← Back to Manor

Privacy Policy

Last Updated: July 15, 2026

1. Who We Are (Data Controller)

Scarlet Chains is operated by ScarletGames, HIDDEN. For the purposes of the EU and UK General Data Protection Regulation (GDPR), the Operator is the data controller for the personal data described in this policy. You can reach us for any privacy matter through Support. We have not appointed a Data Protection Officer or an EU/UK representative; if we become required to do so, this policy will be updated with their contact details.

This Privacy Policy is incorporated into our Terms of Service.

2. Information We Collect

We collect information to run the game securely, process payments, and optimize your gameplay experience:

A. Information You Provide Voluntarily

• Account Details: When you register, we collect your username and email address. Your email is used only to send one-time login codes; we do not send marketing, newsletters, or other non-login emails.
• Payment Information: If you purchase virtual items, quests, or in-game currencies, our third-party payment processors (such as Stripe or PayPal) collect your billing details, including credit card numbers, billing addresses, and contact info. We do not store your credit card numbers on our servers.
• Support Requests: If you contact us for support, we collect the details you provide.
• Age Confirmation: The public home page stores a local browser confirmation when you choose to enter the adult game site. This is stored on your device as scarletchains.ageConfirmed.

B. Information Collected Automatically

• Gameplay Data: We record details about your in-game activities, including character progression, manor buildings, market transactions, recruitments, and general interactions.
• Log and Device Data: When you connect, our servers log your IP address, browser type, operating system, and referral URLs.
• Cookies and Local Storage: We use cookies and local browser storage (such as localStorage) to keep you logged in, remember adult-entry confirmation, and maintain session state.

3. Sensitive Data and Adult Content

Scarlet Chains is an adult game. Your account existence and your gameplay choices (for example, which storylines, encounters, or content you engage with) could reveal information about your sexual preferences or interests. In jurisdictions such as the EEA and UK, data concerning a person's sex life or sexual orientation is "special category" data. We process this data only because you explicitly choose to create an account and play an adult game, which constitutes your explicit consent; we never use it for advertising, never sell it, and share it only with the processors listed in Section 6 as needed to run the Service. Analytics identifiers are hashed or pseudonymized. You can withdraw consent at any time by deleting your account.

4. Analytics, Cookies, and Tracking

To better understand player behavior, improve game balance, and debug errors, we may use third-party analytics integrations where enabled:

• Google Analytics: We use Google Analytics to track site traffic, user demographics, and general engagement.
• Mixpanel: We use Mixpanel to track specific gameplay actions (e.g., unlocking a quest, completing an encounter, trading on the market).
• Data Collected by Analytics: The data transmitted includes hashed or anonymized user IDs, session activity, device type, region, and custom in-game events. No login codes or credit card details are ever shared.
• Current Status: Analytics integrations are only loaded where they are enabled in the current build. If they are not enabled, no analytics data is collected or transmitted.
• Consent and Controls: Where consent is required by law, analytics cookies and similar tracking are not activated until you have consented (for example via a consent banner). You can also use browser settings or supported opt-out tools to limit cookies and analytics tracking.

Cookies and Local Storage We Use

• Session / login token (localStorage) - keeps you signed in to the game. Strictly necessary; kept until you log out or it expires.
• scarletchains.ageConfirmed (localStorage, home page) - remembers that you confirmed adult status. Strictly necessary; kept until you clear your browser storage.
• Analytics cookies/identifiers (e.g., Google Analytics _ga, Mixpanel identifiers) - measure usage and gameplay events. Set only where analytics are enabled and, where required, only after consent.

5. How We Use Your Information

1. Account Management: To create, maintain, and secure your player profile.
2. Authentication Emails: To send one-time login codes only. We do not use your email address for marketing, newsletters, or other non-login messages.
3. Game Performance: To run and optimize game mechanics, database queries, and the player-driven market.
4. Payments: To facilitate and verify billing transactions for quests and in-game items.
5. Product Optimization: To analyze gameplay telemetry via Mixpanel and Google Analytics, helping us balance the economy and fix bugs.
6. Security: To detect and prevent multi-accounting, botting, hacking, or cheating.

Automated Decision-Making: We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. Automated anti-cheat or anti-fraud restrictions can be appealed through Support and are reviewed by a human.

6. How We Share Your Information

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We share personal data only in these cases:

• Service Providers (Processors): Companies that process data on our behalf under contract, limited to what they need to provide their service: cloud hosting and database providers (game servers and database), a transactional email provider (delivery of one-time login codes), payment processors (such as Stripe or PayPal), and analytics providers (Google Analytics, Mixpanel) where enabled.
• Legal Reasons: When we believe in good faith that disclosure is required by law, regulation, legal process, or enforceable governmental request, or is necessary to protect the rights, property, or safety of our players, the public, or the Service (including investigating fraud or abuse).
• Business Transfers: If the Service or the Operator is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction. We will notify you (for example via a notice on the website or upon login) before your data becomes subject to a different privacy policy.
• Other Players: Your username and public in-game activity (such as market listings or public chat) are visible to other players by the nature of a multiplayer game. Never put personal information in your username or public text.

7. Lawful Bases for Processing (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a Contract: To create your account, handle game logic, and process in-game purchases.
• Consent: When you voluntarily agree to analytics tracking (Google Analytics/Mixpanel) or cookies, and your explicit consent for the adult-content related data described in Section 3.
• Legitimate Interests: To secure our servers, prevent fraud, debug technical issues, and improve the game.
• Legal Obligations: To comply with accounting, tax, or other legal requirements.

8. Regional Privacy Rights

A. EEA, UK, and Swiss Residents (GDPR)

You have the following rights under the GDPR: Right to Access, Rectification, Erasure (Right to be Forgotten), Restriction of Processing, Data Portability, Object to processing, and to Withdraw Consent at any time. You may also lodge a complaint with your local data protection authority (in the UK, the ICO).

B. California Residents (CCPA/CPRA)

Under the CCPA/CPRA, you have the: Right to Know, Delete, Correct, Opt-Out of Sale/Share (we do not sell or share your personal data as defined by the CCPA), Right to Limit use of sensitive personal information, and the Right to Non-Discrimination.

In the last 12 months we have collected these categories of personal information: identifiers (username, email address, IP address); commercial information (purchase and transaction history); internet or network activity (gameplay data, log and device data); coarse geolocation (region inferred from IP address); and inferences (gameplay analytics). We do not collect biometric data, precise geolocation, or government identifiers. Sources, purposes, and recipients are described in Sections 2, 5, and 6. We honor the Global Privacy Control (GPC) signal where applicable. You may designate an authorized agent to submit requests on your behalf; we will require proof of the agent's authorization and will still verify your identity.

C. Other US States

Residents of other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising and sales (which we do not engage in). Use the same request path below.

Exercising Your Rights

To exercise privacy rights, request account deletion, report underage access, or ask data questions, submit a request through Support. Include the account username and the email address used for login so we can verify the request before acting on account data. Do not post private login codes or payment details. If we decline a request, you may appeal by replying through the same channel.

9. Data Retention Policy

• Account Data: Retained as long as your account remains active. If your account is inactive for more than 24 consecutive months, we reserve the right to delete your profile.
• Deletion Requests: When you request account deletion, account and gameplay data are deleted or anonymized within 30 days, except data we must keep for legal, billing, or security reasons.
• Payment & Transaction History: Retained for a minimum of 7 years to comply with financial audits and tax laws.
• Support Requests: Retained for up to 24 months after the request is resolved.
• Analytics Data: Retained per the analytics provider's configured retention period (at most 26 months), after which it is deleted or aggregated.
• Technical & Security Logs: Automatically cleared or anonymized within 90 days.
• Backup Data: Database backups are stored securely and overwritten within a 30-day rotation cycle; deleted accounts disappear from backups as the rotation completes.

10. International Data Transfers

Scarlet Chains is operated globally, and your personal data may be transferred to, stored, and processed in countries outside of your home country (including the United States), where data protection laws may differ. When transferring data from the EEA/UK, we use Standard Contractual Clauses (SCCs) to protect your privacy.

11. Data Security and Breach Notification

We implement industry-standard security measures to safeguard login-code authentication, billing confirmations, and gameplay history. All communication is protected using HTTPS/TLS encryption. Database access is strictly restricted to authorized development personnel.

If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where legally required, affected players without undue delay (for example via email or a notice upon login).

12. Policy Updates

We may update this Privacy Policy periodically. We will notify you of any material changes by updating the date at the top of this policy and, if necessary, displaying a notice upon login.

13. Contact

The data controller is ScarletGames, HIDDEN. For privacy requests, support issues, DMCA notices, or questions about this policy or the Terms of Service, use Support. A dedicated email or web request form should replace this path when it is available.