Skip to content
Craft Art Studio
Legal · Craft Art Studio

Privacy Policy

Last updated: 6 July 2026

Craft Art Studio ("Craft Art Studio", "we", "our", or "us") is an independent game studio based in Australia. We respect your privacy and are committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and other applicable privacy laws. This Privacy Policy explains what information we collect, how we use and share it, how we keep it secure, and the choices and rights you have. It applies to our website, storefront, and games (together, the "Services").

1. Information We Collect

We collect the following categories of information:

  • Account information — your name, email address, and password (stored only as a salted hash), created when you register.
  • Purchase & library data — the games you buy, your order history, entitlements, and (where relevant) recorded play time used to assess refund eligibility.
  • Payment information — processed securely by our payment provider (Stripe). We receive a confirmation and limited transaction details (such as the last four digits and card brand); we never see or store your full card number.
  • Technical & usage data — IP address, device and browser type, pages viewed, referring pages, and similar diagnostic data collected automatically when you use the Services.
  • Communications — messages, enquiries, bug reports, and feedback you send to us.

You do not have to provide your real identity for general browsing, but an account and payment details are required to purchase and access games.

2. How We Use Your Information

  • create and manage your account and game library;
  • process payments, purchases, and refunds;
  • deliver, license, and provide access to the games you own;
  • provide customer support and respond to your enquiries;
  • detect, prevent, and investigate fraud, abuse, and security incidents;
  • operate, maintain, analyze, and improve the Services;
  • send essential service messages (e.g. receipts, security alerts);
  • send optional marketing or newsletters where you have opted in;
  • comply with our legal obligations and enforce our Terms of Service.

3. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on: performance of our contract with you (to deliver purchased games and support); your consent (for optional marketing); our legitimate interests (to secure and improve the Services); and compliance with legal obligations (such as tax and record-keeping).

4. How We Share Your Information

We do not sell your personal information. We share it only with:

  • Service providers who help us operate the Services — including Stripe (payments), our hosting and database provider (Supabase), and analytics or email providers — under agreements that require them to protect your data.
  • App stores (Google Play, Apple App Store) if you download our games there; their handling of your data is governed by their own privacy policies.
  • Authorities or third parties where required by law, to protect our rights, or in connection with a business transfer (e.g. merger or acquisition).

5. Cookies & Similar Technologies

We use strictly necessary cookies and local storage to keep you signed in, remember preferences (such as your selected theme), and secure the Services. We may use limited analytics to understand aggregate usage. You can control cookies through your browser settings, though disabling some may affect functionality.

6. Data Retention

We keep your personal information only as long as necessary for the purposes described above — for example, while you have an account and as needed to maintain your game library, plus any period required for legal, tax, accounting, or dispute-resolution purposes. When no longer needed, we delete or anonymize it.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and restricted access. Payment data is handled by PCI-compliant providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and will notify you of any eligible data breach as required by law.

8. International Transfers

Some of our service providers may store or process data outside Australia. Where personal information is transferred overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable privacy laws.

9. Your Rights & Choices

  • access and request a copy of the personal information we hold about you;
  • ask us to correct inaccurate or out-of-date information;
  • request deletion of your account and associated data, subject to legal limits;
  • opt out of marketing at any time via the unsubscribe link or by contacting us;
  • object to or restrict certain processing, where applicable law provides that right.

To exercise any of these rights, email us at games@agentium.au. We may need to verify your identity before acting on a request.

10. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice through the Services. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

Questions, requests, or complaints about your privacy? Contact us at games@agentium.au. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).