Privacy Policy

This Privacy Policy explains what information Rare Breed Games ("we", "us", "our") collects about you, why we collect it, how we use it, and the rights you have over it. It applies to the Rare Breed Games websites and all related services, including Reptile Breeder Game, Dog Breeder Game, Dragon Breeder, and Horse Breeder (Alpha) ("Services").

By creating an account or using the Services, you confirm that you have read and understood this Policy.

1. Who We Are

Rare Breed Games is an independent game developer based in the United Kingdom. We are the data controller for personal information collected through our Services.

For any privacy-related questions, please email privacy@rarebreedgames.com. If you have a general support question that does not relate to privacy, please use our support ticket system instead.

2. What Information We Collect

We collect the following categories of information.

Account Information

• First name and last name (provided at registration)
• Email address (used as your account identifier and for transactional communications)
• Password (stored only as a one-way bcrypt hash; we cannot recover the original)
• Security questions and answers (used for account recovery and verifying email-change requests)
• Date of registration
• Linked game account IDs (Reptile Breeder, Dog Breeder, Dragon Breeder, Horse Breeder) when you connect a game account to your main profile

Login and Device Information

Each time you sign in, we automatically collect technical information about your device and connection, including:

• Your IP address
• Information about your browser and operating system (such as type, version, and display settings)
• A technical identifier used to recognise your device on subsequent visits, for security and account integrity purposes
• The date and time of the login

We also record this information at the moment of registration.

Payment Information

When you purchase Tokens through PayPal or Stripe:

• We store the email address you paid with, the amount, the currency, and the date of each purchase
• We store a "Stripe customer ID" if you have used Stripe, so we do not need to re-collect card details on subsequent purchases
• Card and bank details themselves are processed and stored by Stripe and PayPal, not by us
• If you initiate a chargeback or payment dispute, we record the dispute details (amount, status, provider, our internal notes) for fraud-prevention purposes

Activity and Communication Data

• Public chat and shoutbox messages
• Support ticket conversations between you and our staff
• Token transfer history between your account and your linked game accounts
• Any moderation actions taken on your account (warnings, bans, mod-log notes), including the reasons

Email Change and Appeal Requests

If you request an email change or appeal a ban through our self-service forms, we store the contents of your request, the IP address it was submitted from, and the staff decision.

3. How We Use Your Information

We use your information to:

• Provide and operate the Services, including syncing data between your main account and your linked game accounts
• Authenticate you when you sign in and protect your account from unauthorised access
• Process payments and deliver Tokens to your account
• Detect and prevent fraud, including refund abuse, payment chargebacks, and multi-account abuse
• Investigate and respond to support tickets, moderation reports, and ban appeals
• Send transactional emails (e.g. account activation, password resets, email-change notifications, ban appeal outcomes)
• Comply with our legal obligations, including financial record-keeping

4. Legal Bases for Processing (UK GDPR)

We rely on the following lawful bases:

• Contract: processing necessary to provide you with the Services you have signed up for (account creation, payments, gameplay data)
• Legitimate interests: protecting our platform and other players from fraud, abuse, and unauthorised access. This includes verifying account integrity, retaining login records, recording disputed transactions, and operating internal anti-abuse tools
• Legal obligation: retaining financial records for tax and audit purposes
• Consent: any optional communications, where applicable

5. Who We Share Information With

We do not sell your personal information. We share it only as described below:

Payment Processors

When you make a purchase, the necessary payment information is shared with PayPal or Stripe so they can process the transaction. Each has its own privacy policy that governs how they handle your data.

Linked Game Databases

When you link your Rare Breed Games account to one of our games (Reptile Breeder, Dog Breeder, Dragon Breeder, Horse Breeder), some of your data (such as your account ID and Tokens) is shared between the main account database and the relevant game database so the games can function correctly. All databases are operated by Rare Breed Games.

Law Enforcement and Legal Requests

We may disclose information when required to do so by law, court order, or to protect the rights, property, or safety of Rare Breed Games, our users, or others. This includes responding to lawful requests from law enforcement.

Senior Administration

Private Messages and other normally-private content may be reviewed by senior administration when investigating reports, fraud, or security concerns, as set out in our Terms of Use.

6. How Long We Keep Your Information

• Active account data: retained for as long as your account remains open
• Closed accounts (you request deletion): most personal data (name, email, password, security questions, login history, support tickets you authored) is deleted within a reasonable period. Financial records (donations, payment metadata) and moderation logs are retained for audit and fraud-prevention purposes
• Banned accounts: account data is retained indefinitely to enforce the ban and prevent evasion
• Login history: retained for the lifetime of the account to support security investigations
• Chargeback records: retained indefinitely so that the associated email address cannot create new accounts and so that we can demonstrate dispute patterns to payment processors
• Moderation logs: retained indefinitely for staff accountability

7. Your Rights

Under UK GDPR you have the following rights in relation to your personal information:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: ask us to correct inaccurate information. You can update most fields (email, name, security questions) yourself via Account Settings
• Right to erasure: ask us to delete your account and most associated personal data. You can request this through our support team. Some data may be retained where we have a lawful basis to do so (financial records, moderation history, fraud-prevention records)
• Right to restrict or object: ask us to limit or stop certain processing in specific circumstances
• Right to data portability: request a machine-readable copy of the data you have provided to us
• Right to withdraw consent: where we rely on consent, you can withdraw it at any time
• Right to complain: if you believe we have not handled your data properly, you can complain to the UK Information Commissioner's Office at ico.org.uk

To exercise any of these rights, please email privacy@rarebreedgames.com. We will respond within one month.

8. Security

We take reasonable technical and organisational measures to protect your information:

• Passwords are stored only as bcrypt hashes and are never recoverable in plaintext
• Card details are never stored on our servers; payment processors handle them directly
• Sensitive admin functions are gated behind staff permission levels and logged
• Database access is restricted to authorised staff only

No system is perfectly secure. If we become aware of a personal data breach that is likely to affect your rights, we will notify the Information Commissioner's Office and, where required, affected users.

9. Children

The Services are not intended for children under 13. We do not knowingly collect personal information from anyone under 13.

Users between 13 and 17 must have permission from a parent or legal guardian to use the Services. If a parent or guardian believes their child has provided personal information without consent, they should contact privacy@rarebreedgames.com and we will delete the data and terminate the account.

10. Cookies and Similar Technologies

We use a single essential session cookie ("rbg_auth") to keep you signed in across our sites and games. Without it, the Services cannot function.

We do not use third-party advertising or tracking cookies. Any technical identifiers we use for account security are processed within our own systems and are not shared with third-party tracking services.

11. International Data Transfers

Our payment processors (PayPal and Stripe) may process your data outside the United Kingdom, including in the United States. They are bound by appropriate safeguards (such as the UK Extension to the EU-US Data Privacy Framework or Standard Contractual Clauses) to ensure your data continues to be protected.

Our own databases are hosted within the United Kingdom or the European Economic Area.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent change. Significant changes will be communicated through an in-account notice or email.

13. Contact

For privacy-related enquiries or to exercise any of your rights, please email privacy@rarebreedgames.com.

For all other support, please use our support ticket system.