Privacy Notice
Last updated: 6 October 2026
This notice explains what personal data Kage Games Limited collects through kage.games and our programs (RetroStar and Deluxe Pixel), why, and your rights. We're the data controller for the data described here.
Contact: office@kage.games · Kage Games Limited, 2 Jeffrey Hill Close, Grimsargh, Preston, Lancashire, United Kingdom, PR2 5BS (company number 15443987).
What we collect, and why
| What | When | Why (legal basis) | How long |
|---|---|---|---|
| Your email address and your registration code | When you register RetroStar or Deluxe Pixel | To register your copy and resend your unlock code if you lose it (contract) | While the program is supported, then up to 6 years |
| The time and IP address of each registration request | When you register | To prevent abuse: we limit how many requests can be made (legitimate interests) | 12 months |
| Your email address and order details | When you buy | To send your registration code and handle refunds (contract) | 6 years (accounting records) |
| Your name and postal address | When you buy the boxed edition | To post it to you (contract) | 6 years (accounting records) |
| Your email address for our newsletter | Only if you tick the box (when registering on our website or in the program), or ask us to add you; you're only added once you've confirmed your address by clicking the link we email you | To send you occasional news (consent — unsubscribe at any time) | Until you unsubscribe |
| Server logs (IP address, pages visited) | When you visit the site | To run and secure the site (legitimate interests) | Up to 90 days |
| Security and visit records: the IP address, browser name and time of each download, each visit to a game's page and each attempt to reach our administration pages, and for downloads and game pages, the web address of the page whose link you followed (if your browser tells us) | When you download a file, visit a game's page, or try our administration pages | To protect the site against abuse, for example by blocking addresses that attack it, and to see where links to our games are shared (legitimate interests) | 90 days |
We work out the approximate country or town of an IP address in our security records using a location database kept on our own server (DB-IP): no address is sent anywhere to do it, and we use it only to spot abuse.
Backups
We keep a copy of our database each night, for 14 days, so we can recover from a failure. If we delete or erase your data, it's gone from the live database at once, and from the backups as they expire, within 14 days. The backups are stored with our host and are never shared.
Deluxe Pixel's monthly licence check (organisation licences only)
If your copy of Deluxe Pixel is registered with an organisation licence (Studio or Company), it contacts kage.games about once a month, over an encrypted connection, to check that the licence is still running and whether there's a newer version. It sends your email address, registration code and Deluxe Pixel's version; like any connection, it also reveals your IP address. We record when each copy last checked in and its version, so your organisation's licence can be managed (for example, seeing which places are in use); we don't keep the IP address. This is needed to provide the licence you or your organisation bought (contract), and we keep it while the licence runs and for up to 12 months after it ends.
Personal and education licences never make this check.
Deluxe Pixel's weekly update check
Any copy of Deluxe Pixel may check for a new version about once a week. It downloads a small file from kage.games, over an encrypted connection, that names the newest version. It sends nothing about you or your licence: no email address, no registration code. Like any connection, it reveals your IP address, which appears only in our server logs (kept up to 90 days, as above).
Registering RetroStar over WiFi
When you register RetroStar over your Next's WiFi, your email address and registration code are sent to kage.games unencrypted (the Next's WiFi module can't use modern encryption). They cross your own network and the internet in plain text. If you'd rather not, register on our website instead, which is encrypted.
Payments
Purchases are handled by Paddle.com, our reseller and the Merchant of Record for all our orders. Paddle collects your payment details and billing address and acts as an independent data controller for them under its own privacy policy. We never see your card details. Paddle tells us your email address and what you bought, so we can send your code.
The boxed edition is paid through PayPal, which acts as an independent data controller for your payment under its own privacy statement; PayPal gives us your name, postal address and email address so we can post your order.
Who else processes your data
- DreamHost — hosts this website and its database, and sends our emails (USA; safeguarded by standard contractual clauses).
- Paddle and PayPal — payments, as above.
- Royal Mail — your name and address on the parcel, to deliver a boxed order.
- Our newsletter service — only if you sign up. Sendy, on our own server, sending through Amazon SES (EU)
- Pages on this site load fonts and scripts from Google Fonts, Font Awesome and jsDelivr, which receive your IP address when they're loaded.
We don't sell your data, and we don't use advertising or tracking cookies.
Cookies
This site uses only the cookies it needs to work (a session cookie and a security token for forms). No analytics or advertising cookies.
Your rights
Under UK data protection law you can ask for a copy of your data (we'll send it as a file), ask us to correct or delete it, object to how we use it, or ask us to restrict it. Contact us to make a request; we'll reply within a month.
If you ask us to delete your data, we replace your email address with a one-way fingerprint of it, so your copy of the program keeps working, and registering again with the same address still works, but we can no longer resend your unlock code, since we no longer have your address. We remove your name and postal address from any boxed order, but keep the sale itself (what was bought, when, and for how much, with the payment's reference), because the law requires us to keep sales records for 6 years.
To leave the newsletter, use the unsubscribe link in any newsletter, or ask us.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office.