Privacy Policy

1. Who We Are

Rowland Technology ("we", "us", "our") is the data controller for information collected through this website. You can reach us via our contact form.

2. Information We Collect

We collect the following personal information:

• Order information: name, email address, delivery country, and purchase details
• Account information: name, email, and encrypted password (if you create an account)
• Payment information: we do not store card details — payments are processed by Stripe, who have their own privacy policy
• Contact enquiries: name, email, and message content when you use our contact form
• Session data: shopping cart contents and preferences, stored temporarily in your browser session

3. How We Use Your Information

• Processing and fulfilling your orders
• Sending order confirmation and dispatch notifications
• Responding to enquiries and providing customer support
• Managing your account and order history
• Complying with our legal obligations

We process your data on the legal basis of contract performance (to fulfil your order) and legitimate interests (customer support and fraud prevention).

4. Data Sharing

We do not sell or rent your personal data. We share it only with:

• Stripe — to process payments securely
• Delivery partners — your name and delivery address as needed to ship your order
• Legal authorities — if required by law

5. Cookies

We use a single session cookie to maintain your shopping cart and login state. This cookie is essential for the website to function and expires when you close your browser. We do not use advertising or tracking cookies.

6. Our desktop games

The Thornroad desktop app can send the following to this website. Leaderboard posting and run reports can be turned off in the game's Settings, under Online; feedback is only sent when you send it:

• Online leaderboard: the name you choose, a random player ID the game creates, and each run's score, wave, kills, time, difficulty and game version. Your name and scores are shown publicly on the leaderboards. Nothing is posted until you choose a name.
• Feedback: when you send feedback from the game, your message, your leaderboard name if you have one, a short summary of the run in progress, your operating system and, if you tick the box, the end of the game's log file.
• Anonymous run reports: at the end of each run, a summary used to balance the game's difficulty: the mode, difficulty, waves reached, towers and cards used, core health by wave, which enemies and bosses got through, and the upgrades you had unlocked. Reports carry no name, no player ID and a new random ID each time. They are on by default.

The Spaceforge desktop app can send anonymous diagnostics, which can be turned off in the game's Settings:

• Career reports: when a story chapter starts and when a career ends, a summary used to balance the game: the in-game day, time spent flying, your starting background and difficulty, your ship and its equipment, credits, faction membership, career statistics such as kills and ship losses, and how far the Blight has spread. They carry no name and no player ID; each career gets a random ID so its chapters can be compared.
• Error reports: if the game hits a programming error, the error message, where in the game's code it happened, and what you were doing (for example flying or docked, and the in-game day).

To limit abuse, the website keeps a one-way hash of your IP address with each submission; the address itself is not stored. We use this information on the basis of our legitimate interest in running the leaderboards and improving our games.

7. Data Retention

Order data is retained for 7 years to comply with HMRC accounting requirements. Account data is retained until you request deletion. Contact enquiries are retained for 12 months. Thornroad run reports and Spaceforge diagnostics are deleted after two years; leaderboard entries and game feedback are kept until you ask us to remove them.

8. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Object to processing or request restriction
• Complain to the ICO at ico.org.uk if you believe we have not handled your data correctly

To exercise any of these rights, contact us using our online form.

9. Security

We use industry-standard security measures including HTTPS encryption, hashed password storage, and CSRF protection. Payment data is handled exclusively by Stripe and never stored on our servers.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email to registered account holders. Continued use of the site after changes constitutes acceptance.