Privacy policy

This policy explains what information Lutazu Universal Games ("Lutazu", "we", "us") collects when you use lutazubrand.com, how we use it, and the choices you have. If you have questions, contact us.

Information we collect

• Account details: your username, email address, display name, optional bio, and a securely hashed password. We never store your password in readable form.
• Applications and messages: what you submit through our careers, playtester and contact forms, such as your name, email, Discord handle, portfolio link and message.
• Mailing list: your email address if you subscribe to studio updates.
• Purchases and memberships: a record of the games and plans you buy, amounts, and their status. Card payments are processed by Stripe. We never see or store your full card number.
• Technical data: your IP address, used temporarily to protect sign-in from abuse, and standard server logs kept by our hosting provider.

How we use it

• To run your account, deliver games you buy, and provide membership perks.
• To review applications and reply to messages.
• To send studio updates if you subscribed. Every email lets you unsubscribe.
• To keep the site secure and prevent fraud.

We do not sell your personal information, and we do not use advertising trackers.

Cookies

We use a single essential cookie to keep you signed in and protect forms from forgery. We do not use analytics or advertising cookies. Payment pages hosted by Stripe may set their own cookies under Stripe's policy.

Service providers

We rely on trusted providers to run the site, and they only process data on our behalf:

• Hostinger: website hosting and database.
• Stripe: payment processing for games and memberships.
• Purelymail: studio email accounts.
• Google Fonts: web fonts. Your browser requests them from Google.
• YouTube: trailers are embedded in privacy-enhanced mode.

How long we keep it

We keep account data while your account is active. Purchase records are kept as long as required for tax and accounting. Applications and messages are deleted when no longer needed. You can ask us to delete your data at any time.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to certain processing. To make a request, contact us from the email on your account.

Children

Accounts are intended for people aged 13 and over. If you believe a child under 13 has given us personal information, contact us and we will delete it.

Security

The site is served over HTTPS, passwords are hashed, and access to studio tools is limited to authorised staff. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy, we'll update the date above. Significant changes will be announced on the site.