Privacy Policy.

Last updated: July 5, 2026

1. Introduction and Our Privacy Stance

Uncharted Works LLC ("Uncharted Works," "we," "us," or "our") builds software products and operates the account and licensing infrastructure that supports them. This Privacy Policy explains what personal information we collect, why we collect it, how we handle it, and the choices and rights you have.

Our approach to privacy starts from a single principle: data minimization. Across our accounts, licensing, store, and support systems, we collect only the information we need to operate the service, validate licenses, fulfill orders, provide support, and meet our legal obligations.

To be clear and direct about how we handle personal information in those systems:

• We do not use the personal data you give us to hold an account, license our software, buy from our store, or contact support for marketing or advertising.
• We do not sell or share that account, licensing, store, or support data.
• The account, licensing, store, and support systems have no advertising partners, and we run no behavioral tracking or advertising cookies on our websites.

One important exception — our games. Some of our consumer products, including free, ad-supported games, display third-party advertising and use crash-reporting and analytics tools, which involves sharing certain device information with the providers of those tools. This is different from the data-minimizing infrastructure described above, and it is described in full in Section 12 (Advertising-Supported Games), which also covers the additional protections we apply to children and minors. See Sections 12 and 6.

If a piece of information is not needed for the purpose at hand, we try not to collect it in the first place. The sections below describe exactly what we collect and how it is used.

For your agreement with us about using our products and services generally, see our Terms of Service. For the license that governs a specific software product, see that product's end user license agreement (EULA). For purchases, billing, and refunds, see the Store Terms of Sale and Refund Policy.

2. Who We Are and Scope of This Policy

Uncharted Works LLC is a Texas limited liability company; our contact information is in Section 14.

Uncharted Works is a multi-product company. Our account system is shared infrastructure that supports all of our products.

This Privacy Policy applies to personal information we handle through our websites, our account and licensing systems, and our products. Some products have practices that differ from our core infrastructure — most notably our ad-supported games — and those are described in Section 12 of this policy. Where a third party acts as an independent controller of your information (for example, our payment processor for billing and tax data), we identify that party and its role in the relevant section below.

3. Information We Collect

The categories below are the complete list of personal information we collect through our websites, accounts, licensing, store, and support systems. We do not collect categories of information beyond those described here in connection with those systems. Personal information collected in our games — including device and advertising identifiers, crash data, and gameplay analytics handled by third-party providers — is described in Section 12, not in this section.

3.1 Account Data

When you create and use an Uncharted Works account, we collect:

• Your email address;
• Your display name; and
• Your password, which is stored only as an argon2id hash. We never store your password in plaintext and cannot recover it.

3.2 License Validation Data

When you use our desktop software, the application communicates with our account server to validate your license. In connection with this, we collect:

• A device fingerprint, derived from your operating system type, a machine identifier, and an install-time UUID generated when the app is first installed;
• The device name;
• The app version;
• Your IP address; and
• Validation timestamps (the times license checks occur).

3.3 Session Data

We use a single, strictly necessary functional session cookie, scoped to the .unchartedworksllc.com domain, to keep you signed in and to operate the account experience across our sites. We do not use tracking, analytics, or advertising cookies. See Section 5 for more detail.

3.4 Approximate Location

We derive an approximate location from your IP address. This lookup is performed on our own server using a local MaxMind GeoLite2 database. Your IP address is not transmitted to any third-party geolocation API or service for this purpose.

3.5 Support Correspondence

If you email our support address, we process that correspondence (including your email address and the contents of your message) in order to respond to and resolve your inquiry. Support correspondence is handled through Microsoft 365 (see Section 6).

3.6 Purchase and Transaction Records

When you buy a product, we maintain purchase and transaction records associated with your account. Payments are processed by LemonSqueezy, which acts as our Merchant of Record. LemonSqueezy collects your billing details directly. Uncharted Works does not store payment card numbers. See Sections 6 and 9 for more detail.

3.7 No Other Telemetry in These Systems

Beyond the data described above, our websites, accounts, licensing, store, and support systems do not collect telemetry or analytics, and do not conduct behavioral tracking. Our ad-supported games are different and use analytics and crash-reporting tools; see Section 12.

3.8 No Sensitive Personal Information

We do not collect or process "sensitive personal information" as that term is defined under the California Privacy Rights Act (CPRA) or comparable categories of "sensitive data" under other US state privacy laws (for example, government identifiers, precise geolocation, biometric data, racial or ethnic origin, health data, or financial account credentials). The approximate, city- or region-level location we derive (see Section 3.4) is not precise geolocation. Because we do not collect sensitive personal information, there is no processing of it for you to limit. This section describes our accounts, licensing, store, support, and websites; in our ad-supported games we likewise do not collect precise geolocation, biometric identifiers, or other sensitive data categories, and the identifiers used there for advertising and analytics are described in Section 12.

4. How We Use Your Information

We use the information described in Section 3 only for the following purposes:

1. To operate the service — to create and maintain your account, authenticate you, and provide the products and features you use.
2. To validate licenses — to confirm that a license is valid for the device and app version in use, and to enforce license terms (including offline grace periods).
3. To process orders — to fulfill purchases, deliver downloads and license entitlements, and maintain transaction records.
4. To provide support — to respond to your inquiries and resolve issues.
5. To maintain security — to protect accounts, prevent fraud and abuse, and safeguard our systems and your data.
6. To comply with the law — to meet our legal, tax, accounting, and regulatory obligations and to respond to lawful requests.

We do not use the personal information collected through our accounts, licensing, store, support, and websites for marketing, advertising, profiling for advertising, or any form of behavioral tracking, and we do not sell or share it. Advertising and analytics in our ad-supported games are handled as described in Section 12, which also explains the choices and controls available to you and, for minors, the protections we apply.

Automated decision-making. License validation is an automated process: when the application checks in, our server automatically confirms whether a valid license entitles the device and app version in use, and applies the offline grace period. This affects only your ability to use the software under your license and does not produce legal or similarly significant effects of the kind addressed by data protection laws on solely automated decisions. We do not use automated profiling to make decisions that produce legal or similarly significant effects about you, and we do not profile you for advertising. If you have questions about a license-validation outcome, you can contact us at support@unchartedworksllc.com.

5. Cookies

On our websites (including the account experience), we use a single strictly necessary functional session cookie, scoped to .unchartedworksllc.com. Its only purpose is to keep you signed in and to operate the account experience across our sites.

We do not use analytics cookies, tracking cookies, or advertising cookies on our websites. Because the only cookie we set on our sites is strictly necessary to provide the service you have requested, no cookie consent banner is required for the websites, and we do not display one.

Our ad-supported games are separate. They use third-party advertising, crash-reporting, and analytics tools that rely on in-app identifiers rather than website cookies, and — where the law requires it — they present their own consent controls. Those practices, and your choices, are described in Section 12.

Global Privacy Control and Do Not Track. Some browsers offer a "Do Not Track" (DNT) setting or send a Global Privacy Control (GPC) signal that asks websites not to sell or share personal information or use it for cross-context behavioral advertising. On our websites, we do not sell or share personal information or use cross-context behavioral advertising, so there is nothing for such a signal to opt you out of there. Where any of our services — such as our ad-supported games — do involve activity that a valid opt-out signal addresses, we treat that signal as a request to opt out of the sale or sharing of, and targeted advertising using, personal information to the extent the signal and applicable law require. See Sections 10.2, 10.3, and 12.

6. Third Parties and Sub-Processors

We share personal information only with the service providers listed below, each of which handles data on our behalf or in its own defined role, and only to the extent necessary for the stated purpose. Apart from the advertising and analytics used in our ad-supported games (described in the final row, and in full in Section 12), we do not sell or share personal information with any other parties.

Geolocation note. We determine approximate location locally using a MaxMind GeoLite2 database on our own server. Because this lookup does not transmit your IP address to MaxMind or any other external geolocation service, MaxMind is not a sub-processor of your personal data and is not listed above. This describes location handling on our own servers; approximate location in our ad-supported games is handled by the games' advertising and analytics providers and is described in Section 12.

We may also disclose personal information when required by law, to respond to lawful requests from public authorities, to enforce our agreements (including the Terms of Service and any applicable EULA), or to protect the rights, property, or safety of Uncharted Works, our users, or others.

7. International Data Transfers

Uncharted Works is based in the United States, and our servers and service providers may process and store personal information in the United States and other countries. If you access our service from the European Economic Area (EEA), the United Kingdom, or another region with data protection laws that differ from those of the United States, please be aware that your information may be transferred to, stored in, and processed in a country that may not provide the same level of data protection as your home jurisdiction.

For individuals in the EEA or the UK, we transfer personal information to the United States because the transfer is necessary to provide the service you request and to perform our agreement with you. Where our service providers process that information, they do so under their own data-protection commitments and the transfer safeguards they maintain under applicable law. You may contact us at support@unchartedworksllc.com with questions about how your information is transferred and protected.

8. Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy:

• Account data is retained while your account is active and for as long as needed to provide the service.
• Financial and transaction records are retained for seven (7) years to meet our legal, tax, and accounting obligations.
• Games data — device and advertising identifiers, crash diagnostics, and analytics collected in our ad-supported games — is retained only for as long as needed for the purpose it was collected for (such as showing an ad, diagnosing a crash, or measuring performance), and in no case longer than 90 days, after which it is deleted or de-identified. Details are in Section 12.
• Children's and minors' data is handled under a written data-retention policy, consistent with the Children's Online Privacy Protection Act (COPPA), the GDPR, and comparable laws: we collect the least information necessary, keep it only as long as reasonably needed for the specific purpose it was collected for and in no case longer than 90 days, and then delete it. We do not retain it indefinitely, and a parent or guardian can ask us to delete a child's information at any time (see Sections 11 and 12).
• After the applicable retention period, we delete or anonymize personal information, except where we are legally required to retain it for longer.

When you close your account, we delete or anonymize your account data except for information we must retain for legal, tax, or accounting reasons (for example, transaction records within the seven-year period).

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, appropriate to the nature of the data and the risks involved. These include:

• Passwords are hashed using argon2id and are never stored in plaintext. We cannot recover your password.
• Data in transit is protected using HTTPS (TLS).
• License tokens are encrypted at rest on your device.
• Access controls limit who can reach personal information on our systems.
• A written information security program and a written data-retention policy govern how we protect personal information and how long we keep it, including information collected from children and minors.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Security incidents. In the event of a personal data breach, we will assess the incident and, where required by applicable law, notify affected individuals and the relevant supervisory or regulatory authorities within the timeframes the law requires. If you have reason to believe your account or data has been compromised, please contact us promptly at support@unchartedworksllc.com.

10. Your Rights

The rights available to you depend on where you live and the applicable law. Regardless of jurisdiction, you may contact us at support@unchartedworksllc.com to exercise any right described below.

How to make a request. Send your request to support@unchartedworksllc.com and tell us which right you wish to exercise. Because most of the personal information we hold is tied to your account, the fastest way for us to act is to verify the request against your account.

Verifying your identity. To protect your information, we will take reasonable steps to verify your identity before acting on a request, typically by confirming control of the account email tied to the information. We may ask for additional information if we cannot verify you with what we already hold. We will not use information you provide for verification for any unrelated purpose.

Authorized agents. Where permitted by applicable law, you may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of authorization and may still ask you to verify your own identity directly.

Response time. We will respond within the timeframes required by applicable law. Under US state privacy laws this is generally within 45 days (extendable by an additional 45 days where permitted, with notice); under the GDPR and UK GDPR, generally within one month (extendable by up to two further months for complex requests, with notice).

Fees and non-discrimination. We do not charge a fee to act on a valid request unless it is manifestly unfounded, excessive, or repetitive, as permitted by law. We will not discriminate against you for exercising any of your privacy rights.

When we may decline. In limited cases we may be unable to fully honor a request — for example, where we are legally required to retain information (such as financial records within the seven-year retention period in Section 8), where fulfilling it would adversely affect the rights of another person, or where an exception under applicable law applies. If we decline a request in whole or in part, we will explain why, except where the law prohibits us from doing so.

10.1 EEA and UK Residents (GDPR and UK GDPR)

If you are in the EEA or the UK, you have the following rights with respect to your personal data:

• Right of access — to obtain confirmation of whether we process your personal data and a copy of it.
• Right to rectification — to have inaccurate or incomplete personal data corrected.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restriction of processing — to limit how we process your personal data in certain circumstances.
• Right to data portability — to receive certain personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
• Right to object — to object to certain processing of your personal data.

Lawful bases. We process your personal data under the following lawful bases:

• Performance of a contract — to create and operate your account, validate licenses, and fulfill orders.
• Legal obligation — to retain financial and transaction records and to comply with applicable law.
• Legitimate interests — to secure our systems, prevent fraud and abuse, and operate our service efficiently, balanced against your rights and interests.

International transfers. For information about transfers of your personal data outside the EEA or the UK, see Section 7.

Complaints. You have the right to lodge a complaint with your local data protection supervisory authority. We would, however, appreciate the chance to address your concerns first, so we encourage you to contact us at support@unchartedworksllc.com.

Data Protection Officer and EU/UK representative. We have not appointed a Data Protection Officer, as we are not required to do so under the GDPR or UK GDPR given the limited scope and nature of our processing. We have likewise not appointed an Article 27 representative in the EU or UK. We will appoint a representative and identify them here if and when applicable law requires it. In the meantime, you can raise any data protection matter with us directly at support@unchartedworksllc.com.

10.2 California Residents (CCPA and CPRA)

If you are a California resident, you have the following rights with respect to your personal information:

• Right to know — to request the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to delete — to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct — to request correction of inaccurate personal information.
• Right to opt out of the sale or sharing of personal information.

Sale, sharing, and targeted advertising. We do not sell or share, and do not use for cross-context behavioral advertising, the personal information collected through our accounts, licensing, store, support, and websites. Our ad-supported games are different: the third-party advertising and analytics used in those games may be considered a "sale" or "sharing" of personal information (such as device and advertising identifiers), or "cross-context behavioral advertising," under the CCPA and CPRA. You have the right to opt out. You can opt out by using the in-game privacy controls, by turning on a Global Privacy Control (GPC) signal in your browser, by using your device's "Limit Ad Tracking" or advertising-ID controls, or by contacting us at support@unchartedworksllc.com. We honor valid GPC signals. For anyone we know to be a minor, we do not sell their personal information or use it for targeted advertising, regardless of any signal (see Sections 11 and 12).

We will not discriminate against you for exercising any of your privacy rights.

Categories we collect. Under the CCPA/CPRA category framework, the personal information we collect is limited to: identifiers (such as email address, display name, IP address, and device identifiers described in Section 3.2); commercial information (purchase and transaction records); internet or other electronic network activity (limited to license-validation check-ins and timestamps; we do not track your browsing); and geolocation data (only the approximate, non-precise location derived locally as described in Section 3.4). We do not collect sensitive personal information (see Section 3.8). The sources, business purposes, and categories of third parties for each are described in Sections 3, 4, and 6 of this policy. In our ad-supported games we also process identifiers (device and advertising identifiers), internet or other electronic network activity (in-game and analytics events), and geolocation data (approximate location); those categories, their sources, purposes, and the third parties involved are described in Section 12.

Opt-out signals. We honor valid Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of, and targeted advertising using, personal information. Our accounts, licensing, store, support, and websites do not sell or share personal information or use cross-context behavioral advertising, so there is nothing there to opt out of; where our ad-supported games involve a sale, sharing, or targeted advertising, the opt-out methods above and in Section 12 apply.

"Shine the Light" (California Civil Code section 1798.83). California residents may request information about a business's disclosure of personal information to third parties for those third parties' direct marketing purposes. Our accounts, licensing, store, support, and websites make no such disclosures. To the extent advertising in our ad-supported games could implicate this law, you may opt out as described above and in Section 12, and on request we will provide the information this law requires.

Merchant of Record note. For purchases, LemonSqueezy acts as the Merchant of Record and is the controller for billing and tax data. Requests relating to billing or tax information held by LemonSqueezy may need to be directed to LemonSqueezy. We will help direct you as needed.

10.3 Other US State Residents

If you are a resident of another US state with a comprehensive privacy law (for example, Virginia, Colorado, Connecticut, Utah, Texas, or others as they take effect), you may have rights similar to those described above, including rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the sale of personal information, targeted advertising, and certain profiling. Our accounts, licensing, store, support, and websites do not sell personal information, engage in targeted advertising, or profile you in a way that would require such an opt-out. Our ad-supported games do involve third-party advertising and analytics that may constitute a "sale" or "targeted advertising" under these laws; you may opt out using the methods in Section 10.2 and Section 12, and we honor valid universal opt-out signals. For minors, we apply the stricter protections described in Sections 11 and 12, including not using their personal information for targeted advertising, consistent with a growing number of state laws that restrict or prohibit targeted advertising to minors.

Right to appeal. Where applicable state law provides a right to appeal a refusal to act on your request, you may appeal by replying to our response or by contacting us again at support@unchartedworksllc.com with the subject line "Privacy Appeal." We will respond to your appeal within the timeframe required by the applicable law and will explain our decision. If your appeal is denied, you may contact your state's Attorney General to submit a complaint where that option is available.

11. Children's and Minors' Privacy

Different parts of what we offer are made for different audiences, so we treat children's and minors' privacy in two ways.

Accounts, licensing, store, and support. These systems are intended for users who are at least 18 years old, or at least 13 years old with the verifiable consent of a parent or legal guardian. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through them.

Our games. Some of our games are made for a general, all-ages audience and are enjoyed by children. For those games we design for children's privacy from the start and act in good faith to comply with the Children's Online Privacy Protection Act (COPPA), the GDPR's protections for children (including the parental-consent ages set by individual countries), the UK's Age Appropriate Design Code, and other applicable laws. In practice this means:

• No behavioral or targeted advertising to children or minors. Advertising shown to players we know to be children or minors is limited to contextual, non-personalized advertising, and we do not sell or share their personal information for cross-context behavioral advertising.
• Data minimization. We collect the least personal information necessary to run the game, show non-personalized ads, and keep the game working, and we do not condition play on providing more than is reasonably necessary.
• Verifiable parental consent. Where the law requires it — including before collecting personal information from a child, or disclosing it to third parties for their own purposes — we obtain verifiable parental consent, and we give parents a way to review, delete, and stop further collection of their child's information.
• A written retention policy governs how long children's and minors' information is kept and when it is deleted (see Section 8).

The operational detail for our games — what they collect, the advertising and analytics tools involved, and the choices available to players and parents — is in Section 12.

If you believe a child has provided us with personal information in a way that is not consistent with this policy (including Section 12), please contact us at support@unchartedworksllc.com, and we will take appropriate steps to review and delete that information.

12. Advertising-Supported Games (Including Children's Privacy)

Some of our consumer products are free, advertising-supported games made for a general, all-ages audience. Because a company-wide account is not required to play them, and because they involve advertising and analytics that the rest of our infrastructure does not, this section describes how they handle personal information. Where this section and the rest of this policy differ, this section governs for our games.

12.1 What Our Games Collect

Through third-party tools in our games, we and those tools may collect:

• Device and advertising identifiers (such as an Android Advertising ID or Apple IDFA), used to show and cap advertising and to prevent fraud;
• Approximate location (city- or region-level, from IP address or device settings), used for ad delivery, fraud prevention, and applying the right regional rules — not precise GPS location;
• Crash diagnostics (device model, operating-system version, and technical state at the time of a crash); and
• Gameplay and analytics events (for example, levels started or completed, session length, and feature usage).

We do not collect precise geolocation, biometric identifiers, government identifiers, contacts, photos, or microphone or camera input through our games, and we do not require players to provide personal details to play.

12.2 Advertising

Our games display advertising served by third-party advertising networks (see the advertising-and-analytics row in Section 6).

• Personalized advertising may be shown only to adults who are permitted to receive it under applicable law and their choices. It uses advertising identifiers and may involve a "sale," "sharing," or "targeted advertising" as those terms are defined under US state privacy laws.
• Contextual, non-personalized advertising is based on the game and general context rather than a profile of the person. This is the only advertising shown to anyone we know or treat as a child or minor.

You can opt out of personalized advertising at any time using the controls in Section 12.4.

12.3 Crash Reporting and Analytics

We use third-party crash-reporting and analytics tools to keep our games stable and to measure performance. These tools collect the diagnostic and event data in Section 12.1. We configure them to minimize data and, for children and minors, to disable advertising-related identifiers and personalization.

12.4 Children and Minors

Our children's and minors' privacy commitments — no behavioral or targeted advertising, data minimization, verifiable parental consent, parental review and deletion, and a written retention policy — are set out in Section 11 and apply in full to our games. One point is specific to how advertising works in the games: for children, we limit collection to what COPPA permits — for example, identifiers used only to support the internal operations of the game (keeping it working, capping ad frequency, and preventing fraud) and to serve contextual ads — and we do not use this data to build advertising profiles or track children across services. A parent or legal guardian may exercise the rights in Section 11 by contacting us (Section 14).

12.5 Your Choices and Controls

• Device advertising controls — reset or limit your advertising identifier, or turn on "Limit Ad Tracking" / "Opt out of Ads Personalization," in your device settings.
• In-game privacy settings — where a game offers them, use them to opt out of personalized advertising.
• Global Privacy Control — we honor valid GPC signals as a request to opt out of the sale or sharing of, and targeted advertising using, personal information.
• Contact us — you can also opt out, or make a rights request, using Section 14. For children and minors, we apply these protections by default.

Data collected in our games is retained only for as long as needed for the purpose it was collected for, and in no case longer than 90 days, after which it is deleted or de-identified (Section 8); it is not combined with your account, licensing, store, or support information. Your regional rights, and how to exercise them, are described in Sections 10.1 through 10.3; a parent or legal guardian may exercise them on behalf of a child.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other reasons. When we make changes, we will revise the "Last updated" date at the top of this document and post the updated policy here.

If we make material changes, we will provide notice that is reasonable under the circumstances and required by applicable law — for example, by email or through the service — and, where the change requires it, in advance of the change taking effect or with your consent. We keep prior versions available on request. We encourage you to review this policy periodically.

Accessibility. We aim to keep this policy readable and accessible. If you use assistive technology and have difficulty accessing any part of this policy, or would like it in an alternative format, contact us at support@unchartedworksllc.com and we will work to provide the information in a way that meets your needs.

14. How to Contact Us and Exercise Your Rights

If you have questions about this Privacy Policy, or if you wish to exercise any of your privacy rights, please contact us:

Uncharted Works LLC
5900 Balcones Dr # 28587
Austin, TX 78731
support@unchartedworksllc.com

This Privacy Policy is governed by the laws of the State of Texas, without regard to its conflict-of-laws principles, except where applicable data protection law requires otherwise.