SERENESTUDIO

Legal

Effective date:

Serene Creations LLC, a New Jersey trade name (DBA) of SPQR NJ LLC.

Our Privacy Commitment

Serene Creations LLC, a New Jersey company doing business as a DBA of SPQR NJ LLC (herein “us”, “we”, “our”, “Serene Creations”), designs and publishes light-pattern games. We treat your privacy and your wallet with the same respect we ask of our games: clearly, honestly, and without hidden mechanics.

We do not collect personal data on this website or in our games except information you voluntarily send us when you contact us. We do not sell data. We do not show advertising. We do not use third-party trackers. This Privacy Policy explains, in plain language and in detail, exactly what that means.

If you have questions or concerns about this policy, contact us at privacy@serenecreations.io.

Privacy Policy Summary

To make this Privacy Policy clear and simple, the summary below describes the main points. The full policy follows.

  • Data minimization is the default. We do not collect personal data unless you actively choose to send it to us — typically through our contact form. We do not require accounts to use our website or games.
  • No third-party trackers. We do not use Google Analytics, advertising pixels, social-media trackers, or marketing cookies. Where any tooling is used at all, we choose privacy-respecting options and disclose them.
  • No sale of personal data. We do not sell personal data to anyone, ever. We do not share data with advertising networks or data brokers.
  • Transparent processing. We process the limited information we collect (such as contact-form submissions and server access logs) only for the purposes described in this policy: responding to your inquiry, preventing abuse, and operating the site securely.
  • You have rights. You can ask what personal data we have about you, ask us to correct or delete it, withdraw consent, or lodge a complaint with a supervisory authority. Our privacy contact is privacy@serenecreations.io.

The full privacy policy is below.

About Serene Creations’ Privacy Program

  1. In this privacy policy, “Serene Creations”, “we”, “us” and “our” refer to Serene Creations LLC, a New Jersey trade name (DBA) of SPQR NJ LLC.
  2. We are committed to safeguarding the privacy and personal data of our website visitors, players, customers, partners, and others who interact with us. Our privacy program reflects principles drawn from the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA/CPRA), and other applicable regulations. Where we operate in additional jurisdictions, our program reflects those requirements.
  3. “Personal data” means any information that relates to a living, identifiable person, including but not limited to names, physical and email addresses, internet identifiers, phone numbers, and other information relating to that person, either individually or in combination, that can be used to identify that person.
  4. “Process” or “Processing” as used in this policy means the activities we perform on personal data, such as collection, transmission, storage, retrieval, and disposal.
  5. This policy applies when we are a data controller, a joint controller, or a processor as defined in the GDPR. As a data controller, we determine the means and purpose of processing. As a joint controller, we share that determination with another data controller. As a processor, we process personal data on behalf of a controller.

Our personal-data processing is consistent with the following privacy principles:

  • We process personal data lawfully, fairly, and transparently, in a way that you would reasonably expect, and we are open about our practices.
  • We collect and process only the personal data we need for a specific, declared purpose.
  • We obtain freely given, informed consent before processing any optional personal data, and you may withdraw consent at any time.
  • When we do process personal data, we are clear about why and how, and for how long we will retain it.
  • We take steps to ensure personal data is accurate and provide means to correct inaccuracies.
  • We implement appropriate technical and organizational controls to safeguard personal data for integrity and confidentiality.

How We Use Your Personal Data

Below we describe the categories of personal data we may process, the source of that data, the purposes for which we process it, and the lawful bases for processing.

Direct interactions

We process personal data you provide directly to us. This may happen when you:

  • send us a message through our contact form or by email;
  • request information about our games, our studio, press materials, or partnership opportunities;
  • opt in to a newsletter or other communication we offer;
  • apply for a job, internship, or contractor role with us;
  • inquire about investment in our company, where we may collect prospective-investor self-certification information; or
  • contact or interact with us in any other way.

We process this information to provide the response, service, or information you have requested. The lawful basis for this processing is your consent and/or our legitimate interest in operating our business and responding to inquiries.

Website and server data

When you visit www.serenecreations.io, our servers automatically generate access logs that may include:

  • IP address;
  • approximate geographical location derived from IP;
  • browser type and version;
  • operating system;
  • referring page (if any);
  • date, time, and duration of the request; and
  • the page or resource requested.

Server access logs are used solely for operating and securing the website, troubleshooting errors, and detecting abuse. We do not link this information to your identity unless required to investigate a security incident or comply with a legal obligation. The lawful basis for this processing is our legitimate interest in maintaining a secure and reliable service.

Our website does not use third-party advertising trackers, advertising cookies, social-media trackers, or marketing analytics. We use only strictly necessary cookies required for the site to function. If we ever introduce optional, privacy-respecting analytics (for example, a cookie-free, IP-anonymizing tool), we will update this policy and disclose the tool we use.

Game data

Our games are designed to function without an account. Where a game stores progress, settings, or preferences, that information is stored locally on your device by default. If a specific game collects information beyond local storage (for example, optional cloud save, opt-in leaderboards, or crash-reporting), the collection is disclosed in that game’s in-app privacy notice and is enabled only with your informed consent.

We do not use our games as a vehicle for advertising, behavioral profiling, contact-list scraping, or social-graph harvesting.

Contact and account data

If you submit a contact form, subscribe to a newsletter, apply for a role, or inquire about investment, we may process information you choose to provide, such as:

  • name;
  • email address;
  • subject and message you submit;
  • inquiry topic (for example: support, general inquiry, investment inquiry, press/media);
  • postal address (only if you provide it);
  • employment or candidate information (only if you apply for a role); or
  • prospective-investor self-certification information (only if you make an investment inquiry).

We use this information to:

  • respond to your inquiry;
  • send you the communications you have requested;
  • evaluate job or investment inquiries;
  • prevent abuse of our contact form, newsletter, and other channels; and
  • maintain reasonable records of business communications.

Depending on the nature of the processing, the lawful basis is either your consent, our legitimate interests, or, where applicable, the steps necessary to enter into a contract.

Other lawful processing

We may also process personal data identified in this policy where necessary for:

  • the establishment, exercise, or defense of legal claims, whether in court or in an administrative or out-of-court procedure;
  • obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice; or
  • compliance with a legal obligation to which we are subject, or to protect the vital interests of you or another natural person.

Special category data

We will not request personal data designated as special category data under the GDPR, including:

  • Health data: medical records, physical or mental health information;
  • Biometric data: fingerprints or facial recognition data used to identify a person;
  • Religious or philosophical beliefs: data revealing a person’s faith or ethical views;
  • Political opinions: information about affiliations or views;
  • Racial or ethnic origin: information about a person’s background;
  • Trade union membership;
  • Genetic data: inherited or acquired genetic characteristics; or
  • Sex life or sexual orientation.

For the avoidance of doubt, we will not request any special category data.

Children’s data

Our website and games are not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13. Some of our games may be appropriate for minors over the age of 13; in those cases, we still avoid collecting personal data unless strictly necessary, and we follow the principles in this policy.

Adults — including parents, guardians, and educators — may use our games with younger learners under their direct supervision. Our games are designed to function entirely on-device with no data collection, no accounts, no analytics, and no third-party SDKs that transmit identifiers, which makes supervised use safe. A family-use guide is planned and will link from this page when published.

The website itself, including the contact form and newsletter signup, is intended for adult use only. We require self-attestation that you are 13 years of age or older before submitting any form on this site. If we learn that a submission came from a child under 13, we delete it and do not respond automatically; we do not retain such submissions in any list or log.

If you believe a child under 13 has provided personal data to us, please contact us at privacy@serenecreations.io and we will promptly delete the information.

How We Share Your Personal Data

  1. We will not sell your personal data to any third party, ever. We do not share personal data with advertising networks, data brokers, or marketing affiliates.
  2. We may share limited information with trusted, contracted service providers who are authorized to process information strictly on our behalf and only to operate the website, deliver email, host content, or process payments where applicable.
  3. We may disclose your personal data to contracted third-party data processors acting on our written instructions and for the same purposes and lawful bases set out in this privacy policy.
  4. If we offer paid products in the future and a financial transaction occurs through our website, our payment processor will handle that transaction. We will share transaction data with the payment processor only to the extent necessary to process the payment, address related complaints or queries, and prevent fraud. Mobile app purchases (where applicable) are handled by Apple’s App Store or Google Play under their own terms.
  5. We do not participate in programs through which third-party suppliers contact you to market or sell their goods or services. If we ever enter such a program, we will update this policy and only include you with your explicit opt-in consent.
  6. We may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person (for example, to government bodies for tax purposes or to law enforcement agencies for the prevention and detection of crime, subject to a relevant and lawful written request). We may also disclose your personal data where necessary for the establishment, exercise, or defense of legal claims.

Data Sharing and Third Parties

Serene Creations LLC is a New Jersey trade name (DBA) of SPQR NJ LLC, operating from the United States. We process data in the United States and through limited third-party processors as listed below.

Serene Creations works with a small number of trusted, contracted third-party service providers who are authorized to process limited personal data:

Company Purpose Processing Location
Cloudflare, Inc. Website hosting, CDN, DDoS protection, anti-bot challenge (Turnstile), inbound email routing for support and contact addresses United States, EU
Resend (Plus Five Five, Inc.) Outbound transactional email: contact-form responses and newsletter delivery United States, EU
Stripe, Inc. (if and when paid offerings launch) Payment and subscription processing for any direct purchases United States, EU, UK
Apple Inc. / Google LLC (where games are distributed via app stores) App store distribution and in-app purchase processing United States, EU

We will keep this list current. Where we add or replace a processor, we will update this policy.

  1. We perform any international data transfers in compliance with the GDPR rules for those transfers, including technical and organizational safeguards for the protection of personal data.
  2. For Canada, Japan, Switzerland, the United Kingdom and the United States, we rely on the European Commission’s recognition that those countries offer an adequate level of data protection (an adequacy decision), where applicable.
  3. For other countries not covered by an adequacy decision, we employ additional safeguards to protect international data transfers, including the use of standard contractual clauses adopted or approved by the European Commission, where applicable.
  4. You may request more information about the safeguards we have in place for the transfer of personal data by contacting us at privacy@serenecreations.io.

Retaining, Updating, and Deleting Your Personal Data

  1. Contact-form submissions and related correspondence are retained for up to 24 months after the inquiry is resolved, and then deleted, unless a longer period is required to address an ongoing matter or to comply with a legal obligation.
  2. Server access logs are retained for up to 90 days for security and abuse-prevention purposes, and then deleted or anonymized.
  3. Financial records, where they exist, are retained for up to seven years to satisfy financial reporting and tax obligations.
  4. Employee and contractor personal data are retained for as long as the person is employed or contracted with us, and then for a period thereafter consistent with applicable employment regulations.
  5. In some cases, it is not possible for us to specify in advance the precise periods for which your personal data will be retained. In those cases, we determine the retention period based on the legitimate need to retain the data and any applicable legal obligation.
  6. We may retain your personal data where retention is necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another natural person.
  7. We delete your personal data at the end of the retention period, or earlier if we can. If you request deletion or removal from communications, we will honor that request promptly. Where a legal or contractual obligation prevents us from deleting specific records, we will tell you so and explain the basis.

Your Rights

Depending on where you live, you may have some or all of the following rights with respect to the personal data we process about you:

  • the right to access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to object to processing;
  • the right to data portability;
  • the right to opt out of the sale or sharing of personal data (we do not sell or share for cross-context advertising); and
  • the right to lodge a complaint with a supervisory authority.
  1. You have the right to confirm whether we process your personal data and to access that personal data, together with certain additional information, including the purposes of the processing, the categories of personal data concerned, and the recipients. The first copy will be provided free of charge; additional copies may be subject to a reasonable fee.
  2. You have the right to have any inaccurate personal data about you rectified and, considering the purposes of the processing, to have any incomplete personal data about you completed.
  3. In some circumstances you have the right to erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing; the processing is for direct marketing purposes; or the personal data have been unlawfully processed. The right to erasure does not apply where processing is necessary for the exercise of freedom of expression and information, for compliance with a legal obligation, or for the establishment, exercise, or defense of legal claims.
  4. In some circumstances you have the right to restrict the processing of your personal data, for example, when you contest the accuracy of the data, when processing is unlawful but you oppose erasure, when we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or when you have objected to processing pending verification of your objection.
  5. You have the right to object to our processing of your personal data on grounds relating to your particular situation, where the lawful basis for the processing is the performance of a task carried out in the public interest or our legitimate interests. If you make such an objection, we will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
  6. You have the right to object to our processing of your personal data for direct marketing purposes (including any related profiling). If you make such an objection, we will cease the processing for that purpose.
  7. Where the lawful basis for our processing is consent, or the performance of a contract to which you are a party, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. This right does not apply where it would adversely affect the rights and freedoms of others.
  8. If you consider that our processing of your personal data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement.
  9. Where the lawful basis for our processing is consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
  10. We may withhold personal information that you request to the extent permitted by law, and we may decline requests that are vexatious, manifestly unfounded, excessive, or repetitive.
  11. You may instruct us at any time not to process your personal data for marketing purposes.
  12. You may exercise any of your rights in relation to your personal data by written notice to us at privacy@serenecreations.io.

How We Use Cookies

  1. Cookies are small text files placed on your device when you visit a website. A persistent cookie remains until its set expiry date or until you delete it. A session cookie expires when you close your web browser.

  2. On www.serenecreations.io, we currently use only strictly necessary cookies required for the site to function (for example, session continuity and security). We do not use advertising cookies, social-media trackers, or analytics cookies.

  3. If we ever introduce optional cookies or a privacy-respecting analytics tool, we will update this policy and provide a clear, easy way for you to accept or reject those cookies.

  4. Managing cookies: You can manage or block cookies through your browser settings. The instructions vary by browser and device. For common browsers, see:

  5. If you block all cookies, some site features may not be available or operate as intended.

Changes to This Policy

  1. We may update this policy from time to time by publishing a new version on our website and updating the effective date at the top of the document.
  2. Where changes are material, we will notify you by email if we hold a current address for you, by a prominent notice on our website, or through a private messaging system within our games or services.

Contact

Privacy inquiries: privacy@serenecreations.io

General contact: hello@serenecreations.io

Postal address: Serene Creations LLC (DBA of SPQR NJ LLC), New Jersey, USA. A complete mailing address will be provided on request.