RIDDEV Studios ("we," "us," or "our") operates riddevstudios.com, the RIDDEV Studios Desktop Application, and the RIDDEV Marketplace. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the choices you have. By using our Services, you agree to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you register or log in via Discord OAuth, we receive and store the following from Discord:
- Discord user ID
- Discord username and discriminator
- Profile avatar URL
- Verified email address (if shared by Discord)
When you set up a Marketplace account directly, we also collect:
- Display name and username you choose
- Email address
- Optional profile information (bio, social links, banner image)
- Password (stored as a secure hash — we never store plain-text passwords)
1.2 Subscription & Billing Information
For Desktop App subscriptions, payments are processed by Stripe. We receive and store:
- Stripe customer ID and subscription status
- Billing plan tier (Trial, Pro, Ultimate)
- Billing cycle dates and renewal status
We do not store full credit card numbers, CVV codes, or full bank account details. Payment card information is handled exclusively by Stripe's PCI-compliant infrastructure.
1.3 Marketplace Transaction Data
- Products purchased, downloaded, or licensed
- Order IDs and transaction reference numbers
- Payment provider transaction IDs (Stripe or PayPal)
- License keys issued to your account
- Reviews and ratings you submit
- Support tickets and messages you send
- Refund requests and their outcomes
1.4 Creator Program Data
If you apply for or are approved as a Marketplace Creator, we additionally collect:
- Creator application details and verification status
- Payout account details (Stripe Connect account ID or PayPal email address, as applicable)
- Tax documentation submitted for payout eligibility
- Products you list, their sales data, and revenue figures
1.5 Technical & Usage Data
- IP address and approximate geographic location (country/region level)
- Browser type, version, and language settings
- Device type and operating system
- Pages visited, features used, and interaction timestamps
- Referral source (how you arrived at our site)
- Session authentication tokens and cookies
1.6 Desktop Application Data
The Desktop App may collect:
- Application version and update channel
- License activation events and validation requests
- Crash reports and error logs (containing no personal file content)
- Anonymous usage telemetry (feature usage frequency, session duration) — where applicable and with appropriate notice
The Desktop App does not access, upload, or transmit the content of files you edit (vehicle models, liveries, textures, etc.) unless you explicitly export to cloud storage or use a feature that requires server-side processing.
2. How We Use Your Information
We use the information we collect to:
- Authenticate you and manage your account across both the Desktop App and Marketplace.
- Deliver your license tier and enforce access controls based on your active subscription.
- Process transactions — purchases, payouts, refunds, and subscription billing.
- Verify Marketplace licenses when products include server-side license checking.
- Provide customer support — respond to tickets, investigate disputes, and resolve issues.
- Prevent fraud and abuse — detect unauthorized access, chargebacks, piracy, and Terms violations.
- Improve our Services — analyse usage patterns, diagnose technical issues, and plan new features.
- Communicate with you — send transactional emails (receipts, license confirmations), security alerts, and optional marketing communications (you may opt out at any time).
- Comply with legal obligations and respond to lawful requests from authorities.
3. Third-Party Services
We rely on the following third-party providers who may process your data as part of delivering our Services:
- Discord — authentication and account linking via OAuth 2.0. Discord's privacy policy applies to data held by Discord.
- Stripe — Desktop App subscription billing and Creator payouts via Stripe Connect. Stripe processes payment card data and is PCI DSS compliant.
- PayPal — alternative payment processing for Marketplace purchases and Creator payouts. PayPal's privacy policy applies to data processed by PayPal.
- Cloudflare — website hosting, CDN, DDoS protection, and backend infrastructure (Workers, D1 database, R2 storage). Data may transit Cloudflare's global network.
Each third party operates under its own privacy policy. We are not responsible for the data practices of these providers beyond our agreements with them.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. Specific retention periods:
- Account data — retained while your account exists and for up to 3 years after deletion to resolve disputes.
- Transaction records — retained for up to 7 years for financial and audit purposes.
- Support tickets — retained for 2 years after closure.
- Crash logs and telemetry — retained for up to 12 months on a rolling basis.
You may request deletion of your account and associated data. Certain data may be retained beyond your request where required by legal obligation or legitimate business need (e.g., active dispute resolution or financial record-keeping).
6. Security
We implement industry-standard security measures to protect your information, including:
- HTTPS encryption for all data in transit
- Encrypted storage of sensitive data at rest
- Bcrypt hashing for passwords
- Role-based access controls limiting staff access to personal data
- Cloudflare-layer DDoS protection and access monitoring
- Secure token-based session management with expiry
No system is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.
7. Your Rights
Subject to applicable law, you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Deletion — request deletion of your account and personal data, subject to retention requirements.
- Portability — request a machine-readable export of your data where technically feasible.
- Opt-out of marketing — unsubscribe from promotional emails at any time via the unsubscribe link or by contacting us.
To exercise these rights, contact us at [email protected]. We will respond within 30 days. We may require identity verification before processing certain requests.
9. Children's Privacy
The Services are not directed to or intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete that information promptly. If you believe a child under 13 has used our Services, please contact us immediately.
10. International Data Transfers
RIDDEV Studios operates globally and your information may be processed and stored on servers located in multiple countries, including through Cloudflare's global network. By using the Services, you consent to the transfer of your information to countries that may have different data protection standards than your country of residence. We take reasonable steps to ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice by email or in-app notification. Your continued use of the Services after any change constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
12. Contact
For privacy-related inquiries, data access requests, or data deletion requests, contact us at:
- RIDDEV Studios
- Email: [email protected]
- Website: riddevstudios.com