Legal
Privacy Policy
Last updated October 30, 2026. These terms are provided in good faith and will be reviewed by counsel before sales open; the version in force is always the one on this page.
Dennon Forrester Developments, a partnership of Kody Dennon and Terry Forrester ("we") runs wildbound.dev, prince.kodydennon.com, dfd.kodydennon.com, the DFD Launcher and our games, Wildbound and The Prince. This policy explains what personal data we collect, why, and your rights. We collect as little as we need to run the game and the store, and we don't sell or share your personal information for advertising.
Controller: Dennon Forrester Developments, a partnership of Kody Dennon and Terry Forrester. Email: support@wildbound.dev.
1. What we collect
Account. Your email address, a password hash (Argon2id; we can't read your password), optional display name and credit name, whether you confirmed your email, your newsletter and supporters-list choices, an optional authenticator secret and hashed recovery codes, and your passkeys' public keys and identifiers (never your device's private keys or biometrics).
Sign-in and security. For each signed-in session: when it started and was last used, the country Cloudflare reports for the request, your browser or launcher user-agent, and how you signed in (password, authenticator or passkey). Failed sign-in counts and lockouts. A security and audit log of account, purchase, licence and admin actions.
Purchases and memberships. What you bought, prices, currency, discount codes used, order and payment identifiers, tax amounts, and your billing country and state or region (for tax). Membership tier, status, renewal dates and months paid. Gift recipients' email addresses if you enter them. Your card details are collected and stored by Stripe, not by us.
Licences and the launcher. For each activated PC: a one-way hash derived from your Windows machine ID (we never collect hardware serial numbers or the ID itself), the PC name you see in the launcher, and when it was activated and last seen. Issued licences and their revocation state. Playtime the launcher reports (total and demo hours), used for the demo limit and refund eligibility.
Playtest applications. Your answers, the PC specifications you enter, and optional Discord name.
Things you choose to send. Bug reports and ideas (and any screenshot, log file or save file you attach from the game), crash reports (sent by the game's crash reporter only after you agree; they can contain system information, a memory snapshot of the crash and log lines), support conversations and attachments, board posts and votes, and newsletter sign-ups.
Technical data. When you visit, Cloudflare processes your IP address and request details to deliver the site, block attacks and run the Turnstile bot check; we use the country and IP transiently for rate limiting and do not build profiles. The site uses Cloudflare Web Analytics, which is cookieless and doesn't track you across sites.
2. Why we use it (and our legal bases)
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Run your account, sign you in, keep it secure | account, sign-in and security data | contract; legitimate interests (security) |
| Sell and deliver purchases and memberships, issue receipts, handle refunds and chargebacks | purchase data | contract; legal obligation (tax and accounting) |
| Activate PCs, enforce the 3-PC limit, run the demo limit, check refund eligibility | licence and playtime data | contract |
| Playtests | applications | contract; legitimate interests |
| Support, bug fixing, crash analysis | what you send | contract; consent (crash and in-game bug reports) |
| Newsletter | consent (double opt-in; unsubscribe any time) | |
| Protect the Services from fraud and abuse | security and technical data | legitimate interests |
| Comply with law | as required | legal obligation |
We don't use automated decision-making that has legal or similarly significant effects on you. Licence checks are automatic but only apply the rules in the Terms.
3. Who processes it for us
- Cloudflare, Inc. (hosting, databases, file storage, email delivery, security and bot checks, analytics).
- Stripe, Inc. and affiliates (payments, billing portal, fraud prevention and tax calculation). Stripe also acts as an independent controller for some payment data; see Stripe's privacy policy.
They process data under contracts that limit use to providing their services. We share data with authorities only when the law requires it, and may transfer it to a successor if the business is reorganised or sold, under this policy. We don't sell personal information, and we don't share it for cross-context behavioural advertising.
4. International transfers
We are based in the United States and our providers may process data in the US and other countries. For data from the EU, UK or Switzerland, our providers rely on recognised safeguards such as the EU-US Data Privacy Framework and Standard Contractual Clauses.
5. How long we keep it
| Data | Kept for |
|---|---|
| Account data | while your account exists; deleted when you delete the account |
| Sessions | until 30 days after they expire or are signed out |
| Email confirmation and reset links | 7 days after they expire |
| Payment event records from Stripe | 90 days after handling |
| Orders, invoices and tax records | 7 years (tax and accounting law), even after account deletion |
| Licences, PC hashes, playtime | while your account exists |
| Bug reports, crash reports, attachments, support conversations | up to 2 years, or until you ask us to delete them |
| Newsletter list | until you unsubscribe (we keep a record of the unsubscribe) |
| Security and audit logs | up to 2 years |
6. Your choices and rights
You can download your data and delete your account in Profile and privacy, change newsletter and supporters-list choices there, free PCs in Your PCs, and unsubscribe from any newsletter with one click.
Everyone may ask us to access, correct or delete their personal data by writing to support@wildbound.dev. We will verify your identity, normally by asking you to confirm from your account email, and reply within 30 days (45 days for California requests, which we may extend once where the law allows).
California residents (CCPA/CPRA) have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to limit use of sensitive personal information (we only use account credentials to sign you in); and not to be discriminated against for using these rights. We do not sell or share personal information, so there is nothing to opt out of; we also honour Global Privacy Control signals. The categories we collect are identifiers, commercial information, internet activity on our Services, approximate geolocation (country, state) and the content of communications you send us, from the sources and for the purposes above. You can use an authorised agent with written permission.
EU and UK residents (GDPR and UK GDPR) also have the rights to restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to your data protection authority.
7. Children
The Services are not directed to children under 13 and accounts require you to be 13 or older. If you believe a child under 13 has given us personal data, contact us and we'll delete it.
8. Security
We use encryption in transit, hashed passwords, optional two-step sign-in and passkeys, signed licences, rate limits and access controls on staff tools. No system is perfectly secure; if a breach affects your data, we'll notify you and the authorities as the law requires.
9. Changes
We'll post updates here and, for significant changes, tell you by email or on the site before they take effect.
10. Contact
Dennon Forrester Developments, a partnership of Kody Dennon and Terry Forrester. Email: support@wildbound.dev.