Privacy Policy

Last updated October 15, 2026

This Privacy Policy explains how Swale & Wren Studios ("we", "us", "our") collects, uses, shares and protects information about you when you visit swaleandwren.com, play our games (including Scrum-Ban-Fall at sdlc.swaleandwren.com), or otherwise communicate with us (together, the "Services"). By using the Services, including by playing as a guest without an account, you agree to this policy and to our Terms of Use. If you do not agree with it, please do not use the Services.

1. Information we collect

Information you give us.

• Email address. If you sign up for studio news, we collect the email address you enter and record the date you signed up.
• Messages and feedback. If you email us or use a feedback form in a game, we collect the content of your message and any contact details you include.
• Game account details. If you create an account in a game, we collect your name (shown at the table), your email address and your password. We store the password only as a salted, one-way hash, never in readable form. The game also saves the progress you earn (achievements, points, streaks, unlocked items and settings) to your account so it follows you between browsers. We record which version of these Terms and this policy you agreed to when you signed up.
• Guest play. You can play as a guest. A guest's name and progress stay in the browser on their device and are not linked to an account.
• Feedback. If you send feedback from inside a game, we collect the message and any ratings you choose to give.

Information collected automatically.

• Technical data. When you use the Services, our hosting provider processes standard request information such as your IP address, browser type and version, device type, the pages or resources requested, referring page, and the date and time of the request. We use it to deliver the Services, keep them secure, prevent abuse and understand overall usage.
• Game activity. To understand how a game is used, we note when accounts register, sign in, start a game or send feedback, along with the type of browser used, and we count games started by guests without tying them to a name. We never record your password in this activity.
• Local storage and cookies. Our games save your settings, guest name and progress in your browser's local storage on your device. If you sign in to a game, it also sets a single, strictly necessary sign-in cookie to keep you signed in. Our main website, swaleandwren.com, sets no cookies.

We do not intentionally collect sensitive categories of personal information, and we ask that you do not send us any.

2. How we use information

• To provide, operate, maintain and secure the Services and our games.
• To send studio news, game announcements and updates to people who asked for them.
• To respond to your questions, requests and feedback.
• To understand how the Services are used and to fix problems, balance gameplay and improve our games.
• To detect, prevent and respond to fraud, abuse, cheating and security incidents.
• To comply with legal obligations and enforce our Terms of Use.

3. Legal bases (EEA, UK and similar regions)

Where the law of your region requires a legal basis for processing personal data, we rely on: consent (for example when you subscribe to our mailing list, which you may withdraw at any time); performance of a contract (providing the games and features you ask to use); our legitimate interests (securing and improving the Services, preventing abuse, and communicating with players), balanced against your rights; and legal obligation where applicable.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With service providers that process it on our behalf, such as Cloudflare, Inc., which hosts the Services, stores our mailing list, accounts and related data, and sends account emails such as password-reset links, under its own privacy policy.
• For legal reasons, if we believe disclosure is required by law, regulation, legal process or a government request, or is necessary to protect the rights, safety or property of us, our players or others.
• In a business transfer, such as a merger, acquisition or sale of assets, in which case the information may be transferred to the successor, who will remain bound by this policy.
• With your consent or at your direction.

5. Cookies and similar technologies

Our main website does not set cookies and does not use advertising or cross-site tracking technologies. Our games use local storage, and a sign-in cookie if you sign in, strictly to remember your settings, session and progress. You can clear this data in your browser settings, but parts of a game may then stop working or reset.

6. Data retention

We keep personal information only as long as needed for the purposes described in this policy. We keep your email address until you unsubscribe or ask us to delete it. We keep a game account and its saved progress until you delete it; you can delete your account yourself, with your password, from the Account page in the game, and doing so removes the account and the progress saved with it. Messages are kept as long as needed to respond to you and maintain a record of our communications. Server logs are retained by our hosting provider for a limited period under its own retention rules. We may keep information longer where required by law or to resolve disputes and enforce our agreements.

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International transfers

We and our service providers may process information in countries other than the one where you live, including the United States, which may have different data protection laws. Where required, we rely on appropriate safeguards for such transfers.

9. Your rights and choices

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; restrict or object to certain processing; receive a portable copy of your information; withdraw consent at any time; and not be discriminated against for exercising your rights. Residents of the EEA and UK may also lodge a complaint with their local data protection authority. Residents of California and certain other US states have rights under applicable state privacy laws, which we will honor.

To exercise any of these rights, or to unsubscribe from our mailing list, email hello@swaleandwren.com. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.

10. Children's privacy

The Services are not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-party links

The Services may contain links to websites and services that we do not own or control. We are not responsible for their privacy practices, and we encourage you to read their policies.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the "Last updated" date above. If changes are significant, we will provide additional notice where appropriate. Your continued use of the Services after an update means you accept the revised policy.

13. Contact us

If you have questions about this policy or how we handle your information, contact Swale & Wren Studios at hello@swaleandwren.com.