Crayta Legals - Privacy Policies

Crayta Game Privacy Policy

ISSUED BY UNIT 2 GAMES LIMITED ("UNIT 2", or "we" or "us").

Last updated: 3 June 2021

Welcome to Crayta's privacy policy. Crayta is owned and licensed by Unit 2 Games Limited.

Unit 2 Games Limited respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you use Crayta and tell you about your privacy rights and how the law protects you.

1. Important information and who we are

Purpose of this privacy policy

This privacy policy aims to give you information on how Unit 2 Games Limited collects and processes your personal data through your use of Crayta, including any data you may provide through Crayta or we may receive via Google Stadia or the Epic Games Store when you register an account, purchase Crayta Credits or otherwise use Crayta.

Crayta is not intended for anyone under the age of 13 and we do not knowingly collect data relating to anyone under this age.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them. In particular, if you use our website (https://www.crayta.com/) or any of its sub-sites such as the play and create sub-site (https://play.crayta.com/ and https://create.crayta.com/), the forum sub-site (https://forum.crayta.com/) or our support sub-site (https://support.crayta.com/) (our "Website"), please refer to the Website Privacy Policy available here.

Controller

Unit 2 Games Limited is the controller and responsible for your personal data (collectively referred to as "we", "us" or "our" in this privacy policy).

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

Contact details

If you have any questions about this privacy policy or our privacy practices, please contact our DPO in the following ways:

Full name of legal entity: Unit 2 Games Limited

Email address: dataprotectionofficer@unit2games.com

Postal address: 2 Jephson Court, Tancred Close, Leamington Spa, Warwickshire, England, CV31 3RZ, United Kingdom

If you are located in the European Economic Area ("EEA") or United Kingdom ("UK"), you have the right to make a complaint at any time to your local supervisory authority, which in the UK is the Information Commissioner's Office (ICO), (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach your local supervisory authority, so please contact us in the first instance.

Changes to the privacy policy

We keep our privacy policy under regular review. If we make changes, we will update the "Last Updated" date at the top of this privacy policy. If we make material changes to this privacy policy, we will take any steps as required by applicable law. The updated privacy policy will be effective as of the time of posting, or such later date as may be specified in the updated privacy policy.

Third-party links

Crayta may include links to third-party websites, plug-ins and applications, including but not limited to Google Stadia and the Epic Games Store. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave Crayta, we encourage you to read the privacy policy of every website you visit.

2. The data we collect about you

Personal data, or personal information, means any information about an individual from which that person can be identified.

We may process different kinds of personal data about you which we have grouped together as follows:

"Identity Data" includes title, first name and last name.

"Contact Data" includes your email address, mobile number and telephone number.

"Transaction Data" after you purchase in-game Crayta Credits (our in-game currency) through Google Stadia or Epic Games Store, we collect details about your use of those in-game Crayta Credits. For example, we collect details of items you have purchased from the Crayta Store using Crayta Credits and their cost. We do not process payment card information. Instead, you can make payments through Google Stadia and Epic Games Store and they will process your payment card information.

"Account Data" includes your unique Crayta account ID, Crayta username, your Google Stadia account ID/Epic Games Store account ID and username.

"Financial Data" includes your PayPal email address (please note this will only be processed as part of providing you with a prize when you partake in and win a prize draw or competition).

"Player Usage Data" includes information about how you use Crayta (e.g. what games within Crayta you have played and are playing, what players you have played with, etc.) and your IP address and general geographical region (e.g. Europe-West, US-Central, Asia-East) that you last played in.

"Gameplay Data" includes player data such as in-game performance, leaderboards, level and scores, character customisation, battle-pass and other platform entitlements.

"Settings Data" includes all in-game user settings such as settings relating to your preferences for: visual display, volume settings, voice chat and microphone, language and your chosen privacy setting for receiving group invites (i.e. whether everyone, only friends or no-one can send you group invites). It also includes your colour-blind mode and strength setting ("Accessibility Settings Data").

"Reports Data" includes any information in communications you make to us via in-game reports.

"Quickchat Data" includes pre-determined message phrases and pre-determined emojis which players can send to other players and your Crayta username.

"Creator Data" includes your Crayta ID and Crayta username, any images uploaded to our Website (see our Website Privacy Policy here for further details), names and descriptions of player created games and any other user generated content including packages (creations made by the player in a game).

"Technical Data" includes information used for authentication and details about technical issues in the game.

Other than Accessibility Settings Data, which could possibly be considered health data, and self-reported information submitted by applying for our Black Creators Prize Fund and Mentoring Programme, we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

If you fail to provide personal data

Where we need to collect personal data by law, or under the Crayta Terms of Service, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with access to Crayta). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

3. How is your personal data collected?

We use different methods to collect data from and about you including through:

Direct interactions. You may give us your Identity Data, Contact Data, Transaction Data, Reports Data, Quickchat Data and Creator Data by using Crayta, accessing our support service, giving us feedback, submitting a report, signing up for our marketing communications or when you otherwise correspond with us by phone, email or otherwise. By selecting your preferences in settings, you provide us with your Settings Data and Accessibility Settings Data.

Information automatically collected about you when you use Crayta. We create your Crayta ID when you first use Crayta. As you use Crayta, we will automatically collect Player Usage Data, Gameplay Data and Technical Data.

Third parties. We will receive personal data about you from Google Stadia / Epic Games Store. We collect your Google Stadia account ID/ Epic Games Store account ID and usernames as part of our account authentication process (where we also generate and provide you with a Crayta account ID).

4. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform our obligations under our Terms of Service, which form the contract between you and us when you create a Crayta account via Google Stadia or the Epic Games Store.

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

Where we need to comply with a legal obligation.

Where we have obtained your consent.

Where it is necessary to protect your vital interests or those of others.

Where it is necessary in the public interest.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the lawful bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Please note that we may process your personal data for more than one lawful basis depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

To register you as a new user

Account

Performance of a contract with you

To enable you to use Crayta in accordance with our Terms of Service, for example by using your Account Data in high score tables within games

Transaction

Account

Player Usage

Gameplay

Settings (incl. Accessibility Settings)

Quickchat

Creator

Performance of a contract with you other than for Accessibility Settings Data where we rely on explicit consent.

To manage our relationship with you, including providing you with customer support in respect of Crayta

Identity

Contact

Account

Player Usage

Gameplay

Reports

Performance of a contract with you

Necessary to comply with a legal obligation

Necessary for our legitimate interests (to keep our records updated and to study how our users use Crayta)

To enable you to use Crayta Credits to purchase items in the Crayta Store

Transaction

Account

Gameplay

Performance of a contract with you

To administer and protect our business and the Crayta platform (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)

Player Usage

Gameplay

Reports

Technical

Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)

To use data analytics to understand how you use and interact with Crayta, to improve Crayta, user relationships and your experiences of Crayta including recommending other Crayta games to you

CraytaID

Player Usage

Gameplay

Technical

Necessary for our legitimate interests (to define types of users of Crayta, to keep the Crayta platform updated and relevant, to develop our business and to inform our marketing strategy)

If you partake in/apply for our $25,000 monthly prize funds or our Black Creators Prize Fund and Mentoring Programme

Identity

Contact

Account

Financial (only if you win)

Name of your game created within Crayta

Confirmation that you are over 18

Self-reported information which is racial origin personal data

Performance of a contract with you

Necessary for our legitimate interests (to study how users use Crayta, to develop Crayta and grow our business)

For self-reported information which reveals your racial origin personal data, we rely on explicit consent

To provide you with special items to use within the Crayta platform where you have requested this.

Identity

Contact

Profile

Account

Gameplay

Performance of a contract with you

Necessary for our legitimate interests (for running our business, provision of administration and IT services, to develop Crayta and grow our business)

To deliver relevant marketing communications to you and measure or understand the effectiveness of the advertising we serve to you.

Identity

Contact

Consent

Necessary for our legitimate interests (to study how users use Crayta, to develop them, to grow our business and to inform our marketing strategy)

Marketing

Where you have provided us with your Contact Data in order for us to send marketing communications to you in return for us providing you with special items to use within the Crayta platform, you will receive marketing communications from us via our third party marketing email delivery service provider Twilio Inc. operating as SendGrid (based in the USA) unless you opt out of receiving such marketing.

Opting-Out

You can ask us to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Note that we may still send you announcements in relation to security, privacy or other administrative related communications that are not marketing orientated if you have opted-out to marketing, as we do not rely on consent for these communications so you may not opt-out.

Do Not Track

"Do not track" signals are preferences that users can set on their web browsers to limit how their activity is tracked across online services. Crayta does not respond to "do not track" signals in your web browser.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

5. Disclosures of your personal data

We may share your personal data with the parties set out below including for the purposes set out in the table above.

Other users of Crayta (based globally), including those who are playing or have played the same games on Crayta as you or who you have otherwise connected with, will see your Crayta username and the game you are currently playing. If you are on any leaderboards, other players of Crayta will see your Crayta username and your game score.

Third party service providers (based both inside and outside the EEA/UK) who provide services to us such as IT and system administration services in respect of Crayta and our business, including, but not limited to:

Zendesk Inc. and BugSplat LLC (based in the USA) which provide customer support services on behalf of Crayta.

Keywords International (based in the USA) which provides content moderation services on our behalf.

Twilio Inc. operating as SendGrid (based in the USA) which provides marketing email delivery services on our behalf.

Google Stadia and Google Inc. (both based in the USA), Google Ireland Limited and Google Commerce Limited (both based in Ireland), all of which may provide the platform on which Crayta is provided to you.

Epic Games, Inc. (based in the USA) which may provide the platform on which Crayta is provided to you.

Google Cloud (based in the USA) which provides hosting services on behalf of Crayta.

Atlassian Pty Ltd (based in Australia) which provides Jira, a bug-tracking management software on behalf of Crayta.

Professional advisers including lawyers, bankers, auditors and insurers based in the UK who provide consultancy, banking, legal, insurance and accounting services.

HM Revenue & Customs, regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances.

Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

We may access, preserve, and disclose information associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. International transfers

We are based in the United Kingdom. If you are based in the EEA/UK our processing of your personal data will involve a transfer of data outside the EEA.

Some of our third party services providers as well as Google Stadia and Epic Games Store are also based outside the EEA/UK so their processing of your personal data will also involve a transfer of data outside the EEA/UK.

With respect to the degrees of protection we afford your personal data when we process it, please see section 7 "Data Security" below.

Whenever we transfer your personal data out of the EEA/UK to our external third parties, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.

Where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

Please contact us via dataprotectionofficer@unit2games.com if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA/UK.

7. Data security

We process your personal data in accordance with applicable data protection laws. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Data retention – How long will you use my personal data for?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We retain your personal data until we or you decide to close or delete your Crayta account, at which time we will delete or anonymise all personal data we hold about you within 30 days.

In some circumstances you can ask us to delete your data: see below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

9. Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

If you want us to establish the data's accuracy.

Where our use of the data is unlawful but you do not want us to erase it.

Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.

You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us at dataprotectionofficer@unit2games.com.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

© 2021 Unit 2 Games Limited. All trade marks are the property of the relevant owners. All rights reserved.

CRAYTA WEBSITE PRIVACY AND COOKIE POLICY

ISSUED BY UNIT 2 GAMES LIMITED ("UNIT 2", or "we" or "us").

Last updated: 22 June 2021

INTRODUCTION

Welcome to Crayta's website privacy policy. Our corporate website (https://unit2games.com/) and Crayta website (https://crayta.com/) including any sub-sites, such as the play and create sub-sites (https://play.crayta.com/ and https://create.crayta.com/) (our "Play/Create Website"), our forum sub-site (https://forum.crayta.com/) (the "Forum"), our developer sub-site (http://developer.crayta.com) (the "Developer Website"), our API sub-site (http://api.crayta.com) (the "API Website") and our support sub-site (https://support.crayta.com/) (the "Support Website") (together our "site(s)") are owned by Unit 2 Games Limited.

Unit 2 Games Limited respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our site and tell you about your privacy rights and how the law protects you.

1. Important information and who we are

Purpose of this privacy policy

This privacy policy aims to give you information on how Unit 2 Games Limited collects and processes your personal data through your use of our site.

Crayta is not intended for anyone under the age of 13 and we do not knowingly collect data relating to anyone under this age.

It is important that you read this privacy policy together with any other privacy policy or fair processing policy we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy policy supplements other notices and privacy policies and is not intended to override them. In particular, if you use play or create on Crayta, you are subject to the Crayta Privacy Policy available here.

CONTROLLER

Unit 2 Games Limited is the controller and responsible for your personal data (collectively referred to as "we", "us" or "our" in this privacy policy).

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this privacy policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

Contact details

If you have any questions about this privacy policy or our privacy practices, please contact our DPO in the following ways:

If you are located in the European Economic Area ("EEA") or United Kingdom ("UK"), you have the right to make a complaint at any time to your local supervisory authority, which in the UK is the Information Commissioner's Office (ICO), (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach your local supervisory authority, so please contact us in the first instance.

CHANGES TO THIS PRIVACY POLICY

We keep our privacy policy under regular review. If we make changes, we will update the "Last Updated" date at the top of this privacy policy. If we make material changes to this privacy policy, we will take any steps as required by applicable law. The updated privacy policy will be effective as of the time of posting, or such later date as may be specified in the updated privacy policy.

THIRD PARTY LINKS

Our site may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave Crayta, we encourage you to read the privacy policy of every website you visit.

2. The data we collect about you and how we collect it

Personal data, or personal information, means any information about an individual from which that person can be identified.

We may process different kinds of personal data about you which we have grouped together as follows:

Information you give us.

Forum: If you choose to register for an account on our Forum, we collect your name, email address, language preferences and profile picture from Google, as well as your Forum username. When you post or interact on our Forum, we receive and store these communications and details of your activity.

Support: When you send us a support request, we collect your name, email address, username you provide, platform (e.g. Epic Games Store or Google Stadia), and any other information you choose to include in your communication with us including any files you upload.

Play/Create Website: When you log-in to the Play/Create Website via your Google Stadia or Epic Games Store account, we obtain your Google Stadia or Epic Games Store account details. We receive and store any information that you provide associated with the games you have created on Crayta (e.g. game name, description, tags and any images uploaded). If you "like" a game on Crayta via the Play/Create Website, we also receive and store that information.

Prize Fund applicants and winners: If you win our $25,000 monthly prize funds, or apply for our Black Creators Prize Fund and Mentoring Programme we will request your full name, email address, confirmation that you are over 18, your Google Stadia username / Epic Games Store username / Crayta username, Google Stadia ID, Epic Games ID and Crayta ID and name of your game. If you win, we will collect your PayPal email address so that you can receive your prize. By applying for our Black Creators Prize Fund and Mentoring Programme, you self-report information which is racial origin personal data, which is a special category of personal data.

Other enquiries. We collect your name, email address, job title and the contents of any communications you send us, for example if you communicate with us on third party sites, or for press enquiries, or if you are a representative of one of our vendors/suppliers, or if you communicate with us in relation to job vacancies.

Information automatically collected about you when you use our site. As you use our site, we automatically collect, use, store and transfer different kinds of personal data about you relating to how you use our site ("Usage Data"). This includes your IP address, your town/country, and device information including name and type of operating system, mobile service information and standard web information such as your browser type and the pages you access on our site. Please see the ‘Cookies' section below.

Information from third parties and related companies. Google Analytics provides us with Usage Data about you, including if you visit other website employing our cookies. We also receive personal data about you from Epic Games Store and Google, if you choose to log-in to the Play/Create Website via those accounts or if you choose to create a Forum account using your Google account (the types of personal data collected from Google and Epic Games Store are as specified above).

Other than self-reported information submitted by applying for our Black Creators Prize Fund and Mentoring Programme, we do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

3. How we use your personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Purposes for which we will use your personal data

We use the personal data you give us to:

We use your Usage Data in order to use data analytics to:

We process your Usage Data in these ways on the lawful basis that this is necessary for our legitimate interests (to define the types of visitors to our site, understand how visitors interact with our site, to keep our site updated and relevant, to develop our business and to inform our marketing strategy).

MARKETING

Where you have provided us with your Contact Data in order for us to send marketing communications to you in return for us providing you with special items to use within the Crayta platform or where you enter a competition or prize fund, we will use your personal data for marketing communications. You can ask us to stop sending you marketing communications at any time by following the opt-out link on the marketing communication or by contacting us at any time.

DO NOT TRACK

"Do not track" signals are preferences that users can set on their web browsers to limit how their activity is tracked across online services. Our site does not respond to "do not track" signals in your web browser.

Cookies

Our Crayta website uses cookies. This helps us to provide you with a good experience when you use our site and also allows us to improve it.

A cookie is a small file of letters and numbers that we, subject to your approval, store on your browser or the hard drive of your computer or other device with which you are accessing our site. Cookies contain information that is transferred to your computer's or other device's hard drive.

When you visit our site for the first time, we will provide you with a notice which lets you know how we use cookies, why we use them and how you can change which cookies you accept.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. You can also set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. You may find additional information about controls offered by popular browsers at the links below: Google Chrome, Internet Explorer, Firefox, Safari, Safari Mobile, Opera. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly. If you have disabled one or more cookies, we will still use information collected from cookies prior to your disabled preference being set; however, we will stop using disabled cookies to collect any further information.

The types of cookies used by us in connection with each of our sites are set out below.

Our landing site (crayta.com):

Essential/Strictly Necessary cookie: We use "cc_cookie" cookie allows us to remember whether a user has granted cookies consent on the site (expires after 365 days).

We use "personalization_id" cookie which is a cookie placed by Twitter to track the use of the Twitter buttons on our site and is used by Twitter to record your actions and interactions with the Twitter buttons. If you are logged into your account with Twitter, Twitter will be able to link information about you with your actions via this cookie (expires after 365 days).

We use the cookies listed below to track Reddit users on our site. Reddit will use the information collected via these cookies to record and monitor how Reddit users use our site. If you are logged into your Reddit account whilst using our site, Reddit will be able to link information about you from your Reddit account with your use of our site via these cookies.

" __gads"

"csv"

"d2_token"

"edgebucket"

"eu_cookie_v2"

"loid"

"pc"

"reddaid"

"reddit_session"

"show_anouncements"

"session_tracker"

"token_v2"

"USER"

Our Play/Create Website:

Essential/Strictly Necessary cookies: We use a "crayta-auth-token" cookie which allow us to authenticate users on the site (this is a session cookie).

We use a "cookie_consent" cookie which allows us to remember whether a user has granted cookies consent on the site (expires after 365 days).

Our Support Website:

Essential/Strictly Necessary cookies:

We use "__zlcmid" cookie which authenticate the user for the use of the chat widget (expires after 365 days);

We use "__cf_bm" cookie which is a Cloudflare cookie which helps us manage incoming traffic to our site (expires after 30 minutes);

We use "_zendesk_shared_session" cookie which is an authentication cookie (expires after 8 hours);

We use "_zendesk_session" cookie which stores accountIDs and routes for internal service calls (expires after 8 hours);

We use "_help_centre_session" cookie which stores unique session keys for the use of our Help Centre product (this is a session cookie); and

We use "_zendesk_authenticated" cookie which helps us remember that a user is authenticated in order to display the most up-to-date content (this is a session cookie).

Finally, we use "_ga", "_gali", "_gid", "_gat_UA-11380299-2" and "_gci_au", which are analytical cookies deployed by Google Analytics across all our sites. Google Analytics is a web analytics tool that helps us understand how users engage with the website. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect information about how users use our site. This information is used to compile reports and to help us improve our website. The reports disclose website trends without identifying individual visitors. For more information on Google Analytics, see here. You can opt out of Google Analytics without affecting how you visit our site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.

CHANGE OF PURPOSE

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

4. Disclosures of your personal data

We may share your personal data with the parties set out below for the purposes set out above.

Service providers. We share the information we collect with vendors, service providers and other partners who work under our direction to support our site (such as hosting our site, providing services such as customer service and sending electronic communications for us, and analysing the way in which people use our site) including, but not limited to:

Google Analytics, who provides cookies and analytics services to our site.

Professional advisers including lawyers, bankers, auditors and insurers based in the UK who provide consultancy, banking, legal, insurance and accounting services.

HM Revenue & Customs, regulators and other authorities based in the UK who require reporting of processing activities in certain circumstances.

Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.

To protect us and others. We may access, preserve, and disclose information associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Certain information you post to the Forum and Forum profile information (such as your username and avatar) will be public and visible to people accessing the Forum (whether or not they are logged in). Your username is a unique identifier you choose to identify yourself with on the Forum. If you post information to the Forum, it will be publicly available. Certain information associated with your public posts such as the month and year of your post, will be published and publicly available.

5. International transfers

We are based in the United Kingdom. We share information globally with our third party service providers.

Personal data controlled by us will be transferred or transmitted to, or stored and processed, in the United States or other countries outside the UK/EEA for the purposes described in this privacy policy. These data transfers are necessary to provide you with the services as set forth in our Terms of Service and to globally operate and provide the site to you. We use standard contractual clauses approved by the European Commission and rely on the European Commission's adequacy decisions about certain countries, as applicable, for data transfers from the EEA/UK to other countries.

6. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data retention – How long will you use my personal data for?

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

In some circumstances you can ask us to delete your data: see below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

8. Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data.

Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Please note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:

If you want us to establish the data's accuracy.

Where our use of the data is unlawful but you do not want us to erase it.

Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims.

You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

If you wish to exercise any of the rights set out above, please contact us by emailing us at dataprotectionofficer@unit2games.com.

NO FEE USUALLY REQUIRED

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.