Privacy Policy

Who is responsible

Alcateia is responsible for the information described here. Contact us about privacy, your data, or this policy at contact@alcateia-studios.com.

Information we collect

• Account information: your display name, email address, password hash, selected hero, and account/support status.
• Campaign information: the debt names, balances, payment events, dates, notes, and cosmetic selections that you enter.
• Purchase information: Stripe Checkout session and event identifiers, purchase amount, currency, and fulfilment status. Card details are handled by Stripe and are not stored by Debt Saga.
• Commission information: messages, image references, and the custom hero delivered through a commission thread.
• Product measurement: internal account identifiers, event names and dates for signup, boss creation, first payment, repeat activity, corrections and purchase reliability. These events contain no debt names, amounts, notes or message text and are not sent to third-party analytics.
• Technical information: information sent automatically when you use the service, such as request, device, and security logs.

Why we use it

• To create and secure your account and show your campaign.
• To process a purchase, unlock Premium, and fulfil a custom hero commission.
• To prevent fraud, troubleshoot the service, and protect the service and its users.
• To meet legal, accounting, and tax obligations where applicable.
• To publish your chosen name and join date on the Debt Slayers wall only if you opt in.

Where GDPR applies, we rely on performance of our contract with you for the service and purchases, legitimate interests for security and service administration, and legal obligations where records must be kept. We do not use your campaign information for advertising or sell it.

Who receives information

Authorized Debt Saga administrators access information when needed to operate the service, support users, and fulfil commissions. We use Stripe for payment processing and hosting, database, storage, and infrastructure providers to operate the service. Those providers may process information on our behalf. Your chosen name and join date are visible publicly only if you opt in to the Debt Slayers wall. You can change that choice in the Support page.

We do not control Stripe’s independent handling of payment data; please review Stripe’s Privacy Policy.

Commission images and messages

Only share references you have the right to share. Do not upload payment-card numbers, government IDs, bank statements, precise location data, health information, or other sensitive personal information. Commission messages and references are used to fulfil your request and are accessible to the account holder and authorized Debt Saga administrators. They are retained while the commission is active and afterwards only as necessary for support, record-keeping, or legal obligations.

Retention

We keep account and campaign information while your account is active. Purchase and commission records may be retained for as long as required for accounting, tax, fraud-prevention, dispute, or legal purposes. We will delete or anonymise information when it is no longer needed, subject to those requirements. Our configured purchase-record retention period is 2555 days, subject to any specific requirement to keep a record longer. Deleted profiles are anonymised; retained purchase rows contain order references, amounts, currencies and processing dates rather than your campaign or messages. Database backups may contain earlier data until they expire. If a backup is restored, deletion requests must be reapplied before public access resumes.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a copy of your personal data. You can download structured account and campaign data and request account deletion from Account & privacy in the app. Image files are available from your authenticated commission thread. If you have an unfinished paid commission, contact us to resolve or refund it before completing self-service deletion. To make another request, email contact@alcateia-studios.com from the email address associated with your account. We may ask for information needed to verify the request. If GDPR applies, you may also complain to your local data-protection authority.

Deletion of an account may remove campaign data and access to digital items, while we may retain limited records where legally necessary. Debt Slayer wall removal requests can be made at the same address.

International transfers and security

Our service providers may process data outside your country. Where required, we will use appropriate safeguards for such transfers. We use reasonable technical and organisational measures to protect information, but no online service can guarantee absolute security.

Children and changes

Debt Saga is not directed to children. Do not use it if you are below the minimum age required to enter a binding agreement where you live. We may update this policy when the service or legal requirements change; the updated version will be posted here with a new date.