Privacy notice
Last updated 5 November 2026
This explains what personal information RetroFabs collects when you use retrofabs.com, why we need it, who else handles it, how long we keep it and what you can ask us to do. The short version: we collect what we need to build your game, take your payment and send you, or the person you are giving it to, what you bought. We do not run ads, we do not track you across the web and we do not sell your information.
1. Who is responsible for your information
SilverCloud Consulting, trading as RetroFabs, decides how your information is used and is the "controller" under UK data protection law. You can contact us at fabs@retrofabs.com.
2. What we collect and why
| What | Why we need it | Our legal basis |
|---|---|---|
| Your game choices: game, character, colours, occasion, level count, and the name and message you type in | To build your game and show it to you | Contract (to provide what you bought) |
| Your email address, from Stripe checkout | To send you your game link and downloads, to resend them, and to reply if you contact us | Contract |
| If you send your game as a gift: the recipient's email address, the name you give as the sender, and the optional note you write | To email the gift link to the person you chose, with your name and note, and to resend it if you ask | Contract (to provide what you bought) and legitimate interests (delivering a gift you asked us to send) |
| Order details: a random order number, your pack, the price, the date, whether it has been paid, Stripe's payment reference, and a count of downloads | To match your payment to your game, keep your link working, deal with refunds and keep proper accounts | Contract and legal obligation (keeping accounting records) |
| Your confirmation that you understand you cannot cancel for a change of mind once your game is ready, and the time you gave it | To show we followed the consumer rules | Legal obligation and legitimate interests |
| Technical information: your IP address, device and browser type, and the pages requested, handled by our hosting provider. If you use the contact form, we also keep a scrambled (hashed) form of your IP address for one hour, so we can limit how many messages one person can send. It cannot be turned back into your address. | To deliver the site, keep it secure and spot abuse | Legitimate interests (running a secure service) |
| Messages you send us by email or through the contact form (your name, email address, any order number you give, and your message) | To answer you and keep a record of any problem | Legitimate interests, or contract if it is about an order |
If you choose the gift option, you are giving us someone else's email address. Please only use the address of a person who would expect to hear from you, and only for a gift you want them to have. We use it for that one email, plus a resend if you ask for one. We do not add it to any list, we do not contact them about anything else, and we do not ask them for anything. The recipient can ask us to delete their address and the gift at any time (see section 9). The price is never included in the gift email.
Previews are different. When you press preview in the builder, your choices are sent to our server so it can build the sample game. We do not keep them. They are discarded as soon as the preview has been sent back to you.
The order information is only saved once you go to pay. If you start checkout but do not pay, that record is deleted automatically after 14 days.
3. What we do not collect
- We never see or store your card number. Stripe handles it.
- There are no accounts, passwords or logins.
- We do not use advertising, analytics or tracking cookies, and we do not build profiles of visitors.
- We do not collect personal information from the people who play your game. The games do not send scores, names or anything else back to us. The only thing recorded when a link is opened is an anonymous random code for that device, which we use to count devices (see section 7).
- We do not send marketing emails. The only emails we send are about an order: your receipt and game link, the gift email to the person you named, a resend you asked for, and replies to anything you write. We will ask you first before ever adding you to a mailing list.
4. Who else handles your information
We use a small number of other companies to run the service. They only process your information to provide their service to us, except where noted.
- Stripe takes your payment. It collects your card details, your email address and anything else it needs to process the payment and prevent fraud. For some of that, Stripe is responsible in its own right. See stripe.com/gb/privacy.
- Cloudflare hosts the website, runs the code that builds your game and stores your order record. See cloudflare.com/privacypolicy.
- Resend sends the emails about your order, including any gift email, and delivers messages from our contact form to us, so it handles your email address, a gift recipient's email address and the contents of the messages. See resend.com/legal/privacy-policy.
- Google Fonts supplies the typefaces used on our pages. When a page loads, your browser asks Google for the fonts, so Google receives your IP address and browser details. The games themselves do not contact Google.
- Our email provider handles messages you send to our email address.
We may also share information if the law requires it, for example to answer a valid request from the police or a regulator, or with our accountants and professional advisers, who are bound to keep it confidential.
5. Moving information outside the UK
Some of these companies are based in, or process information in, the United States and other countries. Where that happens, we rely on the protections the law allows, such as the UK's data bridge with certified US companies, or standard contractual clauses approved for use in the UK. You can ask us for more detail.
6. How long we keep it
- Unpaid orders: deleted automatically after 14 days.
- Paid orders (your game choices, email address, any gift recipient's email address, sender name and note, and order details): kept for as long as your game link works, so it keeps working and we can resend it. If you or a gift recipient ask us to delete the order or the gift address, we will, and the game link will stop working if you ask for the whole order to go.
- Device codes: the anonymous codes that count how many devices have opened a link are kept with the order for as long as the link works.
- Contact form rate-limit record: the hashed form of your IP address is deleted after one hour.
- Payment and accounting records: kept by us and Stripe for as long as the law requires, normally six years, even if you ask for your order to be deleted.
- Emails you send us: kept for as long as needed to deal with your query and any follow-up, then deleted.
- Server logs: kept by our hosting provider for short periods under its own settings.
7. Cookies and similar technology
When someone opens a game link, we set one small cookie in their browser. It is a random code with no personal details. We store a copy of that code against the order, which lets us count how many devices have opened the link so a single purchase cannot be passed round for free. It is strictly necessary for that, lasts a year, and is not used for advertising or tracking. Our other pages do not set cookies. Stripe's checkout page uses cookies and similar technology to process payments and prevent fraud, and its privacy notice explains them.
The games you buy save a few small settings in your browser's local storage on the device you play on: your best score and whether sound and music are on. That information stays on your device and is not sent to us. Clearing your browser data removes it.
8. Keeping information secure
All connections to the site use HTTPS. Each game link contains a long random code that cannot be guessed. Payment confirmations from Stripe are checked with a secret signature before we accept them, and the keys that connect our services are stored as secrets, not in the code. No system is perfectly secure, but we take care to protect your information. If there is a breach that puts your rights at risk, we will tell you and the Information Commissioner's Office as the law requires.
9. Your rights
You can ask us to:
- tell you what personal information we hold about you, and give you a copy,
- correct anything that is wrong,
- delete your information (some records we have to keep, as explained above),
- limit how we use it, or object to a use that relies on our legitimate interests,
- give you the information you provided in a portable format.
These rights belong to buyers and to anyone whose email address was given to us as a gift recipient. Email fabs@retrofabs.com. We will reply within one month. We may need to check it is you first, and the easiest way is to write from the email address you used when you ordered, or from the address the gift was sent to. It is free to make a request.
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
10. Children
Our shop is for adults. You must be 18 or over to order. The games can be played by anyone, including children, and they do not collect personal information from players. Please do not use the gift option for a child's email address.
11. Changes to this notice
If we change what we do with your information, we will update this page and the date at the top. If a change matters to you, for example a new company handling your data, we will email you where we can.