Privacy Notice

Last updated: 2 October 2026

This notice explains what personal data Kage Games Limited collects through kage.games and RetroStar, why, and your rights. We're the data controller for the data described here.

Contact: office@kage.games · Kage Games Limited, 2 Jeffrey Hill Close, Grimsargh, Preston, Lancashire, United Kingdom, PR2 5BS (company number 15443987).

What we collect, and why

What When Why (legal basis) How long
Your email address and your registration code When you register RetroStar To register your copy and resend your unlock code if you lose it (contract) While RetroStar is supported, then up to 6 years
The time and IP address of each registration request When you register To prevent abuse: we limit how many requests can be made (legitimate interests) 12 months
Your email address and order details When you buy To send your registration code and handle refunds (contract) 6 years (accounting records)
Your name and postal address When you buy the boxed edition To post it to you (contract) 6 years (accounting records)
Your email address for our newsletter Only if you tick the box To send you occasional news (consent — unsubscribe at any time) Until you unsubscribe
Server logs (IP address, pages visited) When you visit the site To run and secure the site (legitimate interests) Up to 90 days

Registering over WiFi

When you register from the game over your Next's WiFi, your email address and registration code are sent to kage.games unencrypted (the Next's WiFi module can't use modern encryption). They cross your own network and the internet in plain text. If you'd rather not, register on our website instead, which is encrypted.

Payments

Purchases are handled by Paddle.com, our reseller and the Merchant of Record for all our orders. Paddle collects your payment details and billing address and acts as an independent data controller for them under its own privacy policy. We never see your card details. Paddle tells us your email address and what you bought, so we can send your code.

The boxed edition is paid through PayPal, which acts as an independent data controller for your payment under its own privacy statement; PayPal gives us your name, postal address and email address so we can post your order.

Who else processes your data

  • DreamHost — hosts this website and its database, and sends our emails (USA; safeguarded by standard contractual clauses).
  • Paddle and PayPal — payments, as above.
  • Royal Mail — your name and address on the parcel, to deliver a boxed order.
  • Our newsletter service — only if you sign up. Sendy, on our own server, sending through Amazon SES (EU)
  • Pages on this site load fonts and scripts from Google Fonts, Font Awesome and jsDelivr, which receive your IP address when they're loaded.

We don't sell your data, and we don't use advertising or tracking cookies.

Cookies

This site uses only the cookies it needs to work (a session cookie and a security token for forms). No analytics or advertising cookies.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Contact us to make a request; we'll reply within a month. Deleting your registration means we can't resend your unlock code.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office.