Effective Date: November 10, 2025
Legacy Labs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy applies to our website, the Backdraft game, and related services ("Services"). It explains how we collect, use, disclose, and safeguard information about you when you use the Services.
We work with the following types of third-party service providers:
We and our service providers may use cookies, SDKs, and similar technologies on our website and within the game to operate the Services, measure usage, improve performance and stability, and detect fraud.
We do not sell or share your personal information (as defined under the CCPA/CPRA). We have not sold or shared personal information in the past 12 months. If this changes in the future, we will update this Policy and provide any required notices and opt-out options.
We retain personal information only as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, and comply with applicable legal requirements. When your account is deleted, we will delete or de-identify associated personal information unless retention is required for legal or legitimate business purposes. We may retain certain gameplay data for up to 5 years after account deletion for fraud prevention and security purposes.
To exercise these rights, contact us at [email protected]. We will respond within 30 days or as required by applicable law.
To request account deletion, email [email protected] with your username and platform account information. We will process deletion requests within 30 days. Certain gameplay data may be retained for up to 5 years for fraud prevention and security purposes.
The Services are not intended for children under 13 in the United States or under 16 in the EEA/UK. We do not knowingly collect personal information from children below these ages. Account creation is managed through third-party platform services, which have their own age verification and parental consent mechanisms. If you believe we have collected information from a child below the applicable age threshold, please contact us and we will take appropriate steps to delete it.
We maintain appropriate technical and organizational measures to protect personal information, including encryption in transit and at rest, secure authentication protocols, access controls, and regular security assessments. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach, we will notify applicable authorities within 72 hours and affected individuals without undue delay, as required by applicable law.
Because we are based in the United States and work with vendors globally, your personal information may be transferred and processed in countries other than your own. When transferring personal information from the EEA/UK, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to ensure appropriate protection.
The Services may include links to third-party websites or services. Their privacy practices are governed by their own policies, which we encourage you to review.
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy on this page and revise the "Effective Date." Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.
Legacy Labs
Email: [email protected]
Website: legacylabs.io
California residents have rights to know, access, correct, delete, and limit the use/disclosure of personal information, and to opt out of "sale" or "sharing" (cross-context behavioral advertising). We do not sell or share personal information. You may exercise your rights by contacting us at [email protected].
If you are in the EEA/UK, Legacy Labs is the data controller of your personal information.
Legal bases: We process personal information as necessary to perform our contract with you (e.g., to provide access to the game), to comply with legal obligations, and for our legitimate interests (e.g., improving and securing the Services, preventing fraud). Where required, we obtain your consent.
International transfers: When we transfer personal information outside of your country (e.g., to the United States), we rely on Standard Contractual Clauses or other lawful transfer mechanisms to ensure adequate protection.
Your rights: You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You also have the right to lodge a complaint with a supervisory authority.
