Privacy policy

Your game stays on your computer. This policy covers the small amount of information needed to run your account.

Draft — pending legal review. Updated . Paid sales remain closed until this policy is approved.

Who publishes frameDock

frameDock is published by Cacko Studio LTDA, CNPJ 54.011.615/0001-42. This draft covers the public website, account service and Windows application. A dedicated privacy contact and the final legal basis for each retained billing record must be confirmed before production sales.

Your project is local

Project names, paths, repository credentials, source files, game assets, build logs, store credentials and game executable builds are not sent to the frameDock account service. Builds run on your own computers. An upload you explicitly make to a chosen game store is handled separately through that destination.

Information used for your account

The account service holds your email address, account and device registrations, plan entitlements, organization membership, consent choices, and relevant security events. Authentication tokens are stored as hashes. Temporary email delivery data is used only to send account messages.

When sales open, Paddle processes checkout, payments and taxes as Merchant of Record. frameDock retains the provider identifiers, subscription status, purchase period and quantity needed to grant access, reconcile billing and respond to refunds. frameDock does not receive your card details.

Optional usage counts

Optional usage counting is off until you enable it, and you can disable it at any time. Events come from a short fixed list and cannot contain project names, paths, logs or other free text. Aggregate counts are not tied to an account or device. Disabling counting removes unsent events; already aggregated anonymous counts cannot be separated back out.

Service providers and cookies

Cloudflare provides website hosting and the account, licensing, email and release services. Paddle will provide billing and its customer portal. Hostinger is the domain registrar. Their services may involve international processing; the applicable transfer arrangements require legal review.

Authenticated sessions belong to the account service and use secure, HttpOnly cookies. The marketing website does not create its own authentication session or store application credentials. Paddle checkout loads only on the payment page when payment service configuration is active.

Retention and deletion

Security and account audit history is retained for 180 days. Profile, device and session data is removed when an account is deleted. Active subscriptions must be resolved first, and an organization owner must transfer ownership or close the organization.

Necessary purchase records and evidence that an address has used a trial may survive profile deletion. Final retention periods for legally required billing records remain subject to counsel approval and will be published before sales open. Unrestricted payment-provider payloads are not retained indefinitely.

Your choices and rights

Use your account to export its data, change optional counting consent and request deletion. Where applicable, you may request access, correction, information about processing or other rights under Brazilian data-protection law. The publisher must confirm the public contact channel before this draft becomes the production policy.