Privacy Policy

Who We Are

SuperEgo Software Ltd. ("we", "us" or "our") is the UK company developing DESLOT. We are the controller of personal information for which we determine the purposes and means of processing in connection with the game and our services.

This policy explains how we handle personal information in DESLOT, including its online multiplayer and connected game services. It takes account of the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (EU GDPR).

DESLOT is in development. Online features and the information they need depend on the version, platform, available services and features you use. A feature described here may not be available in every build; information associated with it is processed only when that feature is used or the relevant service operates.

Information We Collect

We obtain information from you, from the game and its network connections, and from account or platform providers when you use their integrations. Depending on the services you use, this may include:

• Account and player identifiers: Epic Account Services identifiers, Epic Product User IDs (PUIDs), other account identifiers, and the Epic account or display name supplied by Epic; Steam or other platform identifiers and player display names where the relevant platform integration is used.
• Optional social information: friends and online-presence information supplied through Epic only where the corresponding feature is enabled and you grant the relevant Epic permissions.
• Multiplayer information: lobby and session identifiers, lobby membership and settings, invites, matchmaking or session-search information, server connection details, participation, ready status and basic gameplay data needed to run a race, such as vehicle movement, lap times and results.
• Connected results and replays: where a build uses our online best-result service, player names, race or challenge results, track and vehicle identifiers, timestamps and associated gameplay replay data. These allow results to be stored, compared and replayed.
• Technical connection information: IP addresses and connection or network information where processed by game hosts, servers, relay services or other infrastructure to establish connections, deliver gameplay, troubleshoot connection failures and protect the service.
• Information you send us: your contact details and the content of support or privacy enquiries.

Information stored locally on your device, such as local saves and replays, is not necessarily sent to us. It is transmitted only where a connected feature requires it or you choose to provide it to us.

Epic Online Services / Epic Account Services

DESLOT may use Epic Online Services (EOS) for online identity, lobbies, sessions, invites and network connectivity. EOS Connect can supply a Product User ID to recognise a player in these services.

Where Epic Account Services sign-in is enabled and you use it, Epic may supply your Epic account identifier and basic profile or display name. Friends-list and online-presence information is used only for enabled social features and only when you grant the relevant Epic permissions. We do not assume that all EOS users have granted these permissions.

You can review the permissions requested during Epic's authorisation flow and manage connected applications and permissions through your Epic account settings. Removing access may prevent the corresponding DESLOT online or social features from working.

Epic also processes information in providing its own services. See the Epic Games Privacy Policy for its practices and account privacy controls.

Multiplayer and Online Services

When you use online play, the game exchanges the information needed to find or join a session, maintain a lobby, connect players, synchronise gameplay and display race participation and results. Available online services may rely on Epic Games / EOS and hosting, relay or server infrastructure providers.

Other participants may see your player display name, lobby or race participation and relevant gameplay information. In player-hosted matches, the host's device processes connection and gameplay data to run the session. IP or connection information may also be processed by hosts or network infrastructure, depending on the connection method.

Where online results or replay sharing is available, your player name, result and associated replay may be made available to other users of that feature. Avoid using a display name that reveals information you do not want to share. Offline play does not itself require transmission of multiplayer session data, although separately enabled platform or connected-result services may still communicate online.

Platform Services

If you access DESLOT through Steam or another supported platform, that provider may handle your account, purchases, authentication and its own platform features. Where integrated with DESLOT, it may supply an account identifier or display name needed to provide the game or online functionality.

Platform providers have their own responsibilities and privacy controls. For Steam, see the Valve Privacy Policy. Review the equivalent policy for any other platform you use.

How We Use Information

• Recognise and authenticate players using the selected online or platform service.
• Operate lobbies, invitations, session discovery, matchmaking where available, connections and multiplayer gameplay.
• Display player names, race participation and results, and provide connected results or replays where enabled.
• Maintain service reliability, investigate technical problems and protect players and services against misuse.
• Respond to support and privacy requests and meet applicable legal obligations.

Legal Bases for Processing

Where UK or EU data protection law applies, we rely on the basis appropriate to each purpose:

• Performance of a contract: processing necessary to provide the game and online features you request, including authentication, session participation and gameplay delivery.
• Legitimate interests: maintaining reliable services, troubleshooting problems, providing support and preventing misuse, where those interests are not overridden by your rights and interests.
• Legal obligations: responding to valid legal requirements and complying with applicable data protection duties.
• Consent: optional processing for which consent is required. You may withdraw that consent at any time. Granting a platform permission controls access to that platform data; it does not mean every use of the data relies on consent as its legal basis.

If you do not provide information necessary for a particular online service, that service may be unavailable to you.

Sharing of Information

We share relevant information only as needed for the purposes in this policy, including with:

• Epic Games / Epic Online Services and, where applicable, Steam / Valve or other platform providers supporting the features you use.
• Hosting, networking, relay, server and other service providers that help operate and support the game and connected services.
• Other players and player hosts, to the extent needed for the multiplayer, results or replay features described above.
• Professional advisers, regulators or competent authorities where necessary to meet legal obligations or establish, exercise or defend legal claims.

Providers acting on our behalf process information for the relevant service under applicable contractual requirements. Providers operating their own accounts and platforms may also act as independent controllers under their own privacy policies.

Data Retention

We retain personal information only for as long as reasonably necessary for the stated purposes and applicable legal obligations. This depends on the type of information, whether a session or service remains active, the need to maintain requested results or replays, support and security needs, and any legal requirement to retain records.

When information is no longer needed, we delete it or anonymise it as appropriate. Retention by Epic, Valve and other independent platform providers is governed by their own policies. You can contact us about the retention or deletion of information we control.

International Data Transfers

Online services and their providers may process information outside the UK or European Economic Area. The countries involved depend on the providers and services used.

Where we make a transfer subject to UK or EU transfer restrictions, we use an applicable lawful transfer mechanism. This may include an adequacy decision or appropriate contractual safeguards, such as the UK International Data Transfer Agreement, the UK Addendum or EU Standard Contractual Clauses, with additional measures where required. Contact us for information about the safeguards relevant to your data or how to obtain a copy. Independent providers explain their own transfers in their privacy policies.

Security

We take appropriate technical and organisational measures to protect personal information against unauthorised access, misuse, loss or disclosure, taking account of the information and risks involved. Access should be limited to those who need it to provide or support the relevant service. No system or internet connection can be guaranteed completely secure.

Your Privacy Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• Access your personal information and receive a copy.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Restrict how your information is processed.
• Object to processing based on legitimate interests.
• Receive information you provided in a portable format, or have it transferred to another controller, where applicable.
• Withdraw consent where processing relies on consent, without affecting the lawfulness of processing before withdrawal.

To make a request, contact us using the details below. We may need proportionate information to verify your identity and locate the relevant records. We will respond within the time required by applicable law and explain any limitation that applies. For information controlled independently by Epic, Valve or another platform, you can also use that provider's privacy tools or contact it directly.

You have the right to complain to the UK Information Commissioner's Office (ICO). Where EU GDPR applies, you may also complain to a relevant EU supervisory authority, including in the country where you live or work. You do not have to contact us before exercising that right.

Children

DESLOT is not intended to knowingly collect personal information from children beyond what is required to provide the service in accordance with applicable law. Platform and account age requirements, permissions and parental controls may also apply.

Where parental consent or other protections are legally required, these must be in place for the relevant processing. If you are a parent or guardian and believe a child has provided information that should not have been collected, contact us so we can investigate and take appropriate action, including deletion where required.

Third-Party Services

DESLOT and its website may link to or use third-party services. Their own privacy notices explain information they process independently, including account and platform activity. In particular, review the Epic Games Privacy Policy and, when using Steam, the Valve Privacy Policy.

This policy describes our handling of information connected with DESLOT. It does not replace the policies of those providers.

Changes to This Privacy Policy

We may update this policy as DESLOT develops, its services change or legal requirements evolve. We will publish the updated policy here and change the Last Updated date. Where required, we will provide additional notice of material changes or obtain consent before new processing that requires it.

Contact Us

For privacy questions or to exercise your rights, contact SuperEgo Software Ltd. at contact@superegosoft.com. Please mention DESLOT and describe your request so we can direct it appropriately. Do not send passwords or other account secrets.