RECORD // PRIVACY
PRIVACY NOTICE
Last updated: August 12, 2026
The Debt Rig notice list exists to send major development updates, demo and playtest notices, and a launch alert. It is separate from Steam wishlisting and does not ask for a Steam username, password or account identifier.
WHAT WE COLLECT
If you join the notice list, we store your normalized email address, subscription status, consent timestamp and text version, signup source and page, locale, confirmation and unsubscribe timestamps, and cryptographic hashes of limited-life confirmation and unsubscribe tokens. Raw tokens are not stored.
WHY WE USE IT
We use this information only to operate the double opt-in notice list, deliver the updates you requested, prevent abuse, and honor unsubscribe requests. We do not sell the list or use email addresses for fingerprinting.
CONTACT MESSAGES
If you use the contact form, your name, email address and message are sent to the configured mail provider so the team can read and answer your request. Contact messages are not added to the notice list or stored in its database. The mail provider may retain messages under its own operational and legal policies.
CONFIRMATION AND UNSUBSCRIBE
Joining requires confirmation through a time-limited link. Every marketing email includes an unsubscribe link. An unsubscribe request changes the record status so further updates stop; a minimal suppression record may remain to make that choice effective.
ANALYTICS
Analytics are disabled by default. If enabled, the site uses privacy-conscious aggregate event measurement without email addresses in event payloads and without fingerprinting. Steam conversion is primarily measured through UTM parameters on official store links.
RETENTION, SECURITY AND CONTACT
Access is limited to operating the site. Rate-limit keys and tokens are hashed; server credentials are not sent to browsers. Retention periods and this notice should receive jurisdiction-specific legal review before production. To ask a privacy question, use the contact form.