Privacy Policy
Last updated: 13 June 2026
This Privacy Policy explains how Crime Codex collects, uses and protects your personal data when you use our service, and the rights you have under the General Data Protection Regulation (GDPR) and applicable data protection law in the United States.
Data controller
The data controller responsible for your personal data is the operator of Crime Codex. You can reach our data protection contact at legal@crimecodex.com.
Data we collect
We collect account data (email, display name), authentication identifiers via our identity provider, purchase and licensing records, gameplay progress and scores, and technical data such as device and usage information. We do not collect special categories of data.
How we use your data
We use your data to provide and secure the service, deliver the cases and content you purchase, maintain leaderboards and community features, process payments, send transactional and (with consent) marketing communications, and improve the product through aggregated analytics.
Legal basis for processing
We process data on the basis of contract performance (providing the service you purchased), legitimate interests (security, product improvement), consent (marketing and non-essential analytics cookies), and legal obligations (tax and accounting).
Data retention
We retain personal data only as long as necessary for the purposes described, to comply with legal obligations, and to resolve disputes. Account and gameplay data are deleted or anonymised after prolonged inactivity or upon a valid erasure request.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, and the right to data portability. To exercise these rights, contact legal@crimecodex.com.
Sharing with third parties
We share data with processors who help us operate the service (payment processing, identity, email delivery, analytics and hosting). All processors act under data processing agreements and only on our instructions.
International transfers
Where data is transferred outside the European Economic Area, we rely on adequacy decisions or Standard Contractual Clauses to ensure an equivalent level of protection.
Security
We apply appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege practices, to protect your personal data against unauthorised access, loss or disclosure.
Cookies
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are only set with your consent.
Complaints
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the competent supervisory authority (the competent data protection authority).
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the service, and the effective date above will be revised.
This service is operated under the Crime Codex brand. You may contact the operator at legal@crimecodex.com. The operator is established in the United States.
Operator identification, registered address and registration number are confirmed on request at legal@crimecodex.com and finalised per market before public launch.