Privacy Policy

1. Introduction

RPGScience, a trading name of the developer, ("we," "us," or "our") operates MapMage (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the Australian Privacy Act 1988, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address when you register for an account
• Profile Information: Display name (if provided)
• Payment Information: Processed securely by our payment provider; we do not store credit card details
• Communications: Information you provide when contacting us for support

2.2 Information Collected Automatically

• Usage Data: Features used, maps generated, session duration
• Device Information: Browser type, operating system, screen resolution
• Log Data: IP address, access times, pages viewed

2.3 Your Content

Maps and world data you create are stored to provide the Service. This content belongs to you and is not used for any purpose other than delivering the Service.

3. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide and maintain the Service	Contract performance
Process payments and manage subscriptions	Contract performance
Send service-related communications	Contract performance / Legitimate interest
Respond to support requests	Contract performance
Improve and optimise the Service	Legitimate interest
Detect and prevent fraud or abuse	Legitimate interest
Comply with legal obligations	Legal obligation

4. Third-Party Services

We use the following third-party services to operate MapMage:

Service	Purpose	Data Shared
Supabase	Authentication and database	Email, account data, user preferences
Google OAuth	Sign-in option	Email (if you choose Google sign-in)
Cloudflare	Hosting and content delivery	IP address, request data
Stripe (if applicable)	Payment processing	Payment details (processed by Stripe)

These services have their own privacy policies. We encourage you to review them.

5. Cookies and Local Storage

We use the following technologies:

• Essential Cookies: Required for authentication and core functionality
• Local Storage: Stores your preferences and cached world data for performance
• IndexedDB: Stores your saved worlds locally on your device

We do not use advertising cookies or third-party tracking cookies.

6. Data Storage and Security

Your data is stored on servers operated by our third-party providers (Supabase, Cloudflare) located in various regions including the United States, European Union, and Australia.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Access controls and authentication
• Regular security reviews

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data as follows:

• Account Data: Until you delete your account
• World/Map Data: Until you delete it or your account
• Log Data: Up to 90 days
• Payment Records: As required by law (typically 7 years)

After account deletion, we may retain anonymised data for analytics purposes.

8. Your Rights

8.1 All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format

8.2 EU/UK Users (GDPR)

• Restrict Processing: Limit how we use your data
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent
• Lodge Complaint: With your local data protection authority

8.3 California Users (CCPA/CPRA)

• Know: What personal information is collected
• Delete: Request deletion of your personal information
• Opt-Out: We do not sell personal information
• Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, contact us at Loading....

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States and Australia. These countries may have different data protection laws.

For EU/UK users, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with our service providers

10. Children's Privacy

MapMage is designed for users of all ages. However, users under 13 (or under 16 in the EU) should have parental permission before creating an account.

We do not knowingly collect personal information from children without parental consent. If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us at Loading... and we will promptly delete it.

11. Do Not Track

We do not currently respond to "Do Not Track" browser signals. However, we do not engage in cross-site tracking.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• For material changes, sending an email notification

13. Contact Us

For privacy-related questions or to exercise your rights:

Email: Loading...

Data Controller: RPGScience
New South Wales, Australia

14. Additional Information for Specific Regions

Australia

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988. You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

European Union / United Kingdom

Under GDPR, you have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your data appropriately.

California

Under CCPA/CPRA, California residents have additional rights as outlined in Section 8.3. We do not sell personal information as defined by CCPA.