Privacy Policy

Two policies, one studio

The shop is run through Fourthwall and has its own Privacy Policy, which covers what happens when you browse it, buy, pay or subscribe there, including payment data, order history and the shop's cookies and analytics. This document does not replace it. It covers only what this site does with your data on top of that: your Veras Studios account, the games, and the account system around them.

Who we are

Veras Studios runs this site and its games. It is operated by one person. Questions, requests and complaints go to verasstudios@gmail.com.

What we collect, and why

Nothing is collected until you sign in. Once you do, your account holds:

• Your email address and a display name. The email comes from the sign-in link you use; the name starts as a placeholder and you can change it on your account page. We use the email to sign you in and to match shop orders and memberships to your account. Your display name appears on leaderboards you post to.
• Playtime, Sparks and Prisms. How long you play each game here, the Sparks that earns, the Prisms your membership or purchases credit, and a ledger of every movement. This is the account system working.
• Steam keys you have been granted, and the order or redemption they came from, so we can show you your key and never issue the same one twice.
• Membership status mirrored from Fourthwall (tier, active or not, the last month credited).
• Tutoring bookings: which slot, what you wrote in the goals box, and whether it was cancelled.
• Game data: scores you submit to leaderboards, items you buy in a game, and a random device identifier a game generates on your machine so that one device using many accounts to farm rewards can be spotted. The identifier is not derived from your hardware and cannot be traced back to you outside this site.
• Which version of these documents you accepted, and when.
• A waitlist email, if you ask to hear about a product before it ships. Used for that one announcement; removed on request.

The Prisma podcast is delivered by RSS from a podcast host. This site fetches the public episode list and plays the audio from the host; the host sees the usual request from your browser when an episode plays, under its own policy. We do not track what you listen to.

We do not run advertising, analytics or tracking scripts. We do not sell or share personal data for marketing. We do not build profiles beyond what is listed above.

Cookies

One cookie: an encrypted, first-party session cookie that keeps you signed in. It is strictly necessary for the account to work, so no consent banner is shown for it. Signing out removes it. There are no advertising or analytics cookies.

Who processes it

• SpacetimeDB Maincloud (Clockwork Labs) hosts the database that holds everything above, and runs SpacetimeAuth, the sign-in service that sends your magic link.
• Vercel hosts the website and its server code.
• Fourthwall runs the shop and memberships. When you buy or subscribe, Fourthwall tells us your email, what you bought and your membership tier so we can credit your account. Payment details never reach us; see the shop's Privacy Policy.
• itch.io hosts the game builds that play inside this site. When a game is embedded, itch serves it to your browser under itch's own policy.

How long we keep it

For as long as you have an account. Delete your account and everything above is erased immediately, with two exceptions: a record that a given shop order was already fulfilled (order number only, no personal data), kept so the same order cannot be fulfilled twice; and Steam key codes already issued to you, which you will be asked to confirm you understand are gone.

Your rights

You can do all of this yourself from your account page, without asking us:

• See everything we hold about you: it is what the page shows.
• Download it as a file (Privacy & data → Download my data).
• Correct your display name.
• Delete your account and all of its data (Privacy & data → Delete my account).

To change the email on your account, or for anything else (objection, restriction, a complaint), email verasstudios@gmail.com. If you are in the EU/UK you also have the right to complain to your data protection authority.

Children

You must be at least 13 to hold an account, and you confirm that when you sign in. We do not knowingly collect data from anyone younger. If you believe a child has an account, email verasstudios@gmail.com and it will be deleted. Games can be played without an account, and playing without one collects nothing.

Security

Sign-in is handled by SpacetimeAuth over HTTPS; the site never sees a password because there is none. Data is read and written only through the database's own access rules, which limit every signed-in person to their own rows. Unissued Steam keys are held in a table no browser can read.

Changes

When this document changes materially, the version at the top changes and you will be asked to accept the new version the next time you visit your account page.