What is this Privacy Policy for?

We respect your privacy and provide you with this Privacy Policy so that you may understand the ways in which we do and do not use the information you transmit when accessing this website, our games, and all other related services.

Please note that by accessing our services you agree to the collection and use of information in accordance with this Privacy Policy.

1. Introduction

This Privacy Policy explains how Sherpa Reynolds ("we", "us", "our"), a UK based independent game developer operating under the trading name Sherpa Reynolds, collects, uses, stores and shares information across the studio’s website, mobile games distributed via the Apple App Store and Google Play (and future Steam releases), and related services. It describes what personal and non personal data we process, why we process it, and your rights under UK GDPR and (where applicable) EU GDPR.

2. Scope

This document covers:

The website: [ https://sherpareynolds.com ]
Mobile games built with Unity (using Unity Analytics and Unity Ads/LevelPlay mediation)
Future PC/Steam releases
Embedded media on the website (e.g., YouTube)
Backsend services and thirdsparty processors we use

3. Data We Collect (Overview)

We collect different types of data depending on how you interact with us. This section summarises the categories; later sections explain specifics for the website and games.
• Technical & device data (IP address, device model, OS, browser)
• Usage & analytics data (pages or screens visited, session duration, insgame events)
• Advertising & engagement data (ad impressions, clicks, ad identifiers)
• Diagnostic & crash data (error reports, stack traces)
• Voluntary user data (if you contact us or sign up for future services) We do not collect contact details, account credentials, or payment data unless you provide them voluntarily through a dedicated form or purchase flow; if and when such features exist they will be described explicitly and will require separate consent where necessary.)

4. Legal Basis for Processing

Under UK GDPR (and EU GDPR where relevant) we rely on these legal bases:

• Consent (Art. 6(1)(a)) — for analytics, advertising, and embedded media that are not strictly necessary.
• Legitimate interests (Art. 6(1)(f)) — for essential site functionality, security, and fraud prevention; we balance our interests against your rights.
• Performance of a contract (Art. 6(1)(b)) — where required to deliver purchased content or services.

5. Cookies and Tracking (Website)

Our website uses cookies and similar technologies to provide functionality and measure usage. We use Complianz to manage cookie consent and blocking. Categories we use include:

• Strictly necessary: required for the website to function (not subject to consent).
• Functional: remember preferences.
• Analytics: Google Analytics (activated only after consent) for aggregated site metrics.
• Marketing: currently not used on the website; if used in future, it will be opt-in.

You can manage and withdraw consent at any time via the cookie banner and Complianz preferences.

6. Website Specifics - Data Flows

On the website we process:

• Google Analytics: anonymised/aggregated visit data (IP anonymisation enabled where configured). We use it to understand traffic and improve the site experience.
• YouTube embeds: embedded videos do not load tracking until you interact (play); playing a video may initiate data transfers between your device and YouTube/Google as described in Google’s policies.
• Server logs: our hosting provider stores server logs (IP, request timestamps) for shortsterm security and maintenance purposes.

We do not share website personal data with advertisers; processors are limited to hosting and Google/YouTube for analytics/media.

7. Game Specifics - Data Collected In Game

Our current titles use Unity Analytics and Unity Ads (LevelPlay mediation) with the following common data categories:

• Device identifiers: advertising identifiers (IDFA on iOS, GAID on Android) and Unity’s device identifiers.
• Technical data: device model, OS version, CPU/GPU class, memory, screen size.
• Usage and gameplay events: session starts, level progression, in-game events, retention metrics.
• Crash and diagnostic data: stack traces, exception logs, crash reports.
• Advertising engagement: ad impressions, clicks, ad revenue events, mediated partner identifiers. These datasets help us improve gameplay, fix bugs, measure engagement, and monetise through ads. Unity, mediation partners, and app stores may additionally retain and process data as described in their own policies.

8. App Store & Google Play Platform Data

When you install or use our mobile games, Apple and Google collect platform-level data (install source, crash logs, in-app purchase receipts, device class, performance metrics). We receive aggregated reports and may access developer console metrics (e.g., install counts, crash reports) that do not directly identify individual players. Where platform accounts are involved (e.g., purchases), platform operators (Apple/Google) act as primary controllers for that data and their privacy notices apply.

9. Steam & PC Deployment (Future)

If we deploy on Steam in the future, Steam will collect and process platform-level data (playtime, achievements, crash reports, hardware surveys). Valve/Steam act as platform controllers for their data. We will disclose in the game privacy notice what developer-level telemetry we collect and how aggregated reports are used.

10. Children's Privacy

Our projects/games are aimed towards a general audience. Where we detect that a user is a child or where platforms classify content as for children, personalised advertising is disabled and any collection of personal data will be minimised.

We believe it is important to safeguard the privacy of children and encourage parents to regularly monitor their children’s use of online activities. If we introduce any features that involve children’s personal data (e.g., accounts with parental consent), we will implement age-gating and parental consent flows as required by law.

11. Third Party Processors & International Transfers

We use third-party processors which may transfer data outside the UK/EU. Key processors include:

• Unity Technologies (Analytics, Ads) — https://unity.com/legal/privacy-policy
• Google LLC (Analytics, YouTube) — https://policies.google.com/privacy
• Apple Inc. (App Store) — https://www.apple.com/legal/privacy/
• Hosting provider (server logs) — details available on request These providers rely on appropriate safeguards (SCCs, adequacy decisions) to lawfully transfer data. Where necessary, we rely on Standard Contractual Clauses or adequacy decisions to protect transfers.

12. Data Retention

We retain data only as long as necessary:

• Cookie consent records: up to 12 months (exportable and purged thereafter unless needed for a legal reason).
• Website analytics: up to 26 months (configurable in Google Analytics).
• Game analytics (Unity): up to 24 months unless anonymised.
• Crash logs and diagnostics: typically 90 days to 24 months depending on severity and ongoing investigation.

We periodically review retention settings and will delete or anonymise data once it is no longer required.

13. Your Rights

Under UK GDPR you have rights including:

• Access: request a copy of personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion (subject to legal exceptions).
• Restriction: ask us to limit processing.
• Portability: request a portable copy of data you provided.
• Object: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: withdraw consent for analytics/ads at any time via the Complianz cookie preferences. To exercise rights, contact support@sherpareynolds.com. We will respond within one month (may extend for complex requests).

14. How to Withdraw Consent

You can withdraw or change consent via the cookie banner preferences (Complianz) on our website. To exercise other rights or request deletion of insgame telemetry associated with a device, contact support@sherpareynolds.com with details (game title, approximate installation date, device ID if available).

15. Security Measures

We implement reasonable technical and organisational measures to protect data, including HTTPS on our website, secure hosting, and reliance on the security controls of processors (Unity, Google, Apple). We do not retain payment information on our servers; payment processing is handled by platform providers (App Store, Google Play, Steam) and their payment processors.

16. Data Breach Handling

In case of a data breach affecting personal data, we will assess the risk and notify affected individuals and regulators as required by law (within 72 hours if feasible). We will maintain records of breaches and remediation steps.

17. Contact Us

Hopefully you have found this policy and any related links on the page useful. If you have questions or requests about privacy or your data, contact: [ support@sherpareynolds.com ].

Please allow up to 30 days for requests to be handled; complex requests may take longer and we’ll inform you if so.

18. Policy Changes

We may update this policy to reflect changes in services or legal requirements. We will indicate the “Last updated” date and inform users via a website notice when substantial changes occur.

Last Updated : 21st November 2025