Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains how Qloud Games Pty Ltd collects, uses, shares, and protects your personal information when you use Loftia, and the rights you have over that information.

It applies to the Loftia website (loftia.gg), the Loftia game and account system, and any beta or playtest programs we run (collectively, the “Service”).

By using the Service you agree to the handling of your information as described in this Privacy Policy. If you do not agree, please do not use the Service.

Who We Are

The data controller responsible for your personal information is:

Qloud Games Pty Ltd (ACN 658 781 885) Level 3, 55 Pyrmont Bridge Road, Pyrmont, NSW, Australia 2009 Email: [email protected]

References to “we,” “us,” and “our” mean Qloud Games Pty Ltd.

Information We Collect

We collect only the information we need to run the Service. The categories are:

  • Account information — your email address and your chosen display name.
  • In-game information — data tied to your account, including your character and customization choices, inventory and items, progression, and playtime.
  • Kickstarter backer information — if you backed Loftia on Kickstarter, your name and pledge details, and (for backers who ordered physical rewards such as plush toys) the shipping address needed to deliver them.
  • Marketing list information — if you sign up for our mailing list, your email address.
  • Support communications — if you contact us for support, primarily through our Discord server, the messages and information you share so we can help you.
  • Technical and usage information — limited technical data collected automatically when you use the Service, such as your IP address, device and browser type, and basic diagnostic information, which we use to operate, secure, and troubleshoot the Service.

We do not collect payment or financial information. Loftia has not yet been sold or made commercially available; when paid features launch, payments will be handled by the relevant store or payment provider, and we will update this policy before that processing begins.

We do not intentionally collect special categories of data (such as health, religious, or biometric data), and we ask that you do not share such information through the Service.

Cookies

We use a single category of cookies: strictly necessary cookies that keep you logged in and maintain your authentication session while you use the Service. These are required for the account system to function.

We do not use advertising cookies, advertising pixels, or third-party analytics, tracking, or session-recording technologies.

Because strictly necessary cookies are exempt from consent requirements under EU/UK rules, we do not show a cookie consent banner. If this changes in the future, we will update this policy and add a consent mechanism where required.

How We Use Your Information and Our Legal Bases

For users in the EU, UK, and other regions that require a legal basis for processing, we rely on the following bases:

  • To create and operate your account and run the game and beta (account and in-game information) — performance of a contract.
  • To provide customer support (support communications and account information) — performance of a contract and our legitimate interests.
  • To fulfil Kickstarter rewards, including shipping physical items (backer name and shipping address) — performance of a contract.
  • To secure the Service, prevent fraud and abuse, and improve and troubleshoot the Service (technical and usage information, account information) — our legitimate interests.
  • To send marketing emails and game news (marketing list email) — your consent, which you can withdraw at any time.
  • To comply with legal obligations — compliance with a legal obligation.

Where we rely on legitimate interests, we have weighed those interests against your rights and concluded the processing is proportionate. You can object to this processing at any time (see Your Rights).

How We Share Your Information

We do not sell your personal information, and we do not share it for advertising. We share information only in these limited circumstances:

Service providers. We use a small number of trusted providers who process data on our behalf, under contract and only on our instructions:

  • Amazon Web Services (AWS) — hosting and database infrastructure.
  • Twilio SendGrid — sending transactional and marketing emails.

Legal and safety reasons. We may disclose information where we believe in good faith it is necessary to comply with a legal obligation, enforce our terms, protect the rights, property, or safety of Loftia, our players, or the public, or investigate possible wrongdoing.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

International Data Transfers

We are based in Australia, and our hosting infrastructure (AWS) is located in the United States. This means that if you are located in the EEA, the UK, or elsewhere, your personal information will be transferred to and processed in the United States and Australia.

Neither the United States (in our configuration) nor Australia benefits from a full EU adequacy decision for these transfers. Where we transfer personal data from the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum / International Data Transfer Agreement for UK data) as the safeguard for those transfers. You can request more information about these safeguards using the contact details below.

How Long We Keep Your Information

We keep personal information only as long as we need it for the purposes described in this policy, or as required to meet legal obligations, resolve disputes, and enforce our agreements.

Beta accounts. Information associated with closed beta accounts is retained for the duration of the beta program. After the beta concludes, beta-only data is deleted or anonymised, unless your account carries over to the live game, in which case it is retained under the standard terms above.

Marketing list. We keep your email on our marketing list until you unsubscribe.

When information is no longer needed, we delete or anonymise it.

Security

We take reasonable technical and organisational measures to protect your information, including secure hosting and restricted access. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee its absolute security.

Children’s Privacy

Loftia’s content is designed to be family-friendly. However, you must be at least 13 years old to create an account or otherwise use the Service. The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact [email protected] and we will delete it.

Where additional protections apply to users under 18 — including under Australia’s forthcoming Children’s Online Privacy Code — we will comply with those requirements, including any applicable age-assurance and child-protection measures.

Your Rights

You have rights over your personal information. How to exercise them, and the specific rights available, depend on where you live. In all cases, contact us at [email protected] to make a request. We may need to verify your identity before we act, and we will respond within the timeframes required by applicable law.

EU and UK (GDPR / UK GDPR)

If you are in the EEA or the UK, you have the right to:

  • Access a copy of the personal information we hold about you;
  • Rectify inaccurate or incomplete information;
  • Erase your information (“right to be forgotten”);
  • Restrict or object to certain processing, including direct marketing;
  • Data portability — receive your information in a structured, machine-readable format;
  • Withdraw consent at any time, where we rely on consent; and
  • Lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).

We will respond to your request within one month, extendable by up to two further months for complex requests, in which case we will tell you within the first month.

California and Other US States

If you are a California resident (and, where similar laws apply, a resident of other US states), you have the right to know what personal information we collect and how we use it, to request access to and deletion or correction of your information, and to not be discriminated against for exercising these rights.

We do not sell or share your personal information as those terms are defined under California law, and we do not process sensitive personal information for the purposes that would trigger a right to limit its use. We will respond to verifiable requests within 45 days, extendable where permitted.

Australia

If you are in Australia, you may request access to and correction of your personal information under the Australian Privacy Principles. If you have a concern about how we handle your information, please contact us first. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

As noted in the International Data Transfers section, we disclose personal information overseas (to the United States), consistent with APP 8.

Marketing Communications

We will only send you marketing emails if you have opted in. Every marketing email includes an unsubscribe link, and you can opt out at any time. Unsubscribing from marketing does not stop essential service or account-related messages.

Links to Other Websites

The Service may contain links to other websites that are not operated by us (such as our social media pages). We have no control over, and are not responsible for, the content, privacy policies, or practices of any third-party sites, and we encourage you to review the privacy policy of every site you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the “Last updated” date. For material changes, we will take additional steps to notify you where required. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or how we handle your information, you can contact us:

Qloud Games Pty Ltd Level 3, 55 Pyrmont Bridge Road, Pyrmont, NSW, Australia 2009

[email protected]