Last updated: August 25, 2026

1. Scope and responsible companies

This Privacy Policy explains how personal information is collected, used, disclosed, and protected when you visit stagetour.com, use associated pages or customer tools, create an account, join a mailing list, place or manage an order or pre-order, receive or obtain support for bundled Stage Tour game content, including any game code, contact support, request a return or warranty remedy, or otherwise interact with Stage Tour (collectively, the "Services").

RedOctane Games LLC, a Delaware limited liability company, operates the Stage Tour website at stagetour.com (the "Site"), develops and publishes the Stage Tour game, and is a controller of personal information used for website and game-publishing activities, game licensing, brand communications, and related security and analytics.

RedOctane Labs LLC, a Delaware limited liability company, is a controller of personal information processed in connection with purchases, payment processing, order fulfillment, returns, refunds, customer support, and warranty administration.

RedOctane Games LLC and RedOctane Labs LLC are affiliated companies. Where they jointly determine the purposes and means of an integrated Stage Tour processing activity, including shared storefront, account, support, security, analytics, or coordinated-communication functions, they act as joint controllers. Their arrangement allocates responsibilities: RedOctane Games LLC leads matters concerning website operation, game publishing and licensing, and brand activities; RedOctane Labs LLC leads matters concerning purchases, payments, fulfillment, returns, refunds, and hardware warranties. You may exercise applicable privacy rights against either controller. A request sent to the shared contact in Section 16 will be routed and coordinated without requiring you to identify the responsible company. In this notice, we refer to the two controllers together as "RedOctane," "we," "us," or "our," but each remains responsible for the processing it determines.

The Stage Tour storefront is hosted by Shopify through a dedicated Stage Tour store. Purple Dot facilitates Stage Tour pre-orders through a dedicated Stage Tour configuration and provides the pre-order management portal at https://stagetour.com/pages/manage-pre-orders. The direct storefront currently accepts orders for delivery to Australia, Canada, the 27 member states of the European Union, Hong Kong SAR, Israel, Japan, Malaysia, Mexico, New Zealand, the Philippines, Saudi Arabia, Singapore, South Africa, South Korea, Taiwan, the United Arab Emirates, the United Kingdom, and the United States. Availability may vary by product and checkout is the authoritative source for current delivery availability. This sales-market list does not narrow this Privacy Policy's application to visitors or other interactions from elsewhere. Those and other providers process personal information as described below and in their own privacy notices. This notice does not govern a platform holder's processing when you access or redeem a game key or use its network.

2. Personal information we collect

2.1 Information you provide

Contact and identity information, such as name, email address, telephone number, billing address, shipping address, and country or region.
Account information, such as account identifier, login information processed by Shopify, saved preferences, and account activity.
Order and commercial information, such as products, platform or region selection, game delivery format, quantities, prices, taxes, shipping method, order status, Purple Dot pre-order identifier, digital-key availability or support status where provided to us, cancellations, refunds, discounts, and purchase history.
Payment-related information. Depending on location, device, browser, and order type, payment options include Visa, Mastercard, American Express, Discover, PayPal, Apple Pay, Google Pay, and any other method displayed at checkout. Full payment for a pre-order is captured at checkout. Shopify and the applicable payment provider process complete card, bank, wallet, or installment credentials. RedOctane generally receives transaction status, payment-method type, tokenized identifiers, limited card details such as brand and last digits, billing information, and fraud results, but not complete card numbers or card security codes.
Support and returns information, including messages, email correspondence, return reasons, photographs, tracking details, proof of purchase, return authorization, refund or chargeback information, and complaint records.
Hardware and warranty information, which may include product model, platform variant, serial number or device identifier, delivery date, diagnostic information you choose to provide, and repair or replacement history.

Information stored on a returned device. A product returned for inspection, warranty service, or a change-of-mind return may still hold information you saved on it. The Stage Tour Two-Year Limited Warranty asks you to remove personal items and disconnect accounts before shipping. We access data remaining on a returned device only as needed to assess the claim, and we erase or securely dispose of it before the device is reused, refurbished, or discarded.

Connected-product and firmware information, if the guitar hardware or a desktop or web-based updater or online feature connects to our systems. No Stage Tour mobile companion application is offered at storefront launch. Depending on the feature, this information may include firmware or software version, hardware and connection identifiers, pairing or connection logs, calibration settings, crash or diagnostic reports, and update history. We will update this policy before collecting additional connected-product telemetry not described here.
Marketing and event information, including email and SMS preferences, the source and date of a consent or opt-out, checkout or sign-up selections, suppression-list status, survey or contest responses, and event participation.
Private communications and feedback, such as suggestions or other materials you choose to send directly to us. At storefront launch, we do not enable or collect public product reviews, ratings, comments, questions and answers, community posts, storefront user uploads, or public user profiles.

2.2 Information collected automatically

When you use the Services, we and our providers may automatically collect Internet, device, usage, interaction, and conversion information through cookies, pixels, and similar technologies, including the Meta Pixel. This may include IP address, browser and device type, operating system, language, referring and exit pages, date and time, pages viewed, interactions with the storefront and pre-order portal, product, cart, checkout or purchase events, cookie and advertising identifiers, error logs, and approximate location inferred from IP address. We do not intend to collect precise GPS location unless a feature clearly requests permission.

2.3 Information from other sources

We may receive information from Shopify, Purple Dot, payment and fraud providers, customer-support and returns providers, fulfillment centers, carriers, distributors, tax and customs providers, our affiliates, analytics and advertising partners including Meta, social networks when you choose an integration, and platform holders where an integration or support request permits information sharing. For example, Purple Dot provides the contact, address, order, status, and transaction information needed to manage a pre-order. Meta may provide measurement, attribution, audience, and advertising reports or related information when the Meta Pixel or Meta advertising services are used.

2.4 Sensitive personal information

We do not ask you to provide sensitive information such as health information, racial or ethnic origin, religious beliefs, sexual orientation, biometric identifiers, or precise geolocation for ordinary storefront purchases. Account-login credentials and payment authentication information may be treated as sensitive under some laws; they are processed by Shopify and payment providers for account access, payment, fraud prevention, and security, not to infer personal characteristics. Do not include unnecessary sensitive information in support messages.

3. How and why we use personal information

Provide and operate the Services, including storefront, account, checkout, and customer-portal functions.
Accept, charge at checkout, invoice, manage, and fulfill orders and Purple Dot pre-orders; enable customers to manage or cancel pre-orders before a shipping confirmation is issued through the dedicated portal at https://stagetour.com/pages/manage-pre-orders; and provide status, delay, cancellation, refund, shipment, and delivery communications.
Deliver or support bundled Stage Tour game content and verify product, platform, region, and eligibility information. PC (Steam) and Xbox Series X|S bundles provide a digital redemption key accessible by QR code. Nintendo Switch 2 bundles include the game in the physical or digital format identified on the applicable product page. PlayStation 5 bundles include a Blu-ray Disc and require internet service for the game download. For digital-key bundles, we use the information needed to authenticate the order, make the key accessible, record relevant delivery or support status, and investigate an invalid, duplicate, or previously used key. Platform holders process access and redemption under their own notices.
Provide customer service; process changes, returns, exchanges, refunds, warranty claims, damaged-shipment reports, chargebacks, and complaints.
Verify identity, payment authority, address, and order information; detect fraud, duplicate orders, misuse, sanctions, export restrictions, and security incidents.
Calculate taxes and shipping, support customs and delivery, keep transaction records, comply with accounting and legal obligations, and establish or defend legal claims.
aintain, troubleshoot, measure, secure, and improve the Services, products, customer experience, and business operations.
Send marketing messages if you opt in or if another lawful basis permits them; maintain suppression records when you opt out
Build or use audiences through Meta and other advertising partners; and, if enabled in the future, measure advertising performance and attribution or personalize, retarget, or deliver advertising, in each case subject to your choices and applicable law.
Complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable safeguards.

We may use aggregated or de-identified information for lawful purposes when it cannot reasonably be linked back to you, and we will not attempt to re-identify it except as permitted by law.

4. Legal bases for EEA, UK, and similar jurisdictions

Where a legal basis is required, we rely on one or more of the following:

Contract and pre-contract steps: to process a requested checkout, accept and fulfill an order or pre-order, provide bundled game content, communicate about the transaction, and provide returns, refunds, and warranty service. This basis covers the first four purposes listed in Section 3.
Legitimate interests: to secure and improve the Services, prevent fraud, manage operations, answer support requests, enforce terms, and conduct proportionate analytics. This basis covers fraud, security, and verification; maintaining, troubleshooting, measuring, and improving the Services; and a corporate transaction such as a merger, financing, acquisition, reorganization, or sale of assets, in each case balanced against your rights.
Consent: for the Meta Pixel and other non-essential cookies or similar technologies; electronic marketing where consent is required; measuring advertising performance and attribution, and building, using, personalizing, retargeting, or delivering advertising audiences through Meta and other advertising partners; precise location if ever requested; and other activities where consent is required. Where you are an existing customer and applicable law permits marketing about similar products without consent, we rely on that permission instead and always offer an opt-out. You may withdraw consent at any time, and withdrawal does not affect processing carried out before you withdrew it.
Legal obligations: to comply with tax, accounting, consumer-protection, product-safety, sanctions, law-enforcement, and regulatory requirements. This basis covers tax and transaction recordkeeping and the retention of records we are required to keep.
Vital interests: in rare circumstances to protect someone's life or safety.

Whether you have to provide personal information. Providing contact, delivery, and payment information is a contractual requirement. We need it to accept, fulfill, and support an order and to meet related legal obligations. If you do not provide it, we cannot complete the purchase. Marketing and SMS subscriptions, optional survey or contest entries, and non-essential cookies are optional. If you decline them you can still browse the storefront and place an order.

Data protection officer. RedOctane Games LLC and RedOctane Labs LLC are covered by the Embracer Group Data Protection Officer. You may contact the Data Protection Officer at dpo@embracer.com regarding the processing of personal information under this Privacy Policy.

5. How we disclose personal information

We may disclose personal information to the following categories of recipients for the purposes described above:

Shopify, which hosts the storefront, account, checkout, payment, security, analytics, and related commerce features. Shopify may also process data for its own enhanced services as described in its consumer privacy notice.
Purple Dot, which provides pre-order confirmation, payment-collection support, the dedicated Stage Tour pre-order management portal at https://stagetour.com/pages/manage-pre-orders through which customers can manage or cancel pre-orders before shipment, amendments, refunds, delay communications, and related services as our processor and agent. Purple Dot's public notice identifies cloud-hosting and email subprocessors.
Payment and fraud providers, including providers made available through Shopify and, when displayed for the relevant customer, methods or services such as Visa, Mastercard, American Express, Discover, PayPal, Apple Pay, and Google Pay to authorize, collect, refund, secure, and dispute payments. Availability may vary by location, device, browser, product, and order type.
Fulfillment, shipping, customs, and logistics providers, including Fulfilio for fulfillment from the Poland warehouse for European Union orders, Hawk Freight Logistics for fulfillment from the United Kingdom warehouse for United Kingdom orders, and TAL Logistics for fulfillment from the United States warehouse for all other supported destinations, plus distributors, carriers, insurers, returns providers, and customs or tax providers, to deliver products and manage lost, damaged, refused, returned, or international shipments. Carrier appointments remain subject to the destination and final fulfillment configuration.
Customer-service and business-system providers, including Zendesk for support, ZigZag for returns if used for the relevant order, any repair, refurbishment, or hardware-inspection provider engaged to assess a warranty claim or prepare a replacement, Microsoft 365 for business communications, and Termly or another consent-management provider if deployed, plus hosting, security, analytics, and professional-service providers.
Platform holders and game-service providers when necessary to deliver, redeem, validate, or support a code or when you direct us to share information. In many cases, you provide information directly to the platform holder and its privacy notice applies.
Analytics, advertising, and marketing partners, including Meta Platforms, Inc., Meta Platforms Ireland Limited, and their affiliates (collectively, "Meta"). The Meta Pixel is connected to the Site and, depending on the live configuration and your choices, may disclose device and browser information, IP address, cookie and advertising identifiers, page URLs, referring information, and interaction or event data such as page views and product, cart, checkout or purchase activity. We currently use the Meta Pixel for audience building. If enabled in the future, we may also use it for measurement, attribution, retargeting, and advertising, subject to your choices and applicable law. Meta may process information it receives under its own privacy policy. Other partners and the applicable technologies, purposes, and durations are identified in the current Cookie Policy and Consent Preferences interface.
Other RedOctane affiliates, when needed for site operation, order management, support, security, legal compliance, or another purpose described in this notice. Affiliate status alone does not authorize use of personal information for an unrelated purpose.
Authorities, courts, advisers, counterparties, and transaction participants when needed to comply with law, protect rights and safety, investigate misuse, or complete a corporate transaction.

We do not sell personal information for money. Our current use of the Meta Pixel for audience building may disclose personal information to Meta. If enabled in the future, the Meta Pixel and similar advertising technologies may also disclose personal information to Meta and other advertising or analytics partners for measurement, attribution, retargeting, or advertising. Applicable U.S. state law may define some of these disclosures as a "sale," "sharing," or targeted advertising. You may opt out as described in Section 10.

6. Relationship with Shopify and Purple Dot

6.1 Shopify

Shopify receives and processes information to host, secure, and improve the storefront and commerce services. Shopify may combine information about interactions with Stage Tour, other merchants, and Shopify for certain enhanced features for which Shopify determines its own purposes. Read the Shopify Consumer Privacy Policy and use Shopify's privacy portal where applicable.

6.2 Purple Dot

Purple Dot processes contact, address, order, payment-status, and pre-order information on our instructions through a dedicated Stage Tour configuration. It provides the Stage Tour pre-order management portal at https://stagetour.com/pages/manage-pre-orders. If a shopper asks Purple Dot to delete personal information, Purple Dot may first review any active pre-order and redact sensitive information from its systems when permitted, then direct the shopper to RedOctane to complete deletion from RedOctane and other provider systems. Contact us about a Stage Tour pre-order privacy request so we can coordinate the response. Read Purple Dot's Shopper Privacy Policy for its own practices.

7. Cookies, analytics, advertising, and communications

We and our providers use cookies, pixels, local storage, and similar technologies for essential storefront functions, security, fraud prevention, preferences, analytics, and, where permitted, advertising and retargeting. The Meta Pixel is connected to the Site and is currently used for audience building. If enabled in the future, it may also be used for measurement, attribution, retargeting, and advertising, subject to your choices and applicable law. The categories of information it may collect or receive are described in Sections 2 and 5.

The Stage Tour Cookie Policy and Consent Preferences interface identify the current technologies, providers, purposes, and durations. Essential technologies operate because the Services cannot function properly without them. Where consent is required, the Meta Pixel and other non-essential technologies are not activated until you consent. You can review or change available choices through the Consent Preferences control in the Site footer. Where applicable, the footer also provides a Your Privacy Choices or Do Not Sell or Share link for legally required opt-outs.

Order, pre-order, cancellation, delay, refund, dispatch, tracking, delivery, warranty, security, and account messages are transactional and are not conditioned on marketing consent. Shopify, Purple Dot, and fulfillment or logistics applications may send these messages on our behalf. Marketing consent is separate, and you can opt out of marketing email or SMS through the unsubscribe mechanism or by contacting us; we may keep a suppression record to honor the request. Where affirmative consent is required, a marketing choice will not be pre-selected. We do not currently send abandoned-checkout or abandoned-pre-order reminders. If that feature is enabled later, reminders will be sent only as permitted by your preferences and law.

Where we offer SMS or text-message marketing, we collect and retain evidence of your prior express written consent, including the date, time, the wording shown to you, and the checkout or sign-up page on which you gave it. SMS marketing is never a condition of purchase, message frequency varies, message and data rates may apply, and you can stop messages at any time by replying STOP or obtain help by replying HELP. Where Stage Tour presents separate email and SMS marketing choices, the applicable consent record is maintained for each choice.

8. Automated decisions and fraud screening

Shopify, payment providers, and fraud services may use automated signals such as address verification, card-security checks, device information, transaction history, and risk scores to approve, decline, hold, or review a transaction. We do not intend to make decisions producing legal or similarly significant effects solely by automated means except as permitted by law. Where required, you may contact support@stagetour.com to request information, express your view, or seek human review.

9. International data transfers

The two controllers are based in the United States, and providers or recipients may process information in the United States, United Kingdom, European Economic Area, or other countries where we or they operate. Appointment of a regional representative does not change the controllers' location. Those countries may have different privacy laws. Where required, we and our providers use lawful transfer mechanisms, such as adequacy decisions, standard contractual clauses, the UK addendum or international data transfer agreement, or another approved safeguard. You may contact us for information about applicable safeguards, subject to confidentiality and legal limits.

10. Your privacy choices and rights

10.1 General rights

Depending on your location and subject to exceptions, you may have rights to know or access personal information; correct it; delete it; obtain a portable copy; restrict or object to processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; appeal a denied request; and receive equal service and pricing when you exercise a privacy right.

10.2 How to submit a request

Email support@stagetour.com, use the data-subject-request form linked from the Site, or write to the address in Section 16. You may direct a request to RedOctane Games LLC, RedOctane Labs LLC, or both. A request received through the shared contact will be routed to the appropriate controller and, where necessary, coordinated between them without requiring you to resubmit it. Describe your request and the account, order, or email address involved. We will verify identity using information reasonably related to the request and will use verification information only for security, fraud prevention, and request processing. Authorized agents must provide valid authority; we may also verify directly with you. If we deny a request, you may appeal by emailing support@stagetour.com with the subject "Privacy Appeal."

A deletion request may be limited or deferred while information is reasonably required for an active pre-order, shipment, refund, chargeback, warranty, fraud investigation, tax or accounting obligation, legal claim, security need, or another lawful exception. A request made through Purple Dot may be checked against active pre-orders before Purple Dot redacts information and may require a separate request to RedOctane so that we can address copies held by us and other providers. We will delete or restrict other information when required.

10.3 Marketing, cookies, and Global Privacy Control

Use unsubscribe links for marketing messages and the Site's Consent Preferences and Your Privacy Choices controls for the Meta Pixel and other non-essential advertising technologies. We honor legally recognized Global Privacy Control signals as requests to opt out of sale or sharing and targeted advertising for the browser or device that sends the signal, and we apply those requests to the Meta Pixel and other relevant advertising technologies where required. We do not treat ordinary Do Not Track signals as a request unless law or an accepted standard requires it.

11. U.S. state privacy disclosures

This section supplements the rest of this Privacy Policy for residents of U.S. states that provide privacy rights. It applies only to the extent the applicable law covers RedOctane or the relevant processing. Terms such as "personal information," "personal data," "sale," "sharing," and "targeted advertising" have the meanings given by applicable law.

Notice at collection

This subsection is our notice at collection for California residents and is provided at or before the point at which we collect personal information. It is linked from the places where we collect information, including account creation, checkout and pre-order, newsletter and SMS sign-up, support requests, and survey or contest entries.

What we collect and why. We collect the categories of personal information listed below in this Section 11, for the purposes described in Section 3. We collect a limited amount of sensitive personal information, described below, and use it only for the permitted purposes stated in this Section.

Sale, sharing and targeted advertising. We do not sell personal information for money. We do disclose identifiers, commercial information, internet or network activity, approximate geolocation, and related inferences to Meta through the Meta Pixel for audience building, and if enabled in the future, may also be shared for measurement, attribution, retargeting and advertising, and applicable law may treat those disclosures as a sale, sharing, or targeted advertising. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age. We do not use or disclose sensitive personal information for purposes that give rise to a right to limit.

How long we keep it. We retain each category for the periods and on the criteria described in Section 12.

Your choices. You can opt out of sale, sharing, and targeted advertising using the Your Privacy Choices control on the storefront, the Consent Preferences interface, or a legally recognized Global Privacy Control signal, as described in Section 10.3. Section 10 explains how to exercise your other rights and how to appeal a denied request.

Categories of personal information collected

During the preceding 12 months, or since Stage Tour began collecting personal information if that period is shorter, we have collected the following categories, depending on how you use the Services:

Category	Examples collected	Main purposes	Sold/shared?	Retention
Identifiers and customer-record information	Name, email address, telephone number, billing and delivery addresses, IP address, account, order and Purple Dot pre-order identifiers, device and cookie identifiers, limited payment details and transaction records.	Storefront and account operation; orders and pre-orders; payment; fulfillment; support; fraud and security; tax, accounting and legal compliance; audience building and, if enabled in the future, advertising measurement and attribution.	Not sold for money. Personal information is shared with Meta through the Meta Pixel for audience building and, if enabled in the future, may also be shared for measurement, attribution, retargeting and advertising. Applicable law may treat these disclosures as a sale or sharing.	For the account or transaction relationship and as needed for refunds, chargebacks, tax, accounting, security and legal obligations; Meta Pixel and cookie identifiers follow the Cookie Policy or provider settings.
Commercial information	Products viewed, considered or purchased; platform or region selection; prices, taxes, shipping, discounts, order and pre-order history, cancellations, returns, refunds, chargebacks and warranty history.	Orders, pre-orders and fulfillment; game-content support; returns, refunds and warranties; analytics; fraud prevention; audience building and, if enabled in the future, advertising measurement and attribution; tax and legal compliance.	Not sold for money. Personal information is shared with Meta through the Meta Pixel for audience building and, if enabled in the future, may also be shared for measurement, attribution, retargeting and advertising. Applicable law may treat these disclosures as a sale or sharing.	For transaction, warranty, tax, accounting, dispute and legal periods described in Section 12; Meta Pixel event data follow the Cookie Policy or provider settings.
Internet or other electronic network activity	Browser and device information; pages viewed; referring and exit pages; storefront and pre-order portal interactions; cookie and advertising identifiers; security, diagnostic and error logs.	Store operation; security and fraud prevention; troubleshooting; analytics and improvement; audience building and, if enabled in the future, advertising measurement, attribution and retargeting.	Not sold for money. Personal information is shared with Meta through the Meta Pixel for audience building and, if enabled in the future, may also be shared for measurement, attribution, retargeting and advertising. Applicable law may treat these disclosures as a sale or sharing.	For the cookie or provider lifespan shown in the Cookie Policy, or as needed for security, fraud prevention and troubleshooting.
Geolocation data (approximate only)	Country, region or approximate location inferred from IP address and billing or delivery address. No precise GPS location for ordinary storefront interactions.	Checkout localization; fraud review; tax, customs and delivery; security; analytics and, if enabled in the future, advertising measurement.	Not sold for money. IP-derived approximate location may be shared with Meta through the Meta Pixel; applicable law may treat this as a sale or sharing.	With the related transaction or technical record under Section 12; Meta Pixel data follow the Cookie Policy or provider settings.
Audio, electronic, visual or similar information	Photographs or images voluntarily submitted for customer support, damaged shipments, returns or warranty claims.	Customer support; returns; damaged-shipment investigation; warranty administration; fraud prevention and claims.	No.	For the support, return or warranty matter and as needed for related claims or legal obligations.
Inferences	Fraud and risk indicators derived from order, payment, device and usage signals; interest or audience segments only if advertising tools are enabled.	Fraud and security; transaction review; analytics and improvement; audience building and, if enabled in the future, retargeting and advertising.	Not sold for money. Audience or interest-related inferences may be shared with or generated through Meta for audience building and, if enabled in the future, retargeting and advertising; applicable law may treat this as a sale or sharing.	For fraud, chargeback and security needs, or for the cookie or consent lifespan for advertising-related inferences.
Sensitive personal information (limited)	Account login credentials used with a password or security code and payment-authentication information processed by Shopify and payment providers.	Account access; payment processing; fraud prevention; security and integrity.	No.	Only as needed for account access, payment, fraud prevention, security, provider requirements and applicable law.

For ordinary storefront interactions, we do not intentionally collect protected-classification information, biometric information, professional or employment information, non-public education information or precise geolocation. Section 2.4 describes other sensitive information that we do not request.

Sources and recipients

We collect personal information directly from you, automatically from your browser or device, and from the providers and partners described in Section 2.3, including Shopify, Purple Dot, payment and fraud providers, fulfillment and shipping providers, customer-support and returns providers, Meta and other analytics or advertising partners, platform holders, and our affiliates.

The chart summarizes the main purposes for which each category is collected and used and the applicable retention criteria. Sections 3 and 12 provide additional detail.

We disclose personal information to the categories of recipients described in Section 5 only as reasonably necessary for those purposes. Not every category is disclosed to every recipient.

Disclosures for business purposes

During the preceding 12 months, or since Stage Tour began collecting personal information if that period is shorter, we have disclosed identifiers and customer-record information, commercial information, internet or network activity, approximate geolocation, visual information, inferences and limited sensitive personal information to service providers, contractors and other recipients described in Section 5 for the business purposes described above. Limited sensitive personal information is disclosed only as needed for account access, payment processing, fraud prevention and security.

Sale, sharing and targeted advertising

During the preceding 12 months, or since Stage Tour began collecting personal information if that period is shorter, we have disclosed identifiers, commercial information, internet or network activity, approximate geolocation, and related inferences to Meta through the Meta Pixel for audience building. If enabled in the future, we may also disclose those categories of personal information to Meta through the Meta Pixel for measurement, attribution, retargeting, and advertising. We do not sell personal information for money. Applicable law may treat these disclosures as a "sale," "sharing," or targeted advertising. We may make similar disclosures to other partners identified in the current Cookie Policy or Consent Preferences interface.

Where applicable, you may opt out through the Your Privacy Choices control and by using a legally recognized Global Privacy Control signal, as described in Section 10.3. We do not knowingly sell or share the personal information of consumers we know to be under 16 years of age.

Your rights

Depending on where you live and subject to applicable exceptions, you may have the rights described in Section 10, including rights to know or access personal information, correct it, delete it, obtain a portable copy, opt out of sale, sharing, targeted advertising or certain profiling, limit certain uses of sensitive personal information, appeal a denied request and receive equal service and pricing when exercising a privacy right. Section 10 explains how to submit a request or appeal and how authorized agents may act for you.

We use and disclose limited sensitive personal information only for permitted purposes such as providing requested services, authenticating accounts and payments, maintaining security and integrity, preventing and investigating fraud and verifying service quality. We do not use it to infer characteristics about you. To the extent our use remains limited to those purposes, a statutory right to limit that use does not apply.

California residents may also request information under California's Shine the Light law about certain disclosures for third-party direct marketing by using the contact details in Section 16.

12. Retention

We retain personal information under our control only for as long as reasonably necessary for the purposes for which it was collected or otherwise lawfully processed, including legal, security, accounting, consumer-protection, dispute-resolution and recordkeeping needs. RedOctane Games LLC and RedOctane Labs LLC determine retention periods for information under their respective control. Where a provider processes information on our behalf, its default settings do not authorize retention for longer than we lawfully need the information, and we configure available retention controls to reflect these criteria. We periodically review the criteria against applicable requirements and delete or de-identify information earlier when the relevant need has ended.

Our abandoned-checkout records in Shopify are retained for the period needed to maintain or complete the transaction, respond to a customer request, send any reminder permitted by law, and address fraud or security concerns, after which they are deleted or de-identified. Active preorder records are retained while needed to administer the transaction. Declined, rejected and canceled order records are retained only for as long as needed for fraud prevention, payment-dispute handling, security and applicable legal requirements, after which they are deleted or de-identified.
Completed order and payment records under our control are retained for the period needed to administer the transaction, including delivery, cancellation, returns, refunds and chargebacks. Where a record is also needed for tax, accounting, fraud-prevention, product-safety, warranty, legal-claim or applicable limitation-period purposes, it is retained for the period required by that specific purpose and is not used for unrelated purposes after that need has ended.
Customer-support records under our control in Zendesk are retained for the period needed to resolve the matter and administer any related return, warranty or other claim. Return and warranty records are retained for the applicable two-year warranty period beginning on delivery, for as long as a related claim remains open, and afterward only for as long as reasonably necessary to document the outcome, identify recurring issues, comply with law or establish, exercise or defend a legal claim.
Marketing records are retained while you remain subscribed and for a defined period of inactivity afterward, after which they are deleted or de-identified. Where marketing is based on consent, we stop the relevant use when you withdraw consent. When you opt out, or when we grant a deletion request, we may retain a limited suppression record containing the information necessary to honor the opt-out and prevent further marketing.
Cookies and similar technologies placed through our configuration remain for the lifespan stated in the consent tool or Cookie Policy, subject to the settings we make available. Analytics information under our control is retained according to the applicable configured retention period. Meta may retain information it receives through the Meta Pixel under its own privacy policy and applicable terms.

Where Shopify, Meta, a payment provider, platform holder or another third party acts as an independent controller, that third party determines its own retention periods under its privacy policy and legal obligations. A third party may act as our processor for some activities and as an independent controller for others.

When information under our control is no longer needed, we delete or anonymize it, or securely isolate it from ordinary use until deletion is feasible. Backup copies persist only until overwritten through the ordinary backup cycle and remain protected from ordinary use in the meantime.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, provider management, secure payment processing, and incident-response measures. No system or transmission is completely secure. Protect your account credentials, use a secure connection, and contact us promptly if you suspect unauthorized activity.

We maintain an incident-response process covering detection, assessment, containment, and notification. Where a security incident affecting personal information triggers a notification duty, we notify the competent supervisory authority, other regulators, and affected individuals within the periods and in the form applicable law requires, and we keep a record of the incident and of our assessment. Our providers are contractually required to notify us of an incident without undue delay.

14. Children and teenagers

The storefront is a general-audience service intended for users aged 13 or older. A person under 13 should not use the Services, create an account, subscribe to marketing, or submit personal information. To create a purchasing account or place an order, a customer must be at least 18 years old, or the age of legal majority where the customer lives, and able to enter a binding contract. A parent or legal guardian should place an order for a minor. We do not knowingly direct marketing to or knowingly collect storefront information from a child under 13 without the involvement or authorization required by law. If you believe a child submitted information improperly, contact support@stagetour.com so we can investigate and take appropriate action.

We keep the minimum site-use age, purchasing age, game age rating, and marketing targeting settings for the storefront aligned with one another. We do not knowingly sell or share the personal information of a consumer under 16, and we do not direct behavioral advertising to a person we know to be under the applicable age.

15. Regional representatives and complaints

If you are in the EEA or UK, you may have rights to access, correct, erase, restrict, object, port data, withdraw consent, and complain to your local supervisory authority. If you are in Canada, Australia, New Zealand, Switzerland, South Africa, or another region, you may contact the applicable privacy regulator.

For European Economic Area privacy matters, RedOctane Games LLC and RedOctane Labs LLC have each appointed Fellowship Entertainment AB, a company incorporated under the laws of Sweden, registration number 559381-0236, with its registered office at Tullhusgatan 1B, 652 09 Karlstad, Sweden, as their representative under Article 27 of the EU GDPR. You may contact the representative by emailing dpo@embracer.com or by writing to that address. You may contact the representative on any matter relating to the processing of your personal information. Appointment as representative does not make Fellowship Entertainment AB the seller, merchant of record, or hardware warrantor for Stage Tour purchases.

For United Kingdom privacy matters, RedOctane Games LLC and RedOctane Labs LLC have each appointed RedOctane Labs Limited, a private limited company incorporated in England and Wales (Company No. 04511276), with its registered office at 4 Cromwell Court, New Street, Aylesbury, Buckinghamshire, England, HP20 2PB, as their representative under Article 27 of the UK GDPR. You may contact the representative by writing to that address or by emailing dpo@embracer.com. You may contact the representative on any matter relating to the processing of your personal information. Appointment as representative does not make RedOctane Labs Limited the seller, merchant of record, or hardware warrantor for Stage Tour purchases.

You also have the right to lodge a complaint with a supervisory authority. If you are in the European Economic Area, you may contact the supervisory authority in the country of your habitual residence, place of work, or the place of the alleged infringement. If you are in the United Kingdom, you may contact the Information Commissioner's Office.

16. Contact us

Privacy questions and requests may be sent to:

RedOctane Games LLC
RedOctane Labs LLC
Attn: Privacy Policy Inquiry
3142 Constitution Drive
Livermore, California 94551
United States
Email: support@stagetour.com
Telephone: (888) 482-7190

17. Changes to this policy

We may update this Privacy Policy to reflect changes in the Services, providers, pre-order process, products, or law. We will change the revision date and provide additional notice of material changes where required. We encourage you to review the policy periodically.

Each published version carries an effective date, and we retain prior versions so that the terms applicable to a past order can be identified. Where a change materially reduces your rights or expands our processing, we give advance notice where applicable law requires it and, where consent is the basis, obtain consent before the change takes effect.

PRIVACY POLICY