Privacy Policy

Effective date: October 19, 2026. This policy covers xnightstarr.com, the Heartbroken Ruins No Future game (browser demo and desktop Full Version), and the Music Commission System at sales.xnightstarr.com, all run by XNIGHTSTARR ("we").

The short version

• We collect only what we need to sell, deliver, book and support what you ask for.
• We don't sell your personal information, and we don't share it for targeted advertising.
• The game doesn't collect anything: your saves stay on your own device.
• We don't use AI to make decisions about you, and we don't feed your personal information into AI tools.

What we collect and why

• Purchases (game, Collector's Editions, CDs, licenses, custom music, booking deposits): your name, email, and for physical orders your shipping address, phone number and hoodie size. Card and bank details are entered on Stripe's checkout and handled by Stripe. We never see or store your full card number. We use this to take payment, deliver your files, ship your order and keep tax and accounting records.
• Booking requests: the show details you type into the booking form (event, venue, date, contact name, email, phone, equipment, notes). We use them to answer your request and prepare your performance contract.
• Music Commission System accounts (supervisors and production companies): name, email, company, deal terms, approvals, typed-name signatures, and the IP address and browser of each approval, which are recorded as part of the license record. Supervisor payouts are handled by Stripe Connect.
• Forms and emails you send us (project forms, music update requests, emails): whatever you choose to include, so we can reply.
• Basic server logs kept by our hosting providers (such as IP address, browser type and pages requested) for security and to keep the site running.

Who we share it with

Only the services that run the business for us, and only for that purpose: Stripe (payments and payouts), Resend (sending order and delivery emails), Google (Drive file delivery and Google Forms), Cloudflare (download delivery), Hostinger and Railway (hosting), and Kunaki (CD pressing and shipping). We may also share information if the law requires it, or to protect against fraud.

Embedded content, cookies and tracking by other companies

xnightstarr.com doesn't set advertising or analytics cookies and doesn't use tracking pixels. Some pages embed players from Spotify and YouTube (in YouTube's privacy-enhanced mode), and the booking page can show Instagram clips once you tap to load them. When an embed loads, that company can collect information about your device and your activity, including over time and across different websites, under its own privacy policy. The Music Commission System uses one essential sign-in cookie. The game stores your saves and settings only in your browser's or device's local storage.

"Do Not Track" signals

Because we don't track visitors across websites, our own site works the same whether or not your browser sends a "Do Not Track" or Global Privacy Control signal. We don't respond to those signals differently because there is no tracking to turn off. Third-party embeds handle them under their own policies.

Sensitive data and sales

We don't collect sensitive personal data (such as health, biometric, precise location, government ID or information about children), and we don't sell personal data or share it for targeted advertising.

Children and teens

Our music contains explicit lyrics and the game contains violence and mature themes (see AI & Content Disclosures). Our site, store and game are not directed to children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child under 13 has sent us personal information, email us and we will delete it. Purchases, bookings and Music Commission System accounts are for adults 18 and over. Anyone under 18 needs a parent or guardian to buy on their behalf.

How long we keep it

Order, license and payment records are kept as long as tax, accounting and licensing law require (license records for the life of the license). Booking requests that don't go ahead are deleted within 12 months. You can ask us to delete anything we're not required to keep.

Your choices and rights

You can ask to see, correct, download or delete the personal information we hold about you, and to opt out of any marketing email at any time (every marketing email has an unsubscribe link). Depending on where you live, including Texas, California and the EU/UK, you may have additional rights under local privacy law. We will not treat you differently for using them. To make a request, email [email protected] from the address you used with us. We reply within 45 days (we may extend once by another 45 days if needed, and will tell you why).

Appeals. If we decline your request, you can appeal by replying to our answer with "Appeal" in the subject line. We'll respond in writing within 60 days and explain the outcome. If you're in Texas and still not satisfied, you can contact the Texas Attorney General.

EU and UK visitors. XNIGHTSTARR is the controller of your personal data. We process it to perform our contract with you (orders, delivery, bookings, licenses), to meet legal obligations (tax and accounting), and for our legitimate interest in running and protecting the site. Some service providers listed above are in the United States. You can complain to your local data protection authority.

Security

Payments run on Stripe, the site and Music Commission System are served over HTTPS, download links are signed and expire, and passwords are stored only as salted hashes. No system is perfectly secure, but we work to protect what you share.

Changes

If we change this policy we'll update the effective date above. Material changes will be announced on the home page for at least 30 days, and emailed to customers they affect.

Contact

XNIGHTSTARR · Texas, USA · [email protected]