1. Who is responsible
Daniel Badura, trading as DANIEL BADURA TECH, Facimiech 151, 32-051 Facimiech, Poland, tax identification number (NIP) 9442263600, is the controller of personal data processed by us for SHOT. Contact us about privacy, access or deletion at info@baduratech.com.
This policy covers this promotional website, our handling of game-related data and correspondence. SHOT is a single-player game in development. Online features depend on the store, build and services enabled for that build. This website does not provide game sign-in, player accounts or a public statistics database.
2. Visiting this website and contacting us
Delivering a page or video involves processing your IP address and technical request information, such as the requested resource, time and browser information. Our hosting provider is Hetzner. We use this information to deliver and secure the website, based on our legitimate interests in operating a reliable service (Article 6(1)(f) GDPR).
This website uses no advertising trackers, analytics, third-party fonts or tracking cookies. Images and videos are served from our own website. Links to stores and other websites take you to services governed by their own policies.
If you email us about support, press or playtesting, we receive your email address, any name you provide, your message and attachments. We use them to respond and manage the request, based on our legitimate interest in communicating with you, or to take steps at your request before an agreement (Article 6(1)(b) GDPR), where applicable. Our email service providers process the correspondence for delivery and storage. Do not send passwords, authentication tokens or unnecessary sensitive information.
3. Game, Steam and Epic services
The game stores settings, progress and save files on your device. Depending on the build and your platform settings, supported platform services may synchronize saves, statistics and achievements. Local diagnostic and gameplay logs may also be created. We receive such files when you choose to send them for support or testing; there is no website telemetry upload.
When you use an Epic Games Store build with Epic Account Services, the integration uses your Epic account identity and basic profile information made available for the authorized integration, such as a display name and language. EOS Connect uses a product user identifier (PUID). Steam builds use a Steam identifier and can use EOS Connect without requiring an Epic account sign-in. Authentication tickets and tokens are used to verify the session; never send them to our support address.
The current online integration is limited to achievements and statistics. We process account identifiers, achievement identifiers and unlock status, and gameplay statistics such as enemies defeated, best run, completed runs and longest hit streak. These data associate progress with the correct player and enable synchronization with the relevant platform.
Public leaderboards, friends-list access and online-presence features are outside the current SHOT service described by this policy. Before adding further data uses, we will update this policy and provide any required information or choices.
We use account and gameplay data as necessary to provide the requested achievement and statistics functions (Article 6(1)(b) GDPR), and limited technical and security information for our legitimate interest in protecting the service (Article 6(1)(f) GDPR). We do not sell your data, use it for targeted advertising or make decisions with legal or similarly significant effects solely by automated means. Platform overlays remain subject to the platform’s own notices.
4. Access and deletion
Local progress and platform achievements or statistics are separate records. Resetting a local save or uninstalling SHOT does not itself erase records already synchronized to a platform. Available platform privacy controls are managed in the relevant platform account settings.
To request access, correction or deletion of personal data we handle, email info@baduratech.com with “SHOT privacy” and enough information to locate the relevant account or correspondence. We verify identity proportionately. We do not need your password or a copy of your identity document as a routine requirement.
We assess your request across the records we control and coordinate with service providers where needed. Deletion of an Epic or Steam account and data independently controlled by those services must be requested through the relevant provider. You can revoke the Epic application connection through your Epic account settings; revocation does not itself erase earlier records.
5. Who receives data
Data may be handled by our hosting and backup providers, email providers and authorized support or technical personnel where needed for these purposes. Valve and Epic receive data necessary for platform authentication, achievements and statistics used by your build. This website does not publish player records. We may also disclose data where required by law or to establish, exercise or defend legal claims.
Valve and Epic have their own relationships with players and explain their processing in their own privacy policies, linked below. We do not determine or promise how they retain or otherwise process their independently controlled data. Service providers may process data outside the European Economic Area; where we are responsible for such a transfer, we use an applicable adequacy decision or appropriate safeguards, such as EU standard contractual clauses. Contact us for information about safeguards relevant to your data.
6. How long data is kept
Local saves, settings and logs remain on your device until you remove them or the game replaces them. Platform copies are subject to the platform’s controls and policy. We keep support and playtest correspondence for the time needed to resolve the request. After closure, we delete data no longer needed; only material necessary for a continuing agreement, a legal obligation or a specific legal claim is retained for that purpose, for the applicable statutory or limitation period.
Account identifiers, statistics and achievement records processed under our responsibility are kept for as long as needed to provide those features for the account, unless you request erasure and there is no lawful reason to retain the data. When the relevant feature ends, records no longer needed are deleted or anonymized. We assess verified requests without undue delay and within the GDPR response periods described below. Data independently controlled by Valve or Epic follows their respective policies.
This static website does not enable a separate request access log. Necessary error and security diagnostics are kept for the time needed to investigate and resolve the relevant issue, with any further retention limited to a specific legal obligation or claim. Backup copies have restricted access and may retain earlier records until their normal rotation. Where erasure applies, restored copies must be handled so erased data does not return to active use. These criteria do not imply that each category has automated deletion.
7. Your rights
Where the GDPR applies, you may request access, a copy, correction, erasure, restriction and, where applicable, portability of your data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
We respond without undue delay and normally within one month. If a lawful extension is necessary, we inform you within that month and explain why. You can complain to your local supervisory authority, including the President of the Personal Data Protection Office (UODO) in Poland. Providing correspondence data is voluntary, but we may be unable to answer without contact details. Online features need the relevant account and technical data; some features will be unavailable without it.
8. Changes and younger players
We do not knowingly collect information from children through a separate SHOT website account or marketing profile. Platform age and parental controls apply to platform services. A parent or guardian can contact us about a child’s data. If we identify data processed without a required lawful basis, we will address it, including deletion where appropriate.
We update this policy when the game, services or our data practices change. The version date appears above. Material changes will be communicated through an appropriate game or distribution channel before the changed processing begins.