Welcome to WobbleCrafter (www.wobblecrafter.com). This Privacy Policy explains how Rocket 5 Studios Inc. (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal data when you visit our website and purchase our original digital video game software.

While our primary e-commerce operations and gaming community are focused within the European region, we process all personal data in strict compliance with the General Data Protection Regulation (GDPR), Canadian privacy laws (PIPEDA), and other applicable global legal frameworks.

1. Data Controller
   For the purposes of the GDPR and applicable data protection laws, the data controller responsible for your personal information is:

Company Name: Rocket 5 Studios Inc.

Brand Name: WobbleCrafter

Registered Address: 5525 Front Rd, Stella, ON K0H 2S0, Canada

Corporate Registration Number: 810625-8 / 832215909RC0001

Contact Email: irregular@wobblecrafter.com

2. Age Restrictions & Eligibility
   Minimum Age Threshold: You must be at least 18 years of age (or the statutory age of digital consent in your country) to create an account or purchase our digital game software independently.

Minor Protection: Our website does not knowingly collect personal data from minors under the age of 18 without verifiable parental consent. If we discover that a minor has provided us with personal information or conducted an unauthorized transaction without parental guidance, we will delete that data and terminate the associated account or order immediately. If you believe we hold data of a minor, please contact us at irregular@wobblecrafter.com.

3. Third-Party Payment Processing (Stripe)
   To ensure the highest level of transaction security, we do not store, view, or collect your payment card details directly on our servers.

All financial transactions are securely handled and processed by our third-party payment processor, Stripe. Your payment information is collected directly by Stripe via secure tokenization. The use of your personal data by Stripe is governed strictly by their own Privacy Policy. Stripe complies entirely with the Payment Card Industry Data Security Standard (PCI-DSS) as managed by the PCI Security Standards Council.

4. Data Retention Periods
   We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, anti-fraud, or statutory reporting requirements.

Transaction and Financial Data: Retained for 7 years from the date of the transaction to comply with mandatory Canadian and international statutory tax, legal, and financial auditing obligations.

Customer Support & Communications: Retained for up to 2 years after the final resolution of your inquiry to ensure high-quality follow-up service and defend against potential legal claims.

Account Data: Retained for as long as your account remains active. Upon a valid account deletion request, your personal details will be anonymized or permanently deleted within 30 days, except where legal retention obligations apply.

5. Your Rights Under GDPR
   For users residing within the European region, you possess specific statutory rights regarding your personal data under the GDPR:

Right of Access: You can request a copy of the personal data we hold about you.

Right to Rectification: You can request the correction of inaccurate or incomplete data.

Right to Erasure (“Right to be Forgotten”): You can request the deletion of your data, subject to our 7-year legal tax retention requirements mentioned above.

Right to Data Portability: You can request a transfer of your data to another service provider.

Right to Withdraw Consent: You can withdraw your consent for marketing communications or data processing at any time.

To exercise any of these rights, please contact our data compliance team at irregular@wobblecrafter.com.

6. International Data Transfers
   As Rocket 5 Studios Inc. is located in Canada, data collected from European users will be transferred to and processed in Canada. Canada has been officially recognized by the European Commission as providing an adequate level of data protection (Adequacy Decision) under the GDPR framework, ensuring that your personal information remains secure under equivalent legal standards.