Privacy at Super Evil Megacorp

Overview

At Super Evil Megacorp (SEMC), we take Privacy seriously. Our goal with every game we make is to only collect information that is necessary to run the game and facilitate our relationship with our players. As a general rule we only collect the following information:

• IP Address - so we can ensure you are connecting to the closest server to you for an optimal play experience
• Email addresses - by opt-in, so we can communicate with you
• Usernames / Handles - these are entered by you so you can be identified in game by other players (if you choose to play multiplayer) or to provide customer support
• In-game metrics - so we can optimize the player's experience and fix bugs or issues that we find
• Website analytics - to understand who is visiting our websites so we can create a better experience for you

At no time do we sell the information we collect to any third party and all of this information is used purely for internal purposes.

For a more detailed breakdown of what we collect, the purpose of that collection, and the legal basis we rely on to collect that data, please read our Privacy Policy.

Your Rights and How to Exercise Them

As part of our commitment to protecting your private data, we fully comply with the following Data Privacy and Protection Laws and Regulations:

• GDPR (General Data Protection Regulations) - both for the EU and the UK
• CCPA (California Consumer Privacy Act)
• COPPA (Children's Online Privacy Protection Rule)

In addition to the above, we also are a participant in the EU-US and UK-US Data Privacy Framework.

For all of these laws you are afforded specific rights that relate to your Private Data (also known as Personally Identifiable Information or PII). At SEMC, we work hard to ensure that you are able to exercise your rights to your Private Data. While these laws don't apply to everyone that plays our games or interacts with our websites, we do allow everyone to exercise these right regardless of your location. You specifically can do the following:

• Right to be Informed / Know (GDPR / CCPA / COPPA)
  • This right allows you to know what personal information we are collecting from you, why we are collecting it, and our legal basis to collect this information.
  • You can find all of this in our Privacy Policy.
• Right of Access (GDPR)
  • This right allows you to ask what personal information of yours we have, and what are we doing with it.
  • To request this, please file a ticket and select Privacy request or email us at [e-mail]
• Right of Rectification / to Correct (GDPR / CCPA)
  • This right allows you to correct or update any personal information we have on you.
  • To request this, please file a ticket and select Privacy request or email us at [e-mail]
• Right to Object to Processing (GDPR)
  • This right allows you to object to the processing of your personal data at any time in certain situations. This will depend on the purpose and lawful basis of that processing.
  • To request this, please file a ticket and select Privacy request or email us at [e-mail]
• Rights in Relation to Automated Decision Making and Profiling (GDPR)
  • This right is related to the processing of your personal information via automated means and is generally related to different types of profiling.
  • Super Evil Megacorp does NOT do any automated processing of Private Data. Given that, this specific right does not apply.
• Right to be Forgotten / Delete (GDPR / CCPA / COPPA)
  • This right allows you to request that we delete any and all Private Data we have for you.
  • To request this, please file a ticket and select Privacy request or email us at [e-mail]
• Right to Data Portability (GDPR)
  • This right allows you to request that we provide data to you in a structured, commonly used, and machine-readable format. It however is restricted to Private Data that is Processed by Automatic means.
  • Super Evil Megacorp does NOT do any automated processing of Private Data. Given that, this specific right does not apply.
• Right to Restrict Processing (GDPR)
  • This right allows you to ask us to restrict the processing of your private data.
  • Because SEMC only gathers the information necessary to facilitate our relationship to you or to run our games, a request to restrict processing will have the same effect as a request to delete your private data. Given that, if you wish to request this, we will instead inform you that this means we have to delete your data and confirm that this is what you want us to do.
• Right to Opt Out (CCPA / COPPA)
  • You have the right to opt out of the sale of your information to third parties.
  • To request this, please file a ticket and select Privacy request or email us at [e-mail]
• Right to Non-Discrimination (CCPA)
  • This right ensures that you won't be discriminated against for exercising your privacy rights.
  • SEMC affirms that we will not retaliate against anyone who exercises their Privacy Rights.
• Right to Limit (CCPA)
  • This right allows you to request that processing of your sensitive personal information for limited purposes.
  • SEMC does not collect any sensitive personal information from our players. Additionally, you can request that we restrict processing of your data as noted in the Right to Restrict Processing (GDPR) right above.

Other requirements that SEMC complies with:

• Parental Consent - acquire consent from parents before collecting, processing or disclosing their child's private information.
  • SEMC only collects information from a child to provide support for the internal operations of our products. As such we rely on the exemption provided by COPPA for Parental Consent.
• Privacy Notices - provide clear and easy to understand notice detailing the information practices we use when collecting private data from children (if approved by the parent).
  • SEMC provides a notice in our games the first time the game is launched. This popup generally describes the kinds of information we collect and why. Parents consent to the collection of data or opt-out on their child's behalf.
• Parental Control - allow the parent to withdraw consent, or otherwise exercise rights with respect to their child's information.
  • Consent for data collection can be granted or withdrawn at any time in one of three ways:
    • Going to the settings menu for the game and scrolling to the bottom. You can then opt-in or opt-out of data collection in that game.
    • By filing a ticket and selecting Privacy Request
    • By emailing us at [e-mail]
• Parental Gate - restrict a child's access to certain areas within the app
  • In cases where we need to restrict a child's access to certain features in the game (real money purchases, multiplayer, etc) we use an age gating mechanism to determine the age of a child. The only data stored from this age gate is whether or not the player is above or below the age of 16.
• Information Security - protect children's private information that is collected from unauthorized use or disclosure.
  • We have a comprehensive and industry standard Information Security Policy that restricts access to any private information to only those who need access to it to perform their duties. We also use industry standard techniques to guard our databases from a privacy breach including encryption methods, zero trust network solutions, and malware detection and remediation tools.