Privacy Policy

Screwcap Games, LLC · Last updated July 2026

This Policy explains how Screwcap Games, LLC (“Screwcap,” “we,” “us”) handles data across the portal at screwcap.games and the games The Chair, Gold Digger, Sutda, DoubleFives, and DTTAU (together, the “Services”). Individual games may publish their own privacy pages with more detail about that game specifically; where a game’s page is more specific, it governs for that game, and where it is silent, this one applies. Most of our games store progress and settings entirely in your own browser and never send anything to us — the exceptions are named below, by product.

1. Data We Collect

Game state, across all games — progress, settings, statistics, and any premium unlock you own — is stored in your browser’s localStorage, on your device, and is not transmitted to us. Clearing your browser data deletes it permanently, including unlocks. Account data, currently on DTTAU only: if you sign in with Google we receive your email address and basic profile (name, avatar), never your password, and we never post anything on your behalf. Synced content, DTTAU only: activities you log are stored in our database so the app works across your devices. Imported content, DTTAU only: if you connect Strava or a similar service, we import only the activity data you authorize. Email: if you join a mailing list or use a contact form, we receive your email address and whatever you typed, handled by Formspree. Purchase confirmations: when you buy something we are told a valid purchase exists and issued a license key; we never see your card. Technical and usage data: page views, rough traffic patterns, and, via the cookie-setting tools described in Section 3, browser-level measurement of how you arrived and what you did. We do not collect biometric data, we do not use your gameplay to train AI models, and we do not ask for your real name — the AI opponents were trained on self-play, not on you.

2. How We Use It, and Our Legal Basis

We use the data described above to run the Services, remember your progress and purchases, respond when you contact us, understand whether anyone is playing, measure whether our own marketing works, and keep the whole thing running. Where the UK/EU GDPR applies to you, our lawful bases are contract (providing the game and the purchase you paid for), legitimate interests (basic security, aggregate analytics, and defending ourselves against misuse), consent (non-essential cookies and marketing email, which you may withdraw at any time), and legal obligation (tax and accounting records for sales). We do not make automated decisions that produce legal or similarly significant effects about you.

3. Cookies and Third-Party Tools

Plausible provides aggregate traffic analytics, is cookieless, performs no cross-site tracking or personal profiling, and runs on every property (see their data policy). Google Analytics sets cookies and measures at the level of an individual browser; it currently runs on the portal, DoubleFives, Sutda, and DTTAU. Google Tag Manager is a container that loads some of the tags below, currently on the portal — it is the delivery mechanism rather than a tracker itself, but it is how the Meta and TikTok pixels reach the page, so we name it rather than hide the trackers behind it. The Meta (Facebook) pixel is a third-party advertising tracker that tells us whether an ad we paid for sent anyone here; it currently runs on the portal (via Tag Manager) and on DoubleFives, Sutda, and DTTAU. The TikTok pixel is the same kind of advertising-measurement tracker for campaigns run on TikTok, loaded through Tag Manager on the portal, and sets its own cookies under TikTok’s policy, not ours. Google AdSense serves ads on free tiers, sets its own cookies, and may personalize what it shows you under Google’s policies, not ours; it currently runs on DoubleFives only, appears on menus and end screens never during play, and buying the ad-free upgrade removes it. Gumroad handles payments and license verification as merchant of record. Formspree delivers email and contact form submissions. Vercel provides hosting and content delivery and processes request logs as part of serving the page. Supabase is the database behind DTTAU accounts and sync. This list is not fixed forever: as the studio grows we will add, swap, or drop vendors, and when that happens we will update this section and the date above so the page always names what is actually running, rather than quietly widening the meaning of “analytics” to smuggle in something new, or adding a category of tracking we have promised in Section 4 never to do. You can turn most of this off at the source: Google’s Ad Settings, Meta’s ad preferences, TikTok’s settings, or any content blocker — every game stays fully playable with all of it blocked.

4. Paying Means Less of the Above

The trackers and ads described in Section 3 are how a free game pays for itself. When you buy a premium tier — an ad-free upgrade on a game, or a DTTAU annual or lifetime plan — you are paying for that game’s running costs directly, so we lean on the free-tier machinery less. On any game where a purchase is the ad-free upgrade, buying it removes Google AdSense and every cookie it sets, which also means fewer third-party scripts and a lighter, quicker page. No ad units also means no ad auctions running in the background while you play, which is the performance difference you feel. Our aim is that a paying supporter carries no more measurement than is genuinely needed to run the service and honor the purchase; as we build the per-account plumbing to suppress marketing pixels for signed-in premium players, this section will say so specifically rather than in principle. Put plainly: the free tier is ad-supported and more heavily measured, and paying makes your experience lighter, faster, and less tracked, in both directions.

5. Who We Share It With

We share data only with the processors named in Section 3, each doing the one job described, and otherwise only in legally unavoidable cases — if the law compels us, if we need to defend a legal claim, or if the studio is sold or merged, in which case the buyer inherits this Policy and you will be told. We do not sell, rent, lease, or trade your personal information, we do not build or broker profiles of you as a product, and we do not track you across unrelated websites for our own purposes. There is no second, quieter business model behind this one.

6. International Data Transfer

Our vendors are mostly American, so if you are outside the United States your data will generally be processed there. Where required, our vendors rely on Standard Contractual Clauses or an equivalent transfer mechanism, and each publishes its own terms.

7. Data Retention

Local game data persists until you clear your browser; we cannot delete it for you because we cannot reach it. Account and synced data on DTTAU persists while the account is active — ask us to delete it and we will, though it may linger briefly in encrypted backups before rotating out. Email-list data persists until you unsubscribe. Purchase records are kept as long as tax and accounting law requires. Analytics data is retained in aggregate, per each provider’s standard schedule.

8. Your Rights

Wherever you live, you may ask us to show you what we hold, correct it, delete it, or provide it in a portable format. If you are in the UK/EU you may also object to or restrict processing and withdraw consent at any time. If you are in California, you have CCPA/CPRA rights to know, delete, correct, and opt out of “sale” or “sharing” — we do not sell data, but the advertising cookies described above can meet the CCPA’s broad definition of “sharing,” and the opt-out links in Section 3 are how you switch that off. Email play@screwcapholdings.com to exercise any of these rights; we will not charge you or demand excessive verification for a simple deletion request. UK/EU users may also complain to their local supervisory authority.

9. Children

The Services are not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided personal information to us, email us and we will delete it. Some games carry advertising and are better suited to a general adult audience regardless of what the law strictly requires.

10. Security

Traffic is encrypted in transit. Account credentials are handled by Google’s sign-in, so we never hold a password. Database access keys are held server-side and never shipped to your browser. No system is perfect; if we ever suffer a breach affecting your data, we will tell you.

11. Changes and Contact

We will update this Policy as the Services change, and the date above will move. Material changes will be reflected on the site rather than edited silently. Questions, requests, or corrections: play@screwcapholdings.com. See also our Terms & Conditions.