This Privacy Policy explains how Qloud Games Pty Ltd collects, uses, shares, and protects your personal information when you use Loftia, and the rights you have over that information.
It applies to the Loftia website (loftia.gg), the Loftia game and account system, and any beta or playtest programs we run (collectively, the “Service”). It does not include our discord Modmail bot which is governed by https://loftia.gg/discord-privacy.
This policy explains, plainly, what we do with your information. Where the law needs your permission — like advertising cookies or marketing emails — we ask for it separately, and you can change your mind at any time.
The data controller responsible for your personal information is:
Qloud Games Pty Ltd (ACN 658 781 885) Level 3, 55 Pyrmont Bridge Road, Pyrmont, NSW, Australia 2009 Email: [email protected]
References to “we,” “us,” and “our” mean Qloud Games Pty Ltd.
We collect only the information we need to run the Service. The categories are:
We do not collect payment or financial information. Loftia has not yet been sold or made commercially available; when paid features launch, payments will be handled by the relevant store or payment provider, and we will update this policy before that processing begins.
We do not intentionally collect special categories of data (such as health, religious, or biometric data), and we ask that you do not share such information through the Service.
We use cookies and similar browser storage technologies in three categories:
What we do depends on where you are. In the UK, the EU/EEA, Norway, Iceland, Liechtenstein, Brazil, South Korea, Thailand and China — and wherever we cannot reliably tell where you are — nothing optional is stored or loaded until you accept it, and a consent banner asks you on your first visit. Everywhere else, optional cookies may run from the moment you arrive and you can switch them off at any time from Your Privacy Options, linked in the footer of every page.
Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of optional cookies and of any sharing of your information for cross-context behavioural advertising, without you having to do anything else. A choice you make yourself on our site overrides the signal on that browser, and we tell you when we have seen it before you make that choice.
For full details, including the names and lifetimes of individual cookies, see our Cookie Policy.
For users in the EU, UK, and other regions that require a legal basis for processing, we rely on the following bases:
Where we rely on legitimate interests, we have weighed those interests against your rights and concluded the processing is proportionate. You can object to this processing at any time (see Your Rights).
We do not sell your personal information for money. We share information only in these limited circumstances:
Service providers. We use a small number of trusted providers who process data on our behalf, under contract and only on our instructions:
Advertising partners. Where advertising measurement is enabled and permitted for you, online identifiers, your IP address and the pages you viewed are disclosed to our advertising partners (currently Meta and Google) so that we can measure whether our adverts work. Under California law this counts as “sharing” for cross-context behavioural advertising, even though no money changes hands. You can stop it at any time at Your Privacy Options, and we instruct our partners to apply limited-data-use mode where a Global Privacy Control signal is present. When you complete a sign-up, we also share a hashed version of your email address with our advertising partners so they can measure that their advert led to your registration. Hashing converts your email into a coded string before it leaves us, so we do not share it in readable form; it is used only to check whether an advert worked. We do this only where you have accepted marketing cookies, and we never share your readable email, your account identifier, or anything you do inside the game.
Legal and safety reasons. We may disclose information where we believe in good faith it is necessary to comply with a legal obligation, enforce our terms, protect the rights, property, or safety of Loftia, our players, or the public, or investigate possible wrongdoing.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We are based in Australia, and our hosting infrastructure (AWS) is located in the United States. This means that if you are located in the EEA, the UK, or elsewhere, your personal information will be transferred to and processed in the United States and Australia.
Neither the United States (in our configuration) nor Australia benefits from a full EU adequacy decision for these transfers. Where we transfer personal data from the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum / International Data Transfer Agreement for UK data) as the safeguard for those transfers. You can request more information about these safeguards using the contact details below.
We keep personal information only as long as we need it for the purposes described in this policy, or as required to meet legal obligations, resolve disputes, and enforce our agreements.
Beta accounts. Information associated with closed beta accounts is retained for the duration of the beta program. After the beta concludes, beta-only data is deleted or anonymised, unless your account carries over to the live game, in which case it is retained under the standard terms above.
Marketing list. We keep your email on our marketing list until you unsubscribe.
Research surveys. Identifiable survey responses are retained for up to 24 months. De-identified aggregate or response-level research data may be retained for longer to preserve the validity of product research.
Advertising and analytics. Data collected through advertising and analytics cookies is kept for the lifetimes set out in our Cookie Policy — for example, up to 90 days for advertising cookies and up to 2 years for analytics cookies — or until you opt out or withdraw your consent, whichever comes first.
When information is no longer needed, we delete or anonymise it.
We take reasonable technical and organisational measures to protect your information, including secure hosting and restricted access. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee its absolute security.
Loftia’s content is designed to be family-friendly. However, you must be at least 13 years old to create an account or otherwise use the Service. The Service is not directed to children under 13, and we do not knowingly collect personal information from them.
If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact [email protected] and we will delete it.
Where additional protections apply to users under 18 — including under Australia’s forthcoming Children’s Online Privacy Code — we will comply with those requirements, including any applicable age-assurance and child-protection measures.
You have rights over your personal information. How to exercise them, and the specific rights available, depend on where you live. In all cases, contact us at [email protected] to make a request. We may need to verify your identity before we act, and we will respond within the timeframes required by applicable law.
If you are in the EEA or the UK, you have the right to:
The legal basis for storing or reading advertising and analytics cookies on your device is your consent, and nothing optional is stored or loaded before you give it. You can withdraw that consent at any time from Your Privacy Options without affecting anything we did while it was in force.
We will respond to your request within one month, extendable by up to two further months for complex requests, in which case we will tell you within the first month.
If you are a California resident (and, where similar laws apply, a resident of other US states), you have the right to know what personal information we collect and how we use it, to request access to and deletion or correction of your information, and to not be discriminated against for exercising these rights.
We do not sell your personal information for money. Where advertising measurement is enabled, we do “share” personal information as California law defines that term: online identifiers and information about your activity on our site are disclosed to an advertising partner for cross-context behavioural advertising. The categories involved are identifiers (including cookie identifiers, IP address, and a hashed form of your email address) and internet activity information.
You have the right to opt out of that sharing, and you can exercise it in three ways: from Your Privacy Options, linked in the footer of every page; by sending a Global Privacy Control signal from your browser, which we honour as a valid opt-out request without further action from you; or by emailing [email protected]. We will not discriminate against you for exercising any of these rights — your account, rewards and access to the Service are unaffected.
We do not knowingly sell or share the personal information of anyone under 16. We do not process sensitive personal information for the purposes that would trigger a right to limit its use. We will respond to verifiable requests within 45 days, extendable where permitted.
If you are in Australia, you may request access to and correction of your personal information under the Australian Privacy Principles. If you have a concern about how we handle your information, please contact us first. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
As noted in the International Data Transfers section, we disclose personal information overseas (to the United States), consistent with APP 8.
We will only send you marketing emails if you have opted in. Every marketing email includes an unsubscribe link, and you can opt out at any time. Unsubscribing from marketing does not stop essential service or account-related messages.
The Service may contain links to other websites that are not operated by us (such as our social media pages). We have no control over, and are not responsible for, the content, privacy policies, or practices of any third-party sites, and we encourage you to review the privacy policy of every site you visit.
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last updated” date. For material changes, we will take additional steps to notify you where required. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or how we handle your information, you can contact us:
Qloud Games Pty Ltd Level 3, 55 Pyrmont Bridge Road, Pyrmont, NSW, Australia 2009
