dstokesncstudio Back to site

Privacy Policy

Last updated: August 22, 2026

01Who we are

dstokesncstudio ("dstokesncstudio," "we," "us," or "our") operates dstokesncstudio.com and its account platform, reachable at dstokesncstudio.com, auth.dstokesncstudio.com, id.dstokesncstudio.com, and api.dstokesncstudio.com (together, the "Service"). The Service provides account sign-in, an account management portal, and a protected API that games we build can use to store player data, built by a single-person indie games and software studio.

02What information we collect

We collect the following categories of information when you create and use an account:

• Account information: your email address, a securely hashed password (we never store your password itself), and your account status.
• Profile information: a display name, an optional avatar image URL, and an optional bio, all of which you control and can edit at any time.
• Phone number (optional), only if you choose to add one to enable SMS security alerts. See "Phone numbers & SMS messages" below for how this is used specifically.
• Session & security information: a hashed (not raw) form of your IP address and browser user-agent string, associated with your login sessions and security history, used to detect new-device sign-ins and to let you review and revoke active sessions yourself.
• Game save data: if you connect a game built on this platform, that game may store gameplay data (e.g. progress, settings) tied to your account. We don't inspect or interpret the contents of what a game stores — it's opaque data scoped to that specific game.
• Consent & connection records: which games you've authorized to access your account, and which scopes (permissions) you granted each one.

We do not collect payment information, government ID numbers, or precise location data.

03Phone numbers & SMS messages

If you choose to add a phone number and turn on SMS alerts (both entirely optional, from your account portal), we send text messages for account-security purposes only — never marketing, and never anything you didn't opt into. Specifically:

• What you'll receive: a one-time verification code when you first add a number; and, once SMS alerts are turned on, notifications for a new sign-in from a device we haven't seen before, a password change, a game being connected or disconnected from your account, and account deletion confirmation.
• Message frequency: these are triggered only by your own account activity — there is no recurring or scheduled messaging. Most accounts receive very few messages a month; frequency varies based on how often you sign in from new devices or change account settings.
• Message and data rates may apply. Standard messaging and data rates from your mobile carrier apply to messages we send.
• Opting out: reply STOP to any message to stop receiving SMS alerts at any time, or turn the "SMS alerts" toggle off in your account's notification settings. Reply HELP for help, or contact us at [email protected].
• Consent is never required to use the Service — SMS alerts are optional, and declining them (or opting out later) doesn't affect your account or access to any game.

See our Terms of Service for the full SMS program terms.

04How we use your information

• To create and secure your account, and to authenticate you when you sign in.
• To let games you authorize read and write your game-specific save data, scoped only to that game and only with the permissions ("scopes") you approved.
• To send you security-relevant notifications (email always, SMS only if you opt in) — new sign-ins, password changes, and similar events.
• To maintain a security history you can review yourself, and to detect and prevent unauthorized access to your account.
• To respond to support requests you send us.

We do not use your information for advertising, and we do not sell your personal information.

05How we share information

We share information only in these limited circumstances:

• With games you authorize: a connected game receives only your basic profile (if you grant the profile:read scope) and/or its own game-specific save data — never your email, phone number, password, or another game's data.
• With service providers who help us operate the Service (see "Third-party service providers" below), under obligations to protect your information and use it only to provide their service to us.
• If required by law, or to protect the rights, property, or safety of dstokesncstudio, our users, or others.

We do not share your information with data brokers or for third-party advertising purposes.

06Third-party service providers

We use the following categories of service providers to operate the Service:

• Hosting: our web host and database provider, to run the Service and store your account data.
• Email delivery: to send verification, password-reset, and security-alert emails.
• SMS delivery (Twilio): if you opt into SMS alerts, we use Twilio to deliver those text messages. Twilio processes your phone number and message content solely to deliver the message on our behalf.

07How we protect your information

• Passwords are never stored in plain text — only a one-way cryptographic hash.
• IP addresses and browser identifiers tied to your sessions are stored as one-way hashes, not in raw form.
• All connections to the Service use HTTPS encryption.
• Access to game data is scoped per-game and per-permission using industry-standard OAuth 2.0 with PKCE — a connected game only ever sees what you specifically authorized.
• You can review your own security history (sign-ins, changes, connections) and revoke any active session or connected game at any time from your account portal.

08Data retention & deletion

You can delete your account at any time from your account portal (password-confirmed). Deleting your account immediately makes it inaccessible; your account information (email, password credential, profile, phone number) is then permanently purged by an automated process, and your game save data is purged as well — unless you specifically chose to keep it before deleting. Security-relevant records tied to already-issued tokens and sessions expire and are purged on their own schedule shortly after.

09Your choices & rights

• Access & export: download a copy of your account data at any time from your account portal.
• Correction: update your profile, email verification status, and phone number directly in your account portal.
• Deletion: delete your account at any time, as described above.
• SMS opt-out: reply STOP to any text, or turn off SMS alerts in your account settings, at any time.
• Marketing emails: we don't send marketing email at all — only account and security-related messages you can't opt out of while keeping your account (like a password reset you requested), and optional security alerts you control in your notification preferences.

10Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

11Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.

12Contact us

Questions about this Privacy Policy or your data? Email [email protected].