Privacy Notice

This notice explains how Michael Patrick Fitzhugh handles personal data in connection with Race to Immortal Beauty. Michael Patrick Fitzhugh is the data controller for that data and decides how and why it is used. You can reach us at mikefitz56+rtib@gmail.com.

What we collect and why

• Email address and password — to create your account and to prove that your purchase belongs to you. Legal basis: performance of our contract with you.
• Purchase record (order reference, product, amount, currency, date, and the customer reference given to us by Paddle) — to unlock the Game on your account and to handle support and refunds. Legal basis: contract and legal obligation.
• Game progress you choose to save (party names, characters, campaign state) — so you can continue a session. Legal basis: contract.
• Any photograph you upload for a character avatar — used only to generate that avatar for you. Legal basis: your consent, which you can withdraw by deleting the avatar.
• Technical and usage data (IP address, device and browser type, error reports, timestamps) — to keep the service secure, prevent fraud and licence abuse, and diagnose faults. Legal basis: our legitimate interest in a secure, working product.
• Support messages you send us — to answer you. Legal basis: contract and legitimate interest.

We do not use your data for advertising and we do not sell it. We do not handle your card details at all; those go directly to Paddle.

Who we share it with

• Paddle, our reseller and Merchant of Record, for the sale of the Game, payment processing, invoicing, tax compliance, and refunds.
• Service providers and subprocessors who run the product on our behalf: website and application hosting, database and authentication hosting, the speech synthesis service that voices the dungeon master, and error-monitoring tooling.
• Professional advisers (legal and accounting) where genuinely necessary.
• Authorities where we are required to disclose by law.

International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, transfers rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and purchase records are kept for as long as your account exists and afterwards for as long as needed for tax, accounting, and dispute purposes (typically up to seven years for transaction records). Saved game state is kept until you delete it or close your account. Technical logs are kept for a short period, usually no more than 90 days. When data is no longer needed it is deleted or anonymised.

Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level access controls so one account cannot read another’s data, and restricted administrative access.

Cookies and local storage

We use only essential cookies and browser local storage — to keep you signed in, to remember your audio and display settings, and to store your saved game locally. We do not use advertising or third-party tracking cookies. You can clear this storage in your browser settings at any time, which will sign you out. Paddle may set its own cookies inside the checkout window; see Paddle’s privacy notice for details.

Your rights

Depending on where you live, you have the right to access your data, to have it corrected, to have it deleted, to restrict or object to processing, to receive a portable copy, and to withdraw consent where processing is based on consent. In the UK and EEA you may also complain to your data protection supervisory authority. Email mikefitz56+rtib@gmail.com and we will respond within one month.

Children

The Game is sold to adults. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will remove it.

Changes to this notice

If we change how we handle personal data we will update this page and the date at the top.