Plain English summary: We collect only what we need to run our services. We don't sell your data. You can ask us to delete it at any time. We use Firebase (Google) to handle authentication and store data securely.
1. Overview
Runa Entertainment ("Runa", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services including the RECS IDE and our games.
By using our services you consent to the data practices described in this policy. If you do not agree, please do not use our services.
2. Data We Collect
Information you provide directly:
- Account information: name, email address, password (stored hashed via Firebase Auth)
- Profile information: display name, profile photo you optionally upload
- Communications: messages you send us via contact forms or email
- Early access sign-ups: name and email for the RECS beta waitlist
Information collected automatically:
- Usage data: pages visited, features used, time spent, click events
- Device data: browser type, operating system, screen resolution, IP address
- Log data: server logs including timestamps, error reports, and access patterns
- Cookies and similar tracking technologies (see Section 5)
Information from third parties:
- If you sign in with Google, GitHub, Microsoft, or Apple, we receive your name, email, and profile photo from those providers, subject to their privacy policies
3. How We Use Your Data
We use the information we collect to:
- Create and manage your account, authenticate you, and keep your session secure
- Provide, operate, and improve our services including RECS and our games
- Send transactional emails (email verification, password reset, account alerts)
- Send product updates, early access notifications, and studio news (only if you opt in)
- Analyze usage to improve performance, fix bugs, and develop new features
- Comply with legal obligations and enforce our Terms of Service
- Prevent fraud, abuse, and security incidents
We will never sell your personal data to third parties for marketing purposes.
4. Sharing Your Data
We share your data only in these limited circumstances:
- Service providers: Google Firebase (authentication, database, file storage), used to operate our platform. Firebase's privacy policy governs their handling of data.
- Legal requirements: If required by law, court order, or governmental authority
- Business transfers: If Runa Entertainment is acquired or merges with another company, your data may be transferred as part of that transaction with prior notice to you
- Safety: To protect the rights, property, or safety of Runa, our users, or the public
We do not share your personal information with advertisers or sell it to data brokers.
5. Cookies & Tracking
We use the following types of cookies and local storage:
- Essential cookies: Required for authentication sessions and security. Cannot be disabled.
- Preference storage: We store your theme preference (light/dark) in your browser's localStorage.
- Analytics: We may use anonymized analytics to understand how our site is used. No personally identifiable information is included in analytics data.
You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it longer.
Early access waitlist data is retained until the RECS beta has launched and waitlist processing is complete, or until you unsubscribe.
7. Security
We implement industry-standard security measures to protect your data, including:
- HTTPS/TLS encryption for all data in transit
- Firebase Security Rules to control database access
- Passwords are never stored in plain text — Firebase Auth handles hashing and salting
- Profile photos are stored in Firebase Storage with access controls
No system is 100% secure. If you believe your account has been compromised, please contact us immediately at security@runaentertainment.com.
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete data via your account settings
- Deletion: Request deletion of your account and associated data
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data, including marketing emails
- Withdraw consent: Unsubscribe from marketing emails at any time via account settings or the unsubscribe link in any email
To exercise any of these rights, contact us at privacy@runaentertainment.com. We will respond within 30 days.
EU/EEA and UK residents have additional rights under GDPR and UK GDPR respectively. California residents have rights under the CCPA.
9. Children's Privacy
Our services are not directed to children under the age of 13, or 16 in the EU. We do not knowingly collect personal information from children. If we discover we have collected data from a child without parental consent, we will delete it promptly.
If you believe a child has provided us with personal information, contact us at privacy@runaentertainment.com.
10. International Data Transfers
Runa Entertainment operates primarily in the United States. Our service provider, Google Firebase, may store and process data in data centers around the world. By using our services, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.
For EU users, we rely on Standard Contractual Clauses approved by the European Commission for international transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page with an updated "last modified" date
- Sending an email notification to your registered email address
- Displaying a notice within our products
Your continued use of our services after changes take effect constitutes acceptance of the revised policy.