Who we are
Our website address is: https://oddfishgames.com. The domain names for our products redirect to oddfishgames.com
What personal data we collect and why we collect it
If you have an account and log in to the Oddfish Games site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Oddfish Games also uses WordPress.com’s Jetpack plugin which uses a number of cookies described here: https://jetpack.com/support/cookies/
Embedded content from other websites
Articles on the Oddfish Games site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
Oddfish Games uses WordPress.com’s Jetpack to gather very limited information on site usage: page visits statistics, etc. For their privacy policies, see: https://jetpack.com/support/privacy/
Google Analytics was used by Oddfish Games prior to July 2018, but use has been discontinued.
Who we share your data with
Oddfish Games does not purposefully sell or share data with any third parties in bulk or in part other than what is required to complete a web store order.
The website has a payment portal integration which allows for the transfer of a web store session to PayPal for payment. The web store also has the ability to send address information to the US Postal Service to estimate shipping rates. These integrations pass data to the respective parties via TLS secured connections and back again.
Additionally, during the processing of an order, Oddfish Games personnel may use Stamps.com to pass a customer’s address data to the USPS in order to ship items to them.
How long we retain your data
For users that register on the Oddfish Games website, we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
Information may also be stored in website backups, which occur frequently. Those backups are deleted after 1 year.
What rights you have over your data
If you have an account on the Oddfish Games site you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. Information stored in backups cannot easily be erased, but Oddfish Games will make a good faith effort to do so.
Your contact information
As part of the Oddfish Games web store, we collect contact information for the sole purpose of shipping the purchased product to you. Your contact information is retained in the web store’s historical list of orders as well as in your account on our website.
Phone numbers, email addresses, social media accounts and other forms of contact information may be voluntarily supplied during the ordering process. This information is retained with your account and may be used by Oddfish Games staff to contact you in case of trouble with your order. Information gathered in this way is not used in any other way.
Email addresses gathered through Kickstarter projects and sign-ups for our mailing list are separate from email gathered on our website due to purchases. By performing one of these voluntary acts, you are opting into an occasional email from Oddfish Games about new products and product changes.
How we protect your data
The website and its data are protected by AES-256 encryption at rest and TLS encryption in transit. The website runs on a hardened web server with multiple mechanisms in place to harden the web content management system. Additionally, Oddfish Games employs a security professional to oversee the website’s security and integrity.
What data breach procedures we have in place
Oddfish Games has an internal incident response policy to handle data breaches that includes procedures for handling both security and privacy concerns.
What third parties we receive data from
The website has integrations which allow for transferring a sales session to PayPal (and back) and for checking on shipping rates with the USPS. These integrations pass data to the respective parties via TLS secured connections and back again.
Oddfish Games receives no other data from third parties.
What automated decision making and/or profiling we do with user data
Oddfish Games does not perform any automated decision making or profiling based on user data.