Privacy Policy

At Asten BaaS, operated by Asten Studios, we take the privacy of your information and that of your video game players very seriously. This Privacy Policy describes what information we collect, how we protect it, and the choices you have regarding your data.

1. Information We Collect

A) From Developers (You):

• Account Information: Email address (encrypted in our database with AES-256) and access credentials (password encrypted with bcrypt or linked Google Auth profiles).
• Usage Information: Console activity logs, API consumption, and storage metrics used to manage free plan quotas.

B) From Players of Your Video Games:

• Progress Data (Cloud Saves): Game variables, level, experience, inventory state, and high scores sent by your game using our SDK. This data is stored in structured JSON format in MongoDB.
• Player Identifiers: Player email (encrypted with AES-256) or anonymous device identifiers depending on your integration.

2. Use of Information

We use the collected information solely to provide and improve the Asten BaaS platform: authenticating developers and players, processing API requests from your games securely, managing plan quotas, and preventing fraud or abuse on our servers. We do not use your data or your players' data for advertising or targeted marketing purposes.

3. Data Protection and Storage

We implement high security standards in the cloud (AWS and MongoDB Atlas). We encrypt sensitive information in transit using HTTPS/TLS 1.3 and encrypt stored emails at rest using AES-256. Access to APIs requires cryptographically signed short-lived JWT tokens.

4. Cookies and Tracking Technologies

Our website and console may use strictly necessary cookies for service operation (for example, keeping your login session active and remembering your visual theme preferences). We do not use third-party cookies for advertising or commercial tracking purposes.

5. Sharing Information with Third Parties

We do not sell, rent, or market developer or player data to third parties. We share data only with trusted service providers strictly necessary to operate the infrastructure (for example, MongoDB Atlas for databases and AWS for hosting).

6. Data Retention and Deletion

Your personal data and your players' data will be retained for as long as your account remains active. In the event of continuous inactivity for a period of 6 months (no API calls or console access), Asten Studios reserves the right to delete the account and all associated data, following email notification at least 30 days in advance.

7. Rights of Access, Rectification, and Erasure

You have the right to access, update, or delete your personal data directly from the Asten BaaS console. If you wish to completely delete your account and remove all related information (including your game databases), you may request it by emailing support@astenstudios.com. We will process your request within a maximum of 30 business days.

8. Minors

Asten BaaS is intended for game developers of legal age. We do not knowingly collect personal information from individuals under 18. If you are a parent or legal guardian and become aware that a minor has provided personal data through our platform, please contact us at support@astenstudios.com to proceed with the deletion of such data.

9. Legal Compliance

We reserve the right to disclose information if required by law, a court order, or to protect the legal rights of Asten Studios, our users, or public safety. This policy is governed by the laws of the Republic of Colombia.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of significant changes via a notice in our console or by email. We recommend reviewing this page periodically for any changes. Modifications take effect immediately upon publication.