Privacy Policy | Cruze Games

1. Information We Collect

Cruze Games ("we", "us", or "our") is operated by Cruze Intelligent Systems (U) Ltd, based in Gulu, Uganda. This Privacy Policy explains how we handle information when you visit cruzegames.store or blog.cruzegames.store (together, the "Site").

We may collect:

Account information — name and email address when you sign in via Google OAuth or email OTP.
Usage data — pages visited, games played, play durations, and click interactions, collected automatically by analytics tools.
Device & browser data — browser type, operating system, screen resolution, and IP address, used in aggregate for analytics.
Communications — messages sent through our quick-chat form or via email to team@cruzegames.store.
Email updates — the email address, optional first name and topics you choose when you subscribe to Cruze Games updates, with the date you confirmed.
Blog submissions — your name, email, the line about you and the story you send through the write-for-us page. Only your name and that line are published with your story.
Local storage data — game progress, theme preferences, and recently played lists stored in your browser's localStorage.
Developer information — public developer profile details, uploaded project metadata, news or notes, jam pages, payout contact details, and moderation records when you use developer tools.
Payment records — payment reference, amount, currency, checkout status, product type, buyer account reference, developer reference, and platform fee. We do not store raw card, bank, or mobile money credentials — those are handled directly by PesaPal.

2. How We Use Your Information

We use collected information to:

Display and improve Cruze Games content and game experiences.
Authenticate users and maintain secure sessions.
Send one-time sign-in codes (OTP) via email.
Analyse site traffic and player behaviour to improve performance.
Respond to support messages and feedback you submit.
Maintain leaderboards and community features for signed-in players.
Host developer profiles, project pages, uploads, articles, jams, monetized listings, payout statements, and moderation workflows.
Verify PesaPal transaction status before unlocking upload credits, paid downloads, tips, or sponsored placement — never from a browser redirect or callback alone.
Email a payment receipt to your own signed-in account when you request one.
Send the email updates you subscribed to, only after you confirm your address. Every update includes a one-click unsubscribe link.
Review stories sent for the blog and contact the author about them.

3. Cookies & Analytics

We use cookies and similar technologies for authentication and analytics.

We use Google Analytics 4 (GA4) to understand how users interact with the Site. GA4 collects anonymised usage data. You can opt out via the Google Analytics Opt-out Browser Add-on.

We do not currently show third-party advertising Cruze Games is not currently running Google AdSense or any other ad network on this Site — no ad script is deployed on any page. If we introduce advertising in the future, we will update this section first to name the ad network, the cookies it sets, and how to opt out, before any ads go live.

Types of cookies we use today:

Essential — required for authentication and core functionality.
Analytics — help us understand traffic and usage patterns (Google Analytics).
Preferences — remember your theme choice and display settings.

4. Third-Party Services

We integrate with the following third-party providers. Each has its own privacy policy:

Google LLC — Google Identity sign-in, Google Analytics 4, Google Fonts, and Blogger. (Google Privacy Policy)
Microsoft PlayFab — account session, player profile, game progress, and leaderboard support. (Microsoft Privacy Statement)
Brevo (formerly Sendinblue) — email delivery for OTP sign-in codes and payment receipts. (Brevo Privacy Policy)
PesaPal — checkout, payment redirects, callback notifications, and transaction status verification for supported payments. (PesaPal Privacy Policy)
Blogger / Google — our public blog at blog.cruzegames.store.
WhatsApp Business (Meta) — optional contact channel via our WhatsApp Business number.

5. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only in the following circumstances:

With service providers listed above, strictly to deliver Site functionality.
To comply with applicable law, court orders, or regulatory requirements.
To protect the rights, property, or safety of Cruze Games, its users, or the public.

6. Developer Uploads & Payments

Developer profile names, handles, bios, project titles, project descriptions, screenshots or cover images, published builds, asset files, news or notes, and jam pages may become public when you publish them. Developers also agree to the Developer Publishing Standards shown during developer sign-up, which govern content ownership, moderation, and payment conduct in more detail than this policy.

Approved uploaded games receive native store pages under /games/your-game/. Uploaded game and asset files are served from an isolated upload host (developersat.cruzegames.store), kept separate from the authenticated storefront, sign-in sessions, and payment flows.

PesaPal checkout is handled server-side. We keep payment records needed for reconciliation, refunds, payout statements, moderation, fraud prevention, and legal compliance. We do not expose PesaPal keys in browser code, and we do not treat callback or IPN query data as proof of payment until the server independently verifies transaction status with PesaPal.

7. Your Rights

Depending on your location, you may have rights to:

Access the personal data we hold about you.
Correct inaccurate or incomplete information.
Delete your account and associated data.
Object to or restrict certain types of processing.
Portability — receive a copy of your data in a machine-readable format.

To exercise any of these rights, contact us at team@cruzegames.store. We will respond within a reasonable time, and in any case no later than 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. Account sessions are handled through Google Identity and PlayFab-backed server validation. Game data stored locally in your browser is not transmitted to our servers unless you are signed in or use connected features.

Developer uploads are validated before publication — checked for disallowed file types, path traversal, and size limits — served as static files from an isolated host, and launched through sandboxed, native store pages. PesaPal credentials are stored in server environment settings and are never committed to source control or rendered to users.

No internet transmission method is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Cruze Games is intended for a general audience, including some educational titles that may appeal to younger players (such as Junior Code Quest). We do not knowingly collect personal information directly from children under the age of 13 (or the applicable minimum age in your jurisdiction) without a parent or guardian's involvement in account creation. If you believe a child has provided us with personal information without appropriate consent, contact us at team@cruzegames.store and we will promptly investigate and delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page will always indicate when it was last revised. Continued use of the Site after an update constitutes acceptance of the revised policy. See also our Terms of Service, which govern your use of the Site more broadly.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

Address: Cruze Intelligent Systems (U) Ltd, Gulu, Uganda