Privacy Policy

Last updated: 8/4/2025

1. Introduction

sfact.io ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our game server hosting and shared saves services.

This policy applies to all users globally and complies with US federal privacy laws. By using our Services, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Email addresses for account creation
  • Display names/usernames
  • User-uploaded game save files (.sav files)
  • Support communications and chat logs
  • Payment information (processed securely by Stripe)

2.2 Information Automatically Collected

  • IP addresses and device information
  • Server performance and usage metrics
  • Website analytics and user behavior
  • Billing and payment history
  • Authentication tokens and session data

2.3 Third-Party Authentication

When you sign in with Google, we receive basic profile information according to Google's privacy practices and your Google account settings.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our game server hosting and shared saves services
  • Process payments and manage your token balance
  • Communicate with you about your account and our services
  • Provide customer support
  • Monitor and analyze service performance and usage
  • Ensure security and prevent fraud
  • Comply with legal obligations
  • Send service notifications (you can choose your preferences)
  • Send marketing communications (you can opt out anytime)
4. Third-Party Services

We integrate with the following third-party services:

4.1 Infrastructure and Hosting

  • Google Cloud Platform: Server hosting and data storage
  • Firebase: Database, authentication, and cloud functions

4.2 Payment Processing

  • Stripe: Secure payment processing (we do not store payment information)

4.3 Analytics and Monitoring

  • Google Analytics: Website usage analytics
  • PostHog: Product analytics and monitoring

4.4 Communications

  • SendGrid: Email delivery service

These third parties have their own privacy policies governing their use of your information.

5. Cookies and Tracking

5.1 Essential Cookies

We use essential cookies for:

  • Authentication (__session cookies)
  • Security and CSRF protection

5.2 Analytics Cookies

We use custom analytics cookies to understand how users interact with our service. These cookies help us improve our platform.

5.3 Marketing Cookies

We do not use marketing or tracking cookies for advertising purposes.

Since we only use essential cookies and custom analytics, no cookie consent banner is required.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

6.1 Service Providers

We share information with third-party service providers who help us operate our services (listed in Section 4).

6.2 Legal Requirements

We may disclose information if required by law, court order, or government request.

6.3 Business Transfers

Information may be transferred in connection with a merger, acquisition, or sale of assets.

6.4 Shared Saves

When you publicly share save files, they become viewable by anyone with the link. This is the intended functionality of our shared saves service.

7. Data Security

We implement appropriate security measures to protect your information:

  • Encryption in transit and at rest
  • Standard cloud provider security measures
  • Automated scanning of uploaded content
  • Regular security assessments

In the event of a security breach affecting your personal information, we will notify you within 72 hours.

8. Data Retention

We retain your information as follows:

  • Account Data: Retained indefinitely while your account is active
  • Game Save Files: 1GB active storage, 100GB archival storage per user
  • Payment Data: Retained for billing and tax purposes as required by law
  • Support Communications: Retained for service improvement and legal compliance

After account closure, we retain data indefinitely for business and legal purposes, though you may request specific data deletion where legally permissible.

9. Your Rights and Choices

9.1 Account Management

  • Update your account information through your dashboard
  • Delete your uploaded content at any time
  • Request account deletion (subject to waiting period)

9.2 Communication Preferences

  • Opt out of marketing communications at any time
  • Choose your notification preferences for service announcements

9.3 Data Requests

You may request access to, correction of, or deletion of your personal information by contacting our support team. We will respond to such requests in accordance with applicable law.

10. Children's Privacy

Our Services are available to users 13 years and older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information.

11. International Data Transfers

We serve users globally. Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using our Services, you consent to such transfers.

12. AI and Data Processing

When we integrate AI features in the future, they will be clearly labeled. We do not use your personal data for AI training purposes.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes through dashboard notifications. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us through our support chat or at our registered agent address on file with the Delaware Secretary of State.