Privacy notice.

Who is responsible

No Fear Tech Ltd is responsible for the information collected through this site. Registered office: 6 Mallard Way, Dereham, England, NR19 1FJ, United Kingdom.

For privacy questions and requests, email hello@squishhh.com.

Information we use

• Account and security: your name, email, password hash, verification and recovery records, sessions and any authenticator enrolment. Security records can include IP addresses and browser information.
• Orders: your checkout email, order reference, selected edition, amount, introductory-offer allocation, accepted terms version, payment-provider references and payment or refund status.
• Support: the subject and message you send us, contact email and request status.
• Your choices: your cookie preference and, if a separate launch list is offered and you choose it, launch-announcement consent and confirmation records.
• Game storage: the free demo can keep progress and preferences in your browser. This platform does not provide cloud game saves.

Card details are entered with Stripe. This application does not store your full card number or security code. Do not include sensitive information in a support message.

Why we use it

We use account and order details to provide the account, process a requested purchase, confirm payment, record release access and answer support requests. Verification and recovery messages help protect your account. Security and operational records help prevent abuse and resolve failures. Records may also be kept where needed for accounting, tax and legal obligations.

Optional analytics and any separately offered launch-announcement list require your separate choice. An account or purchase is not marketing consent. Withdrawing optional consent does not remove the records needed to manage an existing order.

Our basis for using information

We rely on contract necessity for the account and purchase services you request, and legal obligations for tax and accounting records. Our legitimate interests in protecting accounts, preventing abuse and keeping the service reliable support proportionate security records and handling general enquiries. We limit those records and their retention, and consider your rights when using them. Optional analytics uses your consent, which you can withdraw through cookie preferences.

Account and order details are needed to provide those services; without them we cannot create your account or process the order. You can still play the free demo without an account.

Services involved

Netcup provides hosting for the website and account database. Stripe processes payments. Purelymail provides transactional email delivery. Google Analytics is optional and stays off until you accept analytics cookies. These services process data according to their respective roles; optional advertising personalisation is disabled.

Our service providers include Netcup GmbH for hosting, Stripe for payments and fraud checks, Purelymail by Add Rabbit LLC for transactional email and support correspondence, and Google Analytics for public-site measurement after consent. Purelymail publishes that its email servers are in the United States; other providers may also process information outside the UK. Contact hello@squishhh.com with questions about providers and international data handling. No mailing-list or advertising email service is active.

Optional analytics

When configured and accepted, analytics records public page views, demo opens, edition choices and checkout starts. Our events exclude email addresses, account details, order references, checkout sessions and URL query strings. Account, administration, login, checkout-return and launch-list pages are excluded from the application analytics events. Your browser still connects to Google when the optional tag is loaded.

Use cookie preferences to change your choice. Refusing analytics does not prevent you from using the site or buying the game.

How long we keep information

We keep accounts and purchase entitlements while needed to provide your access. Financial, payment and accepted-contract records are normally kept for six years after the relevant accounting period, or longer for a specific legal obligation or active claim. Kevin reviews retention monthly: completed support correspondence is normally kept for two years and ordinary security records for 90 days, with incident and legal holds assessed separately. This is a manual review process, not automatic erasure. Encrypted database recovery copies are kept daily for 14 days and weekly for eight weeks. Google Analytics currently uses two-month event and 14-month user retention, with the user period refreshed by new activity; these settings do not remove every aggregate report.

The browser cookie choice expires after six months. Account sessions have a seven-day lifetime and are refreshed while in use. Game progress and preferences in local browser storage remain until you clear them or use the game’s own controls.

Your requests and choices

Contact us to ask about access to your information, correction, deletion, restriction, a portable copy where applicable, or to object to processing based on legitimate interests. We may need to verify your identity, and some records may need to be retained for an existing order or legal obligation. You can withdraw analytics consent through cookie preferences. If you joined a separately offered launch list, use its unsubscribe link to leave it.

If you are unhappy with our response, you can raise a concern with the relevant data protection authority. In the UK this is the Information Commissioner’s Office.