Privacy Policy
Last Update: December 17, 2025 - Updated analytics/cookies details and clarified technical identifiers.
Survivor's Cove (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our game server, or make purchases through our Webstore. By using our Services, you agree to the practices described in this policy.
Some payment-related data is processed by our payment processor. Their privacy policy can be found here: https://paynow.gg/privacy-policy.
1. Information we collect
We may collect the following types of information:
1.1 Personal Information
- Steam Account Information: Steam ID (Steam64 ID), username, and avatar when you sign in through Steam. This is used to authenticate you and to link your website account to your in-game identity.
- Discord Account Information: Only your Discord user ID is recorded when you link your Discord account.
- Purchase Information: Purchase history and associated identifiers (e.g., Order ID, Subscription ID) and fulfillment-related metadata. Payment details and billing information are processed by our payment processor (PayNow.gg) and its partners according to their own privacy policy.
- Contact Information: Information you provide when contacting support, such as your name and email address.
1.2 Technical and Usage Information
- Technical Data: We may process technical information such as IP address, device/browser characteristics, and timestamps for purposes including security, fraud prevention, abuse prevention, debugging, and providing the Services.
- Approximate Location: We may derive approximate location (e.g., country/region) from IP address for analytics and operational purposes. Where feasible, we avoid storing raw IP addresses in analytics event data; however, IP addresses may be processed transiently to determine approximate location.
- Website Usage Data: We collect usage data such as pages viewed, feature usage, and navigation flow to improve the Services. Analytics is designed to be anonymous or pseudonymous and is not intended to directly identify individual users.
- Game Server Data: In-game activities related to the Services (such as redeemed consumables and entitlements associated with your account), and operational logs needed to provide and secure gameplay.
1.3 Cookies and Analytics Technologies
We use cookies and similar technologies for the following purposes:
- Essential cookies: Required to operate the website and authenticate users (e.g., maintaining your session). These cannot be disabled.
- Analytics cookies (optional): Used to understand how users interact with our website and improve our Services. Analytics cookies are only used if you explicitly consent.
If you reject analytics cookies, we may still collect limited, anonymous, cookieless usage statistics that are not intended to identify you and are not persisted across sessions in the same way as cookie-based analytics.
You can manage your analytics preferences at any time using the cookie preferences controls available on the website. You cannot disable essential cookies as they are necessary for the website to function.
2. How We Use Your Information
We may use your information to:
- Provide and manage our Services, including processing purchases and delivering digital goods and entitlements.
- Authenticate users and link website accounts to in-game identities.
- Verify your identity and prevent fraud, abuse, and other harmful activity.
- Improve our Services through analytics, performance monitoring, and user feedback.
- Communicate with you about updates, purchases, and support inquiries.
- Comply with legal obligations and enforce our Terms of Service.
2.1 Analytics and Measurement
We use privacy-focused analytics tools (such as PostHog) to understand how the website is used and to improve performance and user experience.
Analytics systems are deliberately isolated from our account and identity systems. We do not include direct identifiers such as Steam IDs (Steam64), Steam usernames, Discord IDs, email addresses, or payment processor identifiers in analytics events. When analytics identification is used, it relies on a pseudonymous internal identifier that cannot identify you without access to our internal systems.
Analytics behavior depends on your cookie preference:
- If you accept analytics cookies, analytics may use cookies to measure usage across sessions.
- If you reject analytics cookies, we may still measure limited, anonymous, cookieless usage statistics.
- You can withdraw or change your preference at any time using the cookie preferences controls.
3. How We Share Your Information
We do not sell your personal information. However, we may share your data with:
- Service Providers: Payment processors (e.g., PayNow.gg), hosting platforms, database providers, and analytics providers that help us operate and improve the Services.
- Payment Processing: Payment information and associated technical data (which may include IP address and anti-fraud signals) are collected and processed directly by our payment processor (PayNow.gg) and its partners according to their own privacy policy.
- Analytics Providers: We use analytics services (such as PostHog) to collect aggregated and pseudonymous usage statistics. These providers are not intended to receive information that directly identifies you (such as Steam IDs or usernames).
- Legal Authorities: When required to comply with legal obligations or respond to lawful requests.
- Other Users: Limited information (e.g., in-game username) may be visible to other players in the game server as part of normal gameplay.
4. Your Rights
Depending on your location, you may have certain rights regarding your personal data. We take these rights seriously and aim to respond to all legitimate requests in a reasonable and proportionate manner.
Some rights may be fulfilled by alternative means (such as account deletion) where providing access, rectification, or restriction would require disproportionate technical effort, particularly for historical or pseudonymous analytics data.
4.1 Rights Under the GDPR (for users in the EU/EEA)
- Access: You may request a copy of the personal data we hold about you that directly identifies you (such as your account profile and purchase history). Please allow up to 30 days for processing such requests.
- Rectification: You may correct inaccurate personal data in your account profile where possible. We do not modify historical analytics events, which are pseudonymous, aggregated, and not used to make decisions about individual users. If you believe your data should no longer be processed, you may request deletion.
- Erasure: You may request deletion of your personal data by requesting account deletion on the Account page. Certain information may be retained as required to comply with legal obligations (such as transaction records). If you wish to access your data, please submit a request before deleting your account.
- Restriction of Processing: You may restrict or limit analytics processing by withdrawing consent using the cookie preferences controls. This affects future analytics processing.
- Data Portability: You may request a copy of your personal data in a structured, commonly used format. This typically includes account and purchase data that you have provided to us directly.
- Objection: You may object to processing that is based on consent (such as analytics) by withdrawing consent via the cookie preferences controls.
- Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal applies going forward and does not affect the lawfulness of processing that occurred prior to withdrawal.
4.2 Rights Under the CCPA (for California residents)
- Access: You may request information about the categories of personal information we collect, use, and share.
- Deletion: You may request deletion of your personal information, subject to applicable exceptions.
- Opt-Out of Sale: We do not sell personal information. Therefore, this right is not applicable.
To exercise your rights, contact us at support@survivorscove.com. We may need to verify your identity before fulfilling your request.
You may also delete your account directly from the Account page. To comply with legal and regulatory obligations, certain information (such as transaction records) may be retained after account deletion. If you wish to access your data, please submit a request before deleting your account.
5. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy, to operate the Services, or to comply with legal obligations. When data is no longer needed, we securely delete or anonymize it. Certain records (such as purchase history) may be retained to meet legal, tax, accounting, and anti-fraud requirements.
6. Data Security
We implement reasonable and industry-standard measures to protect your information, including encryption, access controls, and secure authentication. However, no system is completely secure, and we cannot guarantee absolute security.
Additionally, much of the data we collect is handled by third-party service providers with their own security practices and certifications. You can learn more about their privacy policies on their respective websites:
7. International Data Transfers
Your data may be processed or stored outside your country of residence, including in Canada and the United States. Where applicable, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) to help protect personal data during international transfers.
Survivor's Cove relies on trusted third-party service providers (including PayNow.gg, Firebase, and analytics providers) to process data. These providers may process data in other countries and apply their own security and privacy safeguards.
Specifically for PostHog, data is stored in the European Union (EU) to help ensure compliance with the GDPR. Data is stored in Frankfurt, Germany, and processed in the EU.
8. Children's Privacy
Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us, and we will take steps to delete the information.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated effective date. Continued use of our Services after changes are posted constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at support@survivorscove.com.
This Privacy Policy is intended to provide transparency about how we handle data and the choices available to you. Thank you for trusting Survivor's Cove.
