GDPR & Your Data Rights

Your rights at a glance

• Access — a copy of the personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure ("right to be forgotten") — delete your account and personal data.
• Restriction — pause processing while a query is resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — for anything you previously opted into (e.g. push notifications).

How to make a request

Email unicredmac@gmail.com from the address linked to your OT Sim account, with the subject "GDPR request" and a short description of what you want (access, deletion, export, correction, etc.).

We aim to reply within 30 days as required by law. There's no charge for reasonable requests.

What we'll ask for

To protect your data we may need to verify you own the account (for example, by asking you to confirm from the email address on the account). We won't ask for more than is necessary.

Account deletion — what happens

• Your login, saves, unlocks, and referral records are permanently deleted.
• Purchase records (transaction ID, amount, timestamp) are retained for tax purposes for 6 years — but stripped of personal identifiers where possible.
• Anonymous analytics events (no personal identifier) may be retained.

International transfers

Our infrastructure (Supabase, Cloudflare, Stripe, Google Play, Resend) may process data outside the UK/EEA. Where they do, appropriate safeguards such as Standard Contractual Clauses apply.

Cookies

OT Sim uses only strictly-necessary storage (your login session, settings, and offline cache). We do not use advertising or cross-site-tracking cookies.

Data controller & complaints

Controller: OT Sim · unicredmac@gmail.com

You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or to your local EU supervisory authority.