What we keep.

1. Just reading the site. Nothing that identifies you. Our host (Cloudflare) processes the ordinary request information any web server sees — your IP address, browser and the page requested — to serve the page and to keep the site up and unattacked. We do not build profiles from it and we do not run analytics on it.
2. Donating. The amount; your email address; and whatever you typed into the form — a display name, a location, a favourite ride and a favourite park. Also your three consent choices (whether to appear on the board at all, whether to show your name, whether to show your amount), the date, and a private single-use token that is the link to remove yourself later.
3. Pre-ordering. Your email address, the platform you chose, and the fact of your order. Your copy is sent to that address on release day.
4. Paying, either way. Your card details go straight to the payment processor and are never sent to, seen by, or stored on this site. We receive a confirmation that a payment succeeded, its amount, and an identifier for it.
5. Emailing us. Your message and your address, kept for as long as it takes to sort out whatever you wrote about.

1. To take a payment, send a receipt, and deliver the copy of the game you bought.
2. To publish the leaderboard — only the entries whose owner ticked the box, and only the fields they ticked. An entry with the name hidden is still ranked by its real figure; hiding a number never costs anyone their place.
3. To count the favourite-ride and favourite-park write-ins into the public wishlist. These are counted whether or not you appear on the board, because telling the owner what to build is worth just as much from someone who would rather stay private.
4. To review entries before they are published. An automatic screen sorts the queue and flags entries; it never publishes one. A person reads every entry that goes on the board.
5. To let you remove yourself from the board later, which is what the private token on your receipt is for.
6. To email the owner that a donation arrived, so the review queue gets emptied.
7. To keep records of payments for as long as tax and accounting rules require.

Where the law where you live asks for a legal basis: we process this information to perform the contract you entered into (a pre-order, a donation and its receipt), to meet a legal obligation (payment records), on the basis of our legitimate interest in running the site securely and moderating what gets published, and on the basis of your consent for anything published on the leaderboard — consent you can withdraw at any time.

1. Stripe, our payment processor — they take the payment, hold the card details we never see, and issue refunds. They are the controller of your payment data under their own privacy policy.
2. Cloudflare, who host the site, its API and its database, and who sit in front of it as its network and security layer.
3. Resend, who deliver the one notification email that tells the owner a donation arrived.
4. Nobody else. We do not sell, rent, trade or share your information for anyone’s marketing, and there is no advertising network, data broker or analytics provider involved in this site at all.
5. We would disclose information if the law actually required it of us, and we would tell you unless we were forbidden to.
6. These services process data in the United States and elsewhere. If you are outside the US, that means your information is handled there.

1. Leaderboard entries stay while the board does, unless you take yours off — which removes it from the board immediately.
2. Payment records are kept for as long as tax and accounting rules require, which is usually seven years. This is the one category we cannot delete on request while that period is running; everything around it can be.
3. Email you send us is kept while it is useful and then deleted.
4. An entry that is rejected in review is kept only long enough to know it was rejected.

1. Ask what we hold about you, and get a copy of it.
2. Have it corrected if it is wrong.
3. Have it deleted — subject only to the payment records in the section above, which the law requires us to keep.
4. Take yourself off the leaderboard, which needs no email at all: the link on your receipt does it.
5. Withdraw your consent to be published at any time, without affecting the donation or anything that happened before.
6. Object to what we do with it, or ask us to restrict it.
7. Not be discriminated against for exercising any of these — the terms of a donation or a pre-order do not change because you asked.
8. We do not make automated decisions about you that have any legal or similarly significant effect. The automatic screen on leaderboard entries flags text for a human; it never decides anything on its own.

All of it happens through one address: Isometriclandgame@gmail.com. We answer within 30 days and normally much sooner. If you are in the UK or the EU and think we have got it wrong, you also have the right to complain to your local data-protection authority.