Privacy Policy
Last updated: April 16, 2026
Ship the Game ("we," "us," "our") operates shipthegame.com. This policy explains what data we collect, why, and what we do with it.
1. What we collect
Account data
When you sign up, we collect:
- Email address — for login, password resets, and transactional emails
- Username — displayed in the app
- Password — stored as a one-way hash (argon2); we cannot read it
If you sign up via Discord or Google OAuth, we receive your email and display name from that provider. We do not access your contacts, messages, or other account data.
Project & progress data
When you use the guide, we store:
- Your project questionnaire answers (engine, game type, skill level, etc.)
- Checklist progress (which items you've ticked off)
- Tool saves (data you explicitly save in our tools)
Payment data
Payments are processed by Stripe. We never see, store, or have access to your credit card number. Stripe handles all payment data under their own privacy policy. We receive only: transaction confirmation, amount paid, and your email.
Automatically collected data
- Server logs — IP address, browser type, pages visited, timestamps. Standard web server logs retained for 30 days for security and debugging.
- Cookies — session cookie (required for login) and CSRF token (required for security). No advertising or tracking cookies.
2. What we do NOT collect
- We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts
- We do not sell, rent, or share your data with advertisers
- We do not send marketing emails (only transactional: verification, password reset)
- We do not track you across other websites
3. How we use your data
- To provide the service — rendering your personalised guide, saving progress, running tools
- To process payments — via Stripe for premium tier purchases
- To send transactional emails — account verification, password resets
- To fix bugs and prevent abuse — server logs help us diagnose errors and block spam
4. Cookies
We use two cookies, both essential:
| Cookie | Purpose | Duration |
|---|---|---|
sessionid | Keeps you logged in | 2 weeks |
csrftoken | Prevents cross-site request forgery | 1 year |
We do not use advertising cookies, analytics cookies, or third-party tracking cookies.
5. Third-party services
- Stripe — payment processing. Stripe Privacy Policy
- Cloudflare — CDN and DDoS protection. Cloudflare Privacy Policy
- Google Fonts — font delivery. Google may log font requests. Google Privacy Policy
We do not share your personal data with any of these services beyond what's required for them to function.
6. Data retention
- Account data — retained until you delete your account
- Project data & tool saves — retained until you delete them or your account
- Server logs — automatically deleted after 30 days
- Payment records — retained as required by tax and financial regulations
7. Your rights
You can:
- Access your data — your projects, progress, and saves are all visible in your account
- Delete your data — email [email protected] and we'll delete your account and all associated data within 48 hours
- Export your data — tool exports (JSON, engine files) are downloadable from each tool
- Correct your data — edit your email and username in account settings
If you're in the EU/EEA, you have additional rights under GDPR including the right to object to processing and the right to data portability. Contact us to exercise these rights.
8. Children
Ship the Game is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we'll delete it.
9. Changes
We may update this policy. Significant changes will be announced on the site. Continued use after changes constitutes acceptance.
10. Contact
For privacy questions: [email protected]