LEGAL / privacy_v2
Privacy Policy
Last updated: 26 April 2026
Effective Date: 26 April 2026
1. Introduction
Indie Loadout ("we," "us," or "our") is operated by Ludo Launchpad Software, Inc., a company registered in the Republic of the Philippines. We are committed to protecting your personal information and respecting your privacy rights.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have over it. By purchasing or using Indie Loadout, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
2.1 Information You Provide Directly
When you purchase and use Indie Loadout, we collect:
| Data Type | When Collected | Purpose |
|---|---|---|
| Email address | At checkout (via Paddle) | Account access, Loadout delivery notifications |
| Game title | Intake form | Loadout generation |
| Game description and details | Intake form | Loadout generation |
| Game genre, platform, mechanics, stage, and team size | Intake form | Loadout generation |
| Comparable game titles | Intake form | Loadout generation |
| Steam or itch.io URL | Intake form | AI-assisted content scraping for generation |
| Game Design Document (GDD) | Optional upload | Loadout generation context |
| Game screenshots | Optional upload | Loadout generation context |
| Gameplay video URL | Optional, Bundle only | Loadout generation context |
2.2 Information Collected Automatically
When you visit our website or use your customer dashboard, we may collect:
- IP address — for security and fraud prevention
- Browser type and version — for technical compatibility
- Device type — for display optimization
- Pages visited and time spent — for service improvement
- Referral source — to understand how you found us
This information is collected through standard web server logs and analytics tools.
2.3 Payment Information
We do not collect, store, or process your payment card information. All payment data is handled directly by Paddle, our third-party payment processor. Paddle's privacy policy governs how your payment information is handled.
3. How We Use Your Data
We use the data we collect for the following purposes:
- Loadout generation — Your game information is passed to our AI generation pipeline to produce your customized deliverables.
- Account and dashboard access — Your email address is used to create and authenticate your customer account via a magic link.
- Email delivery — We send transactional emails to notify you when your Loadout is ready for download, via Resend.
- Customer support — If you contact us with a question or issue, we use your information to respond.
- Service improvement — Aggregated, anonymized usage data helps us improve generation quality and platform performance.
- Legal and compliance — We retain certain records as required by applicable law.
We do not use your personal data for advertising, behavioral profiling, or marketing to third parties.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Delivering the purchased Loadout | Contract performance (Art. 6(1)(b) GDPR) |
| Sending transactional emails | Contract performance (Art. 6(1)(b) GDPR) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Service analytics and improvement | Legitimate interests (Art. 6(1)(f) GDPR) |
5. Third-Party Service Providers
We share your data only with the service providers necessary to operate Indie Loadout. These providers process your data solely on our behalf and in accordance with our instructions.
| Provider | Role | Data Shared | Privacy Policy |
|---|---|---|---|
| Paddle | Payment processing | Email, purchase details | paddle.com/privacy |
| Supabase | Database and authentication | Email, game form data, generated outputs | supabase.com/privacy |
| Make.com | Automation pipeline | Game form data, generation triggers | make.com/privacy |
| Anthropic | AI generation | Game form data and uploaded context | anthropic.com/privacy |
| Resend | Transactional email delivery | Email address, notification content | resend.com/privacy |
We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or any party for marketing purposes.
6. Data Retention
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Email address and account data | Duration of account existence + 2 years |
| Game intake form data | 12 months from purchase date |
| Generated Loadout files | 12 months from generation date (accessible via dashboard) |
| Uploaded files (GDD, screenshots) | 90 days from generation date, then deleted |
| Payment records | As required by applicable tax and financial law (typically 7 years) |
| Server logs | 90 days |
After the applicable retention period, data is securely deleted or anonymized.
7. Data Security
We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission (TLS/HTTPS)
- Access controls limiting data to authorized personnel and systems
- Third-party providers with their own security certifications
However, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
8. International Data Transfers
Indie Loadout is operated from the Republic of the Philippines. Your data may be stored and processed by our third-party providers in the United States, the European Union, or other countries. By using the Service, you consent to the transfer of your data to these locations.
Where we transfer data from the EEA to third countries, we ensure appropriate safeguards are in place, such as standard contractual clauses or transfers to countries with an adequacy decision.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
9.1 All Users
- Right to access — Request a copy of the personal data we hold about you.
- Right to correction — Request correction of inaccurate personal data.
- Right to deletion — Request deletion of your personal data, subject to legal retention requirements.
- Right to withdraw consent — Where processing is based on consent, withdraw it at any time.
9.2 EEA / GDPR Users
In addition to the above:
- Right to data portability — Receive your data in a structured, machine-readable format.
- Right to object — Object to processing based on legitimate interests.
- Right to restrict processing — Request that we limit processing of your data in certain circumstances.
- Right to lodge a complaint — File a complaint with your local data protection authority.
9.3 California / CCPA Users
California residents have the right to:
- Know what personal information is collected about them;
- Know whether personal information is sold or disclosed and to whom;
- Opt out of the sale of personal information (note: we do not sell personal information);
- Request deletion of personal information;
- Not be discriminated against for exercising these rights.
9.4 Philippine / Data Privacy Act Users
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to:
- Be informed that your data is being processed;
- Access your personal data;
- Object to processing;
- Erasure or blocking of data;
- Damages for any inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your data;
- File a complaint with the National Privacy Commission.
To exercise any of these rights, contact us at the email address listed in Section 13.
10. Cookies and Tracking
Our website may use cookies or similar tracking technologies for session management, analytics, and security. These may include:
- Strictly necessary cookies — Required for the website and dashboard to function.
- Analytics cookies — Used to understand how visitors interact with the site (e.g., page views, referral source).
You can control cookie settings through your browser. Disabling certain cookies may affect the functionality of the dashboard.
We do not use cookies for cross-site advertising or behavioral tracking.
11. Children's Privacy
Indie Loadout is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will delete it promptly. If you believe a child has provided us with their data, contact us at the address below.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you (e.g., via email or a notice on our website). Your continued use of the Service after changes constitutes your acceptance of the revised policy.
13. Contact and Data Controller
For privacy-related questions, requests to exercise your rights, or complaints:
- Email: support@indieloadout.com
- Entity: Ludo Launchpad Software, Inc. (Data Controller)
- Address: 6 T. Bugallon St., Marikina Heights, Marikina City, Philippines 1810
We aim to respond to all privacy requests within 30 days.