Privacy Policy

This policy explains what Sin of Angels collects when you sign in and play, why we collect it, and what control you have over it. We wrote it in plain language on purpose. No fine-print games. You run an outlaw club inside the game, but out here we play it straight with your data.

Sin of Angels is a browser-based strategy game at soa-game.com. This policy covers the public marketing pages and the game app you reach after you sign in. The game is made by CRIME Digital, our working studio name. No legal entity has been formed yet, so the controller and company details in this policy stay marked as placeholders until that is done. By using the site or the game, you agree to what is written here.

Last updated: [PLACEHOLDER: last-updated date]. When we change this policy, we update this date and, where the law requires it, we tell you directly.

What We Collect

We collect only what we need to run the game, take payment, and keep the servers honest. Here is the full list.

• Account and sign-in data. Sin of Angels uses Google sign-in to get you into the beta. When you sign in, Google shares a limited set of details with us, typically your name, email address, and a Google account identifier. We do not receive your Google password. [CONFIRM: exact Google OAuth scopes requested, e.g. name, email, profile ID.]
• Gameplay data. As you play, we store the state of your game and your account. That means your crew, your territory, your Cash, Guns, Narcotics, and Felonies, your match history, your settings, and the choices you make across rounds. This is what lets you leave a game and come back to it.
• Payment data. Sin of Angels is free to play during the limited release. A paid version comes later. If and when you pay, our third-party payment processor handles your card or billing details. We do not store full card numbers on our servers. We receive a record that a payment succeeded and limited billing information tied to that transaction. [PLACEHOLDER: payment processor name.]
• Device and technical data. When your browser loads the site, we automatically receive standard technical information, such as your IP address, browser type, device type, operating system, and the pages you view. We use this to serve the game, fight fraud and abuse, and diagnose problems.
• Cookies and analytics data. We use cookies and similar technologies to keep you signed in and to understand how the site is used. See the Cookies section below.

We do not ask for and do not want anything we do not need. We do not knowingly collect data from children. [CONFIRM: minimum age for accounts and any age-gate wording counsel wants.]

How We Use Your Data

We use what we collect for a short list of clear reasons.

• To create your account, sign you in, and keep you signed in.
• To run the game, save your progress, and sync your matches across your devices.
• To process any payment and confirm your access if you buy the paid version later.
• To keep the game safe, block fraud and cheating, and enforce our terms.
• To fix bugs, measure performance, and improve the game with analytics.
• To contact you about your account, your purchase, security, or important changes to the game or this policy.
• To meet our legal obligations and respond to lawful requests.

We do not sell your personal information. [CONFIRM: whether any analytics or advertising sharing could count as a "sale" or "share" under CCPA/CPRA; counsel to verify before this line ships.]

Third Parties We Share Data With

We keep the circle small. We share data only with the services that make the game work, and only the data they need to do their job.

• Google. We use Google sign-in for authentication. Your use of Google sign-in is also governed by Google's own privacy policy.
• Payment processor. Handles any payment and billing securely. [PLACEHOLDER: payment processor name.] Your payment is also governed by that processor's privacy policy.
• Analytics provider. Helps us understand how the site and game are used so we can improve them. [PLACEHOLDER: analytics provider name, e.g. Google Analytics or equivalent.]
• Cloudflare. We use Cloudflare to serve the site quickly and to protect it from attacks and abuse. Traffic to the game passes through Cloudflare's network.
• Hosting and infrastructure providers. The companies that host our servers and store our data on our behalf. [PLACEHOLDER: hosting provider name.]

We may also disclose data when the law requires it, to protect our rights and our players, or as part of a business transfer such as a merger or acquisition. We do not hand your data to anyone else to use for their own marketing.

Cookies and Similar Technologies

Cookies are small files your browser stores. We use them for a few specific jobs.

• Essential cookies. Keep you signed in and keep the game working. These cannot be turned off without breaking the site.
• Analytics cookies. Tell us, in aggregate, how players use the site so we can make it better.
• Preference cookies. Remember your settings so the game behaves the way you left it.

You can control or clear cookies in your browser settings. If you block essential cookies, parts of the game will not work. Where the law requires a cookie consent banner, we will show one and honor your choice. [CONFIRM: whether a cookie consent/CMP banner is required for the launch regions and which categories are opt-in.]

Your Privacy Rights

Depending on where you live, you have rights over your data, and we honor them.

• If you are in the EU, EEA, or UK (GDPR). You have the right to access your data, correct it, delete it, restrict or object to certain uses, and receive a copy in a portable format. You can also withdraw consent where we relied on it. Our legal bases for processing include performing our contract with you (running the game and your purchase), your consent (for example, non-essential cookies), and our legitimate interests (security, fraud prevention, and improving the game).
• If you are in California (CCPA/CPRA). You have the right to know what personal information we collect, to request that we delete it, to correct it, and to opt out of any "sale" or "sharing" of it. We do not sell your personal information. We will not discriminate against you for exercising these rights.
• Everyone. You can ask us to access, update, or delete your account data at any time.

To make a request, contact us using the details in the Contact section. We will verify your identity before we act, and we will respond within the time the law allows. [CONFIRM: response-window commitments and identity-verification steps counsel wants stated.]

Data Retention

We keep your data only as long as we have a reason to.

• We keep your account and gameplay data while your account is active.
• If you delete your account or ask us to remove your data, we delete or anonymize it, except for anything we must keep by law, such as tax and payment records tied to a purchase.
• We keep technical logs for a limited period for security and troubleshooting, then they age out.

[CONFIRM: exact retention periods per data type, especially payment/tax records and security logs, once counsel and the payment processor confirm requirements.]

How We Protect Your Data

We use reasonable technical and organizational measures to guard your data, including encryption in transit and access controls that limit who on our side can see what. No system is bulletproof, and we cannot promise perfect security, but we take it seriously and we design for it. If a breach ever affects your data, we will notify you and the authorities as the law requires.

Changes to This Policy

We may update this policy as the game grows, as we add features, or as the law changes. When we do, we update the date at the top. If the change is significant, we will give you clearer notice, such as an in-game message or an email. Your continued use of Sin of Angels after an update means you accept the revised policy.

Contact Us

Questions about your privacy, or want to exercise a right listed above? Reach us here.

• Email: [PLACEHOLDER: privacy contact email]
• Mailing address: [PLACEHOLDER: company legal name and mailing address. Working studio name is CRIME Digital; no legal entity formed yet.]

We read what comes in and we answer. That is the deal.