Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains how ROCAT Games ("we", "us", "our") collects, uses, and protects personal data when you visit rocat.games (the "Site"), apply through our Careers form, or contact us.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is [TO COMPLETE: full legal entity name], a company registered in [TO COMPLETE: country] under registration number [TO COMPLETE: registration number], with registered office at [TO COMPLETE: full postal address], trading as "ROCAT Games".

Contact for privacy matters: core@rocat.games.

2. Data We Collect

• Contact data: if you email us (e.g., core@rocat.games), we receive your email address and any information you include.
• Job-applicant data: if you apply via our Careers form, we collect your full name, email, location/timezone, discipline, seniority, portfolio, reel/LinkedIn and CV links, availability, and anything you choose to add in your note. This is submitted to and stored by our form processor, Formspree, Inc. (USA), and forwarded to our recruiting team by email.
• Analytics data: if you accept analytics cookies, Google Analytics 4 collects aggregate usage data (pages viewed, approximate location, device/browser). IP addresses are anonymized.
• Embedded video: if you click "Watch Trailer", a YouTube player (privacy-enhanced youtube-nocookie.com mode) is loaded from Google. YouTube may set its own cookies and collect data when the video plays, under Google's Privacy Policy.
• Technical/server data: our web host records basic server logs (IP address, user agent, referrer, timestamps) for security and abuse prevention.

3. Cookies & Similar Technologies

• Strictly necessary (no consent needed): a first-party local-storage flag storing your cookie choice (cookie-consent) and a session flag for the intro screen (visited). These do not track you.
• Analytics - consent required: Google Analytics 4 sets _ga and _ga_3YX1H8PWSC cookies (up to ~2 years) only after you click "Accept". If you reject or withdraw consent, these are not set and existing ones are cleared.
• Embedded media - third party: when you play the trailer, YouTube may set cookies such as YSC and VISITOR_INFO1_LIVE. These are controlled by Google, not us, and load only when you choose to play the video.

You can change or withdraw your consent at any time via the "Cookie settings" link in the site footer. Declining cookies does not block access to the Site.

4. Legal Bases (GDPR)

• Consent - analytics cookies, and processing your application data (via the checkbox on the Careers form). You may withdraw consent at any time.
• Legitimate interests - operating and securing the Site, evaluating job applicants, and responding to business inquiries.
• Contract / pre-contractual steps - where you contact us about a partnership or role.
• Legal obligation - where we must retain or disclose data by law.

5. Third Parties & Processors

We do not sell your personal data. We share it only with the processors needed to run the Site:

• Google LLC (Google Analytics, YouTube) - analytics and video hosting.
• Formspree, Inc. - processes and delivers Careers-form submissions.
• [TO COMPLETE: web hosting provider] - serves the Site and keeps server logs.

6. International Transfers

Google LLC and Formspree, Inc. are based in the United States. Where EU/EEA/UK personal data is transferred to them, we rely on the EU-U.S. Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses (SCCs). You can request a copy of the relevant safeguards at core@rocat.games. [TO CONFIRM with counsel: verify each provider's current DPF/SCC status before relying on this.]

7. Data Retention

• Server logs: up to 90 days, then deleted or anonymized. [Confirm with your host.]
• Google Analytics: retained per our GA4 setting [TO COMPLETE: 2 or 14 months - set and confirm in the GA admin panel].
• Careers-form data: kept for up to 12 months after the recruitment process closes, then deleted, unless you ask us to keep it on file for future roles.
• Emails: kept only as long as needed to handle your inquiry.

8. Your Rights

If you are in the EEA/UK, you have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time (without affecting prior processing). To exercise these rights, contact core@rocat.games. You also have the right to lodge a complaint with your local data-protection supervisory authority.

9. Children's Privacy

The Site is not directed to children under 16 (or the age defined by your local law). We do not knowingly collect data from children. If you believe a child provided us data, contact us to remove it. Note: INVASIA is a mature (violence/gore) title.

10. Security

We use reasonable technical and organizational measures to protect personal data; however, no system is completely secure.

11. Changes to This Policy

We may update this Privacy Policy. The "Last updated" date shows the latest version.

12. Contact

Email: core@rocat.games

Data controller & postal address: see section 1.