletion, or portability; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. Our lawful bases are performance of a contract (fulfilling your purchase), our legitimate interests (operating and securing the Site and preventing fraud), and consent (where a cookie banner applies, and where you choose to send us information through a Product feature). You may also lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA). You have the right to know, access, delete, and correct the personal information we hold, and to be free from discrimination for exercising these rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law — so there is no "Do Not Sell or Share My Personal Information" action required, though we honor these rights regardless.

Because most of your data never leaves your device, many of these rights you can exercise yourself directly within the Product. For any personal information we do hold — such as your account and the items saved in it, purchase records, contact-form messages, or anything you chose to send us through a Product — submit a request by emailing support@redwardenstudios.com, and we will respond as required by applicable law.

10. Children's Privacy

The Site is not directed to minors, and we do not knowingly collect personal information from anyone under 18. The intended audience of each Product is stated in its Add-on. If you believe a minor has provided us personal information, contact us at support@redwardenstudios.com and we will delete it.

11. International Users

Red Warden Studios LLC is based in the United States. If you access a Product or the Site from outside the United States, any limited information we handle may be processed in the United States or in the countries where our service providers operate. Third-party services you connect to, our merchant of record, and our other processors may process data in their own respective locations under their own policies.

12. Security

We implement reasonable technical and organizational measures to protect the limited information we handle. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, where appropriate, provide additional notice. Your continued use of a Product or the Site after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions about this Privacy Policy or your information, contact:

Red Warden Studios LLC, United States, support@redwardenstudios.com