Privacy Notice

Shire by Shire Ltd runs Shire by Shire and is the data controller for the personal data described here. That means we decide how and why it's used.

Contact us about your data at shirebyshire2026@gmail.com.

Playing as a guest. Squire needs no account. We don't collect personal data from guests beyond the basic technical data below.

Account details — your email address, name and an account ID from Google or Lovable when you sign in. Used to create your account, recognise your pass and show who's signed in. Legal basis: performing our contract with you.

Pass records — whether you have a pass, its status, renewal and end dates, and the customer and subscription IDs from Paddle. Used to open Knight and Lord for you. Legal basis: contract.

Online game names — the name you enter when you host or join a game. It's shared live with the other players in that game and isn't stored by us afterwards. Legal basis: contract.

Support messages — anything you send us when you get in touch. Used to answer you. Legal basis: legitimate interests.

Technical data — IP address, browser and device type, and error reports when something breaks. Used to run the game securely, prevent fraud and fix problems. Legal basis: legitimate interests.

We don't use your data for advertising and we don't sell it. Card details are collected by Paddle, not us.

The game keeps a few things in your browser's storage: your sign-in session, which questions you've seen recently (so they don't repeat), and titles and wins earned on that device.

These are essential to how the game works. We don't use analytics or advertising cookies. Clearing your browser's site data removes them.

Paddle, our Merchant of Record, to sell the pass and manage subscriptions, payments, tax and invoices. Paddle's privacy notice: www.paddle.com/legal/privacy.

Service providers who host the game and its database (Lovable and its infrastructure providers) and provide sign-in (Google, Lovable).

Professional advisers such as lawyers and accountants, where needed.

Authorities, where the law requires it.

Some of our providers process data outside the UK, for example in the EU or the USA. Where they do, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

We keep your account and pass records while you have an account. When you delete your account in the game, we delete them, apart from anything we must keep by law. Paddle keeps its own payment and tax records as the law requires.

Error reports and technical logs are kept for a short time and then deleted. Support messages are kept for as long as needed to help you. Data we no longer need is deleted or anonymised.

Under UK GDPR you can ask to access your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Where we rely on consent you can withdraw it at any time.

To use any of these rights, email shirebyshire2026@gmail.com. We'll reply within one month.

You can also complain to the Information Commissioner's Office: ico.org.uk.

We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls so each player can only see their own pass, and keeping payment details with Paddle rather than on our systems.

Squire can be played by anyone without an account. Buying a pass is for adults, or children with a parent or guardian's permission.

We may update this notice. The date at the top shows the latest version.