The Molasses Flood is a video game developer. The GDPR sets out requirements for all companies handling the personal data of EU citizens, which includes us.
The GDPR requires that we communicate what we do with collected data, and make that information publicly accessible, thus this document.
We may update this policy in the future as we continue to grow and change as a company.
What data do you hold about me?
We hold the following details for people who have signed up for our email list:
Possibly your first and last name or other contact information, if you provided those at time of signup
Backer Database (Kickstarter/BackerKit):
We hold the following details for people who backed The Flame in the Flood on Kickstarter:
Physical address (if you provided it for the purpose of us shipping you Kickstarter rewards)
Note that we do not have, nor ever had your payment information. That was only held by Kickstarter or BackerKit.
Level backed at
We record game play analytics from The Flame in the Flood. You can opt out of uploading analytics in the options of the game. Those analytics store gameplay behavior, and include a unique identifier to verify gameplay across multiple sessions, however we have no way of linking that identifier to a specific user in any way. Our analytics back end is hosted on Google’s servers, as we use their Google Analytics service to record gameplay events. Honestly, as we can’t link this data to an individual user, we’re not sure that it even qualifies as personal data, but we’d rather list it than not.
Website and Cookies Policy
Our website is hosted by Squarespace, and we use a google analytics account in association with our site. We don’t host or store any user data outside of those services.
How did you get my data?
If you are on our email list, it is because you have opted in via our web page.
If you are in our backer database, it is because you backed The Flame in the Flood on Kickstarter.
Website and Cookies:
If we have website/cookie data about you, it’s because you visited themolassesflood.com.
Playing the game:
If you’ve played The Flame in the Flood and didn’t turn off gameplay analytics recording, then the game will send anonymized data about gameplay to google.
What do you use my data for?
We use your data only to keep connected with you as a customer. Specifically sending updates about the company and our games. We also use the data to improve our games by observing broad trends in player behavior.
We DO NOT transfer your information to any third party for any reason not involved in maintaining a relationship with you as a fan and customer of The Molasses Flood and our products.
We DO NOT sell your information to any third party for any reason.
Who is responsible for my data?
Any data collected about you will be kept under The Molasses Flood’s control to the best of our ability. In most cases, your data is stored on one of our service provider’s systems–see later in this policy.
The Molasses Flood is a Massachusetts LLC and can be contacted using the following details:
The Molasses Flood
1035 Cambridge St #1
Cambridge, MA 02141
How long will you keep my data for?
Email list data:
We keep your data as long as you remain subscribed to the mailing list. You can unsubscribe at any time using the link in any email we send you.
We will keep your data long enough to be able to fulfill all Kickstarter-related rewards and activities. Kickstarter has their own policy for maintaining your data, so we encourage you to check with them for any related concerns.
Website data & Game Analytics:
We keep your website cookies only as long as you allow the cookies to exist on your web browser. You may delete them at any time using your browser settings. Data recorded via google analytics automatically deletes itself after 26 months.
Where will my data be stored?
Any of your data that we store directly (as opposed to data stored by Squarespace and Kickstarter) is stored on our AWS server in Perforce, our file versioning system. This means that some data (backer databases) are synced to our local machines when we need to update or access it for Kickstarter related activities. We also use cloud based services to store and process data about customers. These include Mailchimp, Amazon Web Services, Kickstarter, and Google.
We may choose to use other service providers in future. If we change our service providers then we will update the details on this page so you can always return to this page to see where your data is being stored.
Email List Data:
Your email list data is stored by MailChip–see contact information below.
What data: Just name and email address
Purpose: Keeping in touch with you via email
Data location: USA
More info: https://mailchimp.com/about/security/
Kickstarter data is stored on Kickstarter.com
What data: Data related to you supporting our crowdfunded projects
Purpose: Fulfilling our obligations related to our crowdfunded projects
Data location: USA
More info: https://www.kickstarter.com/privacy
Your website data is stored on SquareSpace and Google –see contact information below.
What data: Server-related info (website visits, forum login, posts)
Purpose: Website interaction
Data location: USA
More info: www.squarespace.com
What Data: Anonymized behavior data:
Website: Number of pages viewed, repeat visits, time spent
Gameplay data: behavior: session time, number of gameplay sessions, notable gameplay events, such as distance traveled, items collected, cause of death, and similar.
Purpose: to analyze and improve the design of the game and website
Data location: USA
More info: https://myaccount.google.com/privacy?pli=1
Who will have access to my data? Will you pass my data to anyone else?
Only Molasses Flood personnel, contractors, and service providers (listed above) will have access to your data, and only for the purposes listed in this policy. We do not sell or otherwise distribute your data to anyone else.
What is GDPR?
GDPR stands for General Data Protection Regulation. This is a pan-european law which replaces previous national data protection legislation and gives all EU citizens common rights. The full text of the GDPR can be found here:
What rights does GDPR give me?
Full details of your rights are available in the text of the GDPR (see http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC), but here is a quick summary of the main provisions which are relevant to the type of data we hold about you:
Access: You have the right to view the data we hold about you and to receive copies of this data in digital format.
Accuracy: If any of the data we hold about you is incorrect or incomplete then you can provide the correct or complete data and we must update the data we hold.
Erasure: You can request that we erase all the data we hold about you.
Restriction of processing: In some cases you can ask us to retain your data but not do anything with it.
How do I exercise my GDPR rights?
You can unsubscribe from our email list at any time, using the link found in the footer of any email we send you.
If you want to exercise any of your rights in relation to data we hold about you then please email: firstname.lastname@example.org or email or write to us at the address given above (see “Who is responsible for my data?”)
Please provide details in your email/letter of what actions you would like us to take. Depending on the nature of the request and whether or not your request comes from the email address we have on file for you, we may need to verify your identity so that we don’t give out information to the wrong person. In most cases it helps if you are able to provide a contact phone number so that we can validate your identify and discuss the request with you.
What if I have a complaint?
If you are concerned about how we manage your data, or how we have handled a request to exercise your rights, then please get in touch with us to discuss it. To do this please send an email detailing your concerns to email@example.com.