Privacy policy

Who we are

Red Sheep Studio OÜ (registry code 14938879), Tallinn, Estonia, is responsible for the processing described here. Questions about privacy go to support@redsheep.studio.

This website

• No cookies, analytics or ads. We don't use tracking pixels, social widgets or third-party fonts. Everything is served from our own site. The site keeps one note in your browser's session storage so the loading animation plays only once. It holds no ID and is erased when you close the tab.
• Hosting. The site runs on Microsoft Azure, whose servers may be outside the EU. Like any web server, it processes technical request data (IP address, browser type, the page requested, time) to deliver pages and protect against abuse. We don't use this data to identify or profile visitors. Microsoft acts for us under its Data Protection Addendum, which includes the EU's standard safeguards for transfers. Legal basis: our legitimate interest in running a secure website (GDPR Art. 6(1)(f)).
• Email. If you write to us, we use your address and message only to answer you. We keep support emails for up to 12 months after the last message. Legal basis: our legitimate interest in answering you (GDPR Art. 6(1)(f)).

Impossible Contracts

The game sends us data about how it plays and runs. We use it to balance the bosses and difficulty, see where players get stuck or stop, and fix bugs and crashes. We designed it so that we cannot identify anyone from it, which is why the game doesn't interrupt you with a prompt. This page is where we tell you exactly what is sent.

What the game sends

What our gameplay and error data never contains

Names, email addresses, chat, Steam IDs, hardware or device IDs, or any location, not even a country. Your IP address is needed to deliver the data, like any internet request, but it is not stored.

How it stays anonymous

Each time you start the game it creates a new random session number. It is not kept between launches, so there is no ID that follows you from one session to the next. (If the game closes before its last reports are sent, they wait in a small file and go out the next time you start, then the file is deleted.) We don't combine this data with anything that names you. If you send us a log file for a bug report, we use it to fix that bug, not to look up your play data.

Where it goes and for how long

Data is stored with Microsoft Azure Application Insights in the EU (Sweden). Microsoft processes it for us under its Data Protection Addendum. It is deleted automatically after 90 days.

Your saves, settings and log files stay on your computer. The game never uploads them.

Legal basis

We designed this data so that it is not personal data under the GDPR. Your IP address necessarily reaches the server when the game sends data, but it is not stored. As far as that counts as processing, we rely on our legitimate interest in keeping the game stable and fair (GDPR Art. 6(1)(f)).

Online co-op

When you host or join an online game, the connection runs through Unity Relay, a service of Unity Technologies. To connect you, Unity processes your IP address and a random player ID that the game creates anew on each launch. Unity does this on our behalf, keeps the data for about 30 days, and may process it outside the EU under the safeguards in its data processing terms (see Unity's privacy policy). Because traffic goes through the relay, other players don't see your IP address. If you instead connect directly by address on a local network, the players' computers see each other's addresses, as in any direct connection. We don't receive or store any of this ourselves. Legal basis: it is necessary to provide the online play you asked for (GDPR Art. 6(1)(b)).

Steam

Your Steam account, purchases, friends list, wishlist and the Steam overlay are run by Valve and covered by Valve's privacy policy. The game doesn't send us anything about your Steam account.

Bug reports and Discord

If you report a bug by email or on our Discord server, we use what you send only to investigate and fix the problem. The game's log file (Player.log) can include your Windows user name inside folder paths and details of your hardware. Posts in the Discord bug forum are visible to everyone on the server, so use email if you'd rather keep your log private. We delete emailed logs once the bug is closed. Discord itself is operated by Discord Inc. under its own privacy policy. Legal basis: our legitimate interest in fixing the game at your request (GDPR Art. 6(1)(f)).

Your rights

Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its processing, receive a copy of it, and complain to a supervisory authority. Write to support@redsheep.studio and we'll answer within a month. Our gameplay and error data carries nothing that tells us which records are yours, so normally we cannot find, export or delete an individual player's records (GDPR Art. 11); all of it is deleted automatically after 90 days. Anything you emailed us, or posted on our Discord, we can find and delete on request.

You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee, or to the authority in your own country.

Children

Impossible Contracts and this site are not directed at children under 13, and we don't knowingly collect personal data from them.

Electric Guardian, our classroom science game, is played on the Legends of Learning platform. That platform, not us, handles any data there, under the Legends of Learning privacy policy.

Changes

If what we collect changes, we'll update this page and the date at the top before the change ships.