Privacy policy
Updated on 29 October 2026
Who is responsible
The Stingtail Games studio. This policy covers the stingtail.com site, your Stingtail account — one for every game of the studio — and Stingtail Play, the app you sign in with and install and start the games from.
What a game itself keeps is explained by its own policy: for Rendwar, rendwar.com/legal/privacy.
What we keep
Your account: your account name, email address and a one-way hash of your password — we never see the password itself. If you sign in through Steam, your SteamID. And your game licences and purchases: what and when.
Security records: the network addresses and times of sign-ins, of codes sent to you and of requests to our servers, kept to protect your account from takeover and our services from abuse.
Stingtail Play tells the server its version and your system so it can update itself and the games, and downloads their files from our server. It keeps your sign-in in your computer’s own password store (Keychain, Windows Credential Manager). It reads none of your other files or programs — only the installed game’s folder.
Email: the confirmation codes and service letters we send you, and whether they were delivered.
On the site, only what you type into the brief form: your name, email, company, project type, budget, timeline and description. To filter out spam the server briefly sees your IP address and country; it does not keep them.
Why
To run your account, install, update and start the games, keep your account and our services secure, answer your letters and briefs, and meet our legal obligations.
On what grounds: our agreement with you (the terms of use), our legitimate interest in keeping the services secure, your consent when you send a brief, and the law where purchases must be recorded. We do not sell your data and do not use it for advertising.
Who else sees it
Only the services that help us run things, each for its own task: our hosting provider, whose servers hold the accounts and the game files; Cloudflare, which delivers and protects our sites and forwards letters to our addresses to our Google mailbox; Resend, which delivers our email; Steam, if you link it; and our payment partners when you buy something. Card details are handled by the payment partner; we never see them.
Cloudflare and Resend are US companies; data reaches them with the safeguards their data processing agreements provide.
We do not sell or hand your data to anyone else.
How long
Account data is kept while the account exists. Security and email records for up to 90 days. Briefs and correspondence while the conversation or the work goes on and for up to two years after it.
When you close your account, we delete or anonymise your data within 30 days, except what the law requires us to keep longer, such as purchase records.
Cookies
The site sets one cookie, with the language you chose. No advertising or tracking cookies. Stingtail Play uses no cookies.
Your rights
You can find out what data we hold, get a copy of it, correct it, delete it, object to how we use it or withdraw your consent. For your account, write from its address to [email protected]; about a brief, to [email protected].
If you believe we have breached your rights, you can complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority of your country.
Changes
When this policy changes in a way that matters, we will say so on the site, in Stingtail Play or by email.