Privacy Notice
Last updated May 4, 2026
This Privacy Notice describes how Fiat Software LLC (trading as Shadow Quest) ("we", "us", "our") collects, uses, and shares personal data when you use Shadow Quest (the "Service"). We act as the data controller for the personal data described below.
Personal data we collect
- Account data — name, email address, password hash, sign-in provider identifiers (e.g. Google), profile preferences.
- Content you create — hunts, items, images, annotations, map pins, trips, and other journal data you save in the Service.
- Support communications — messages you send us and our replies.
- Usage and device data — IP address, browser type, pages viewed, timestamps, basic telemetry, and error logs.
- Cookies — strictly necessary cookies for sign-in and session management.
Payment data (card details, billing address, tax IDs) is collected and processed directly by Paddle as Merchant of Record — we do not see or store full card details.
Why we use your data and our legal basis
- To provide the Service — performance of contract.
- To secure the Service and prevent fraud — legitimate interests.
- To improve the Service — legitimate interests.
- To respond to support requests — performance of contract / legitimate interests.
- To comply with legal obligations — legal obligation.
Who we share data with
- Service providers / subprocessors — hosting, database, authentication, analytics, error monitoring, and customer-support tools, all under written confidentiality and data-protection terms.
- Paddle (Merchant of Record) — for payment processing, subscription management, tax compliance, invoicing, and refund handling.
- Professional advisers — lawyers, accountants where reasonably required.
- Authorities — where required by law or to protect rights, property, or safety.
International transfers
Your data may be processed in countries outside your own. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.
Retention
We keep your personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce agreements. We delete or anonymise data when no longer needed.
Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent where processing is based on consent. You can also lodge a complaint with your local data-protection authority. To exercise any of these rights, contact us at support@fiatsoftware.com. We aim to respond within one month.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege credentials, to protect personal data. No system is perfectly secure; please use a strong, unique password.
Contact
Questions about this Privacy Notice or our data practices? Contact support@fiatsoftware.com.