Privacy Policy

Who we are

MaskedWaffle is the controller of the personal information described in this policy. Contact privacy@maskedwaffle.com with privacy questions, requests or concerns.

Information we use

• Sign-in and membership: the name on your Patreon account, your Patreon account identifier, active MaskedWaffle tier, membership start date and, where available, next renewal date. We convert the account identifier into a one-way account key. We do not receive your Patreon password, payment-card details or Patreon email address.
• Artist profile: your artist name and any country, logo and social handles you choose to provide.
• Submissions: artwork files, filenames, card names, formats, categories, design choices, Evolution links, submission and review status, review reasons and records of the confirmations you make.
• Communications: your email address and message when you contact us.
• Technical and activity records: security and request logs, IP address, browser or device information, and an audit trail of important account, submission, review and administrative actions.
• Account exit feedback: an optional reason for leaving. This is stored without your artist ID, Patreon account key, profile details or asset identifiers.

We receive sign-in and membership information from Patreon. The rest comes from you, your use of the service, or the systems used to operate it.

How and why we use it

• Contract: to sign you in, apply submission allowances, operate the portal, review submissions, manage cards and Evolutions, publish accepted work in Trading Art Shop and provide artist attribution.
• Consent: to use an artwork for promotion when you select the separate optional promotional-use box. You may withdraw that permission for future use at any time.
• Legitimate interests: to secure and administer the service, prevent misuse, keep an accountable record of important actions, improve reliability, and establish or respond to copyright, ownership and other legal claims.
• Legal obligations: where we must keep or disclose information to comply with law, a court order or a valid request from an authority.

We do not use portal information for advertising profiles or sell personal information. We do not make decisions about you that have a legal or similarly significant effect using solely automated means.

What becomes public

If your artwork is accepted and released in Trading Art Shop, the artwork and card details will be visible to players. Your artist name and any logo, country and social handles in your profile may also be included so players can identify and find you. Do not put private contact information in those fields.

Who we share information with

We share information only as needed with Patreon for sign-in and membership verification; suppliers that provide hosting, database, private image delivery, security and technical support; and people helping us operate or legally advise the project. Accepted artwork and public artist profile details are also supplied through game distributors and platforms to players.

We may disclose information where required by law, to protect rights or safety, or as part of a genuine sale or reorganisation of the project subject to appropriate confidentiality and data protection. Some suppliers process information outside the UK. Where restricted transfer rules apply, we use an applicable adequacy decision or approved contractual safeguards.

How long we keep it

• The Patreon sign-in state expires after 10 minutes and the artist session after one hour. The temporary Patreon access token used to complete sign-in is not retained after the sign-in request.
• Live profiles and submissions are kept while they are used to operate the portal and game, unless you delete them or ask us to remove information we no longer need.
• Operational audit events are kept for two years. Limited licence, release and dispute records may be kept longer where needed to support released game builds, honour player access, or establish, exercise or defend legal claims.
• Published artwork and attribution may remain in game builds already released or supplied for release, as explained in the Artist Terms. Backups and technical logs expire under normal operational schedules.
• Anonymous account exit feedback is kept for no more than 12 months. Minimal non-personal asset identifiers may be held after account deletion until removal from the next game update and private image storage has completed.

Your choices and rights

To submit, you must provide the Patreon membership information used for access, an artist name, at least one social handle, and the required artwork details and confirmations. Without them, we cannot provide the submission service. Country and logo details are optional, as is promotional use. You can update your public artist profile, manage live submissions and delete your account in the portal. Account deletion stops new promotional use and queues released game data for removal from the next update. Signing out or cancelling Patreon does not itself delete your MaskedWaffle records or remove work from an existing game build.

Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal information, or object to its use. You may withdraw consent where consent is the basis used. These rights can have legal exceptions, including where information is needed for claims or to preserve the rights of others. Contact us to make a request.

You may complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the opportunity to address your concern first.

Changes

We will update this policy when our processing changes. Material changes will be brought to the attention of affected users where reasonably practical.