Privacy Policy

1. Who we are and what this policy covers

Marco Ferrante CodeBiters operates the CodeBiters Shop and is the controller responsible for the personal information described in this policy. You can contact us using the details below.

Email: shop@codebiters.com
Phone: +39 366 845 2248
Mail: Marco Ferrante CodeBiters (CodeBiters Shop), 5985 NW 61st St, Ocala, FL 34482, United States (US).

This policy covers our website, customer accounts, purchases of digital games, protected downloads and personalized delivery by email, and messages you send us. It does not cover third-party websites or payment services, which have their own privacy policies.

2. Information we collect

Contact and account details: your name, email address, billing address, phone number where provided, username, and a securely hashed password if you create an account. We do not store plain-text passwords.

Orders and payments: the games you purchase, prices, order history, billing details, transaction references, payment status, and correspondence about cancellations or refunds. Payment providers handle payment credentials; the shop does not store full payment-card numbers or security codes.

Game personalization (where applicable): information you provide to customize your game, together with the resulting personalized digital files and the details needed to deliver them. Please provide only information needed for your order, and do not send sensitive information or someone else’s personal information without permission.

Technical and session information: IP addresses, browser and device information, request and security logs, cart and login sessions, and order-attribution information such as referring pages and campaign parameters. We do not describe IP addresses as anonymized: technical records can contain personal information.

Communications: the content of emails and other messages you send us, and our replies.

3. Why we use your information

We use your information to process payments, manage your account and orders, provide protected downloads of standard games after confirmed payment or confirmation of a zero-total order, and personalize and deliver made-to-order games by email within 48 hours, answer questions, and handle refunds or disputes. An account is required to purchase a game. We also keep the purchase agreements and digital-supply consent recorded with your order. Billing information may also be needed to determine applicable taxes. We sell digital products; no physical shipping address is needed for delivery.

We also use technical information to operate and secure the website, investigate errors or abuse, and understand the source of orders through WooCommerce’s order-attribution feature. We use order and transaction records to meet applicable accounting, tax, and legal obligations.

For people protected by the GDPR or UK GDPR, the legal bases are performance of a contract or steps you request before a purchase; compliance with legal obligations; and legitimate interests in running a secure shop, handling support, and resolving disputes, subject to your rights. Where consent is required, including for optional cookies or future marketing, consent is the appropriate basis. You may withdraw consent without affecting earlier lawful processing.

Order and delivery emails are service messages. This policy does not sign you up for a newsletter or promotional text messages. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects on you.

4. Who receives your information

Information is available to authorized people who manage the shop and fulfill orders, and to service providers needed for website hosting, email delivery, technical support, and payment processing. We disclose information as needed for those purposes, to handle disputes, or where required by law.

If PayPal is offered and you choose it at checkout, information needed to process the payment and manage the transaction is shared with PayPal. PayPal may process information for its own legal, security, and fraud-prevention purposes under its Privacy Statement. A payment provider may request additional information directly from you.

We do not sell personal information or share it for cross-context behavioral advertising. Customer details are not made public as part of game fulfillment.

5. Cookies and order attribution

WordPress and WooCommerce use cookies and similar browser storage for functions such as logging in, keeping items in your cart, maintaining checkout sessions, and remembering relevant preferences. Blocking these can prevent parts of the shop from working.

Examples include WooCommerce cart cookies (woocommerce_cart_hash and woocommerce_items_in_cart), the wp_woocommerce_session_ cookie, and WordPress authentication cookies. Cart cookies generally last for the session. WooCommerce customer sessions normally expire after two days for guests or seven days for logged-in customers; login-cookie duration depends on whether you choose to stay signed in.

WooCommerce order attribution is currently enabled. It uses first-party cookies, including sbjs_ cookies, to associate an order with its referring website, campaign, and visit information. These cookies generally last for the visit; the session cookie uses a 30-minute window. Attribution recorded with an order can remain with the order record. This is separate from the cookies needed to keep your cart or account working.

The current site configuration does not include Google Analytics or advertising-retargeting pixels. You can delete or block cookies in your browser. Cookie information is also available in WooCommerce’s order-attribution documentation. We will update this policy if the services we use change.

6. How long information is kept

We keep account information while your account is in use and as needed to handle unresolved orders or disputes. Order, payment, and billing records are kept for the period required by applicable tax, accounting, and other legal obligations. Personalization information and generated files are kept as needed to fulfill your order, resolve delivery or support issues, and meet any applicable obligations.

Support messages are kept for as long as needed to resolve the matter and handle related claims. Technical and security records are kept as needed for operation, troubleshooting, and security. The appropriate period depends on the purpose, applicable legal requirements, and any unresolved claim; we do not apply a single fixed period to every category.

The shop does not currently have automatic deletion periods configured for accounts or order records. Deletion requests therefore require review. Where information is no longer needed, it should be deleted or anonymized; information we must retain by law may be excluded from deletion. Backup copies may remain until they are replaced through the backup cycle.

7. International processing

Our shop contact address is in the United States. Depending on the providers involved, website, email, or payment information may be processed in the United States or other countries, whose privacy laws may differ from those where you live. Payment providers explain their international processing in their own notices.

Where applicable data-protection law restricts an international transfer, an appropriate legal basis and safeguards are required. Contact us for information about the providers and transfer arrangements relevant to your information.

8. Your choices and rights

You can update available account details through My Account, or contact us to request access, correction, deletion, or a copy of your information. We may need proportionate information to verify your identity. Some records must be retained to meet legal obligations or resolve claims.

If the GDPR or UK GDPR applies to your information, your rights may include access, rectification, erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent. We respond without undue delay and normally within one month; where the law permits an extension, we will explain it. You can complain to your local supervisory authority; see the EEA supervisory authorities or the UK Information Commissioner.

If applicable U.S. state privacy law grants you rights, you may request access, correction, deletion, or portability, and exercise any applicable opt-out or appeal rights by contacting us. These rights depend on the law’s scope and exceptions. We will respond within the applicable legal period and will not discriminate against you for exercising a protected privacy right.

9. Children’s information

The shop is intended for purchases by adults or with the involvement of a parent or guardian. We do not knowingly collect personal information from children under 13. Please do not submit a child’s personal information as game-personalization content. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.

10. Security

We use HTTPS for public website connections, password hashing, and access controls to help protect information. Payment credentials are handled by payment providers. No website, email service, or storage system can guarantee complete security. If a personal-data breach requires notice under applicable law, we will notify the appropriate people and authorities as required.

11. Changes and contact

We may update this policy when our services, practices, or legal requirements change. The date at the top identifies the latest revision. Where required, we will provide additional notice of material changes or request consent.

For privacy questions or requests, contact CodeBiters Shop and include “Privacy request” in your message.

Email: shop@codebiters.com
Phone: +39 366 845 2248
Mail: Marco Ferrante CodeBiters (CodeBiters Shop), 5985 NW 61st St, Ocala, FL 34482, United States (US).

Current purchases and coupon orders

Paid purchases currently take place on each game’s linked itch.io page. itch.io collects the information needed for its checkout under its own privacy notice. We do not send your CodeBiters account details to itch.io merely because you follow a purchase link, and an external purchase is not automatically synchronized with your CodeBiters account.

For a free order using a valid 100% coupon, CodeBiters requires an account and collects only your email address, first name, last name, phone number and country as checkout contact details. We store these with your order and agreements and use your account to authorize protected downloads. The country is retained for administration and possible future tax handling; this free local checkout does not collect payment or tax.