Privacy Policy
Effective: February 2026
Serbek Technologies, LLC ("we", "us") operates spriteCart (https://spritecart.retroactive.cloud). This policy describes how we collect, use, and protect your information.
1. Information We Collect
Account data (via st-identity single sign-on)
- Your handle and account id
- Account creation and last-seen timestamps
- Sign-in credentials are held by the identity service (identity.repls.cloud), never by spriteCart
Session data
- A session cookie (Secure, HttpOnly, SameSite=Lax) kept while you are signed in
Published content
- Cart binaries, titles, and descriptions you publish
- Cart preview screenshots
- Published carts are publicly viewable by design
Technical data
- IP address, used transiently for rate limiting and abuse prevention
2. How We Use Your Information
- Operate the studio, player, and cart gallery
- Attribute published carts to their authors
- Prevent abuse (rate limiting, spam protection)
- Respond to messages you send via the contact form
3. Third-Party Services
- st-identity (Serbek Technologies) — Single sign-on authentication
- Linode (Akamai) — Hosting and object storage for published carts and screenshots (Privacy Policy)
- Resend — Contact-form email delivery (Privacy Policy)
4. Data Retention
Your data is retained for the lifetime of your account or until you request deletion. You may request deletion by contacting us via our contact page.
5. Your Rights
You may:
- Access your account information
- Update your information
- Request deletion of your account and associated data
6. Cookies
We use a session cookie for authentication. This is a functional cookie required for the site to work. We do not use tracking cookies or third-party analytics.
7. Security
We use industry-standard security measures including encrypted passwords (Argon2), HTTPS, and secure session management. However, no method of electronic storage is 100% secure.
8. Jurisdictional Limitation
Our services are intended for use in jurisdictions where our data handling practices, as outlined in this Privacy Policy, are fully compliant with local laws. By accessing or using our services, you warrant that your use does not violate any local, state, or national privacy regulations. If this Privacy Policy is inconsistent with the privacy laws of your country of residence, you must immediately cease all use of our services. We reserve the right to restrict access to our services for users in certain jurisdictions to ensure compliance with applicable data protection laws.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
10. Contact
For privacy-related questions, visit our contact page.