01 Who we are
The Prodigal Developers ("TPD", "we", "us", "our") is an independent game development studio based in Olongapo, Philippines. We build and publish our own titles — currently Royal Flush and Only Hope — and we operate the website you are reading.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) we are the personal information controller for the data described here. For visitors in the European Economic Area or the United Kingdom, we are the data controller under the GDPR and UK GDPR.
You can reach us about anything in this policy at [email protected].
02 What this policy covers
This policy applies to theprodigaldevelopers.com and every page we serve from it, including our game and project sites:
- /royal-flush — the Royal Flush game site and its early-access sign-up
- /only-hope — the Only Hope project site, pitch deck and press kit
- /keisey — the creator portfolio site we host
- /business-card — our digital contact card
It does not cover our games themselves once you are playing them on a platform such as Steam, nor any storefront, social network or service that we merely link to. Those are run by other companies under their own privacy policies. See Third-party services.
03 Information we collect
Information you give us
- Early-access and playtest sign-ups. When you join a game's early access list we ask for your name, age, email address, the platforms you play on, how you heard about us, your confirmation that you want to playtest, and anything you choose to write in the optional notes field. Age is collected only to confirm you meet our minimum age of 13 and to size playtest groups appropriately.
- Messages you send us. If you email us about business, a job, an internship, or press, we receive whatever you put in that message and any attachments — typically your name, email address, portfolio or CV.
Information collected automatically
- Server logs. Like any web server, ours records the IP address making a request, the date and time, the page or file requested, the HTTP status, the referring page, and the browser user-agent string. We use these for delivery, debugging, and to spot abuse — not to build a profile of you.
- Your consent record. The one entry we store in your browser, remembering the cookie choice you made. Details in the Cookie Policy.
What we do not collect
We do not ask for, and have no way to receive, your payment details — we sell nothing directly on this site. We do not run advertising networks or cross-site tracking pixels. We do not buy personal data about you from data brokers, and we do not sell yours to anyone.
04 How we use it
We use the information above only to:
- run the early-access programme — send invitations, keys, playtest builds, and the occasional update about the game you signed up for;
- reply to your email, review applications, and talk to press and partners;
- serve, secure, maintain and improve the website;
- understand which pages and announcements people actually read, so we know what to build and write next — only if you turn analytics on;
- keep records we are legally required to keep, and defend our legal rights if we ever have to.
We do not make decisions about you by automated means, and we do not profile you for advertising.
05 Legal bases
If you are in a jurisdiction that requires us to name a legal basis for each use (such as the EEA or the UK), these are ours:
| What we do | Basis |
|---|---|
| Early-access sign-ups and the emails that follow | Your consent, given when you submit the form. You may withdraw it at any time. |
| Replying to your email, reviewing an application | Steps taken at your request, and our legitimate interest in running a studio. |
| Server logs, security, abuse prevention | Our legitimate interest in keeping the site working and safe. |
| Optional analytics and marketing storage | Your consent, given in the cookie banner. Off until you say otherwise. |
| Keeping records we must keep | Legal obligation. |
Under the Philippine Data Privacy Act, our processing is grounded in your consent, in the performance of a service you asked for, and in our legitimate interests pursued within the limits of the Act.
08 Third-party services
Our pages load two things from other companies so the site looks and reads the way it should. Neither sets a cookie on our site, but both necessarily see your IP address and browser details because your browser makes the request:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — our typefaces.
- Cloudflare cdnjs (cdnjs.cloudflare.com) — the Font Awesome icon set.
We also link out to places we do not control — Steam, Facebook, Instagram, LinkedIn, and the storefronts that carry our games. Following one of those links puts you on their turf, under their privacy policy and their cookies. This policy stops at our edge.
09 International transfers
We are based in the Philippines, and our servers and backups are operated there. The third parties named above are global services, so a request from your browser to them may be answered from a data centre in another country.
Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard, and we take the steps the Data Privacy Act requires of us as a Philippine controller. If you would like detail on a specific transfer, ask us.
10 How long we keep it
| Data | Kept for |
|---|---|
| Early-access sign-up details | Until the game's early-access programme ends, or until you ask us to remove you — whichever comes first. |
| Email correspondence | Up to 24 months after our last exchange, unless it relates to a live contract or claim. |
| Job and internship applications | 12 months, so we can come back to you when a role opens. Tell us to delete it sooner and we will. |
| Server logs | Up to 90 days, then deleted or aggregated beyond identification. |
| Your cookie consent record | 12 months, after which we ask again. You can clear it any time from your browser. |
11 How we protect it
Sign-up records are written to our own server, into a folder that is deliberately not published on any web route and not included in our source-code repository. Access is limited to the studio members who need it. The site is served over HTTPS, and we keep our software patched.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data in a way that puts you at real risk, we will notify you and the National Privacy Commission within the timeframes the law requires.
12 Your rights and choices
Wherever you live, you can ask us to:
- Access — tell you what we hold about you and give you a copy;
- Correct — fix anything inaccurate or incomplete;
- Erase — delete your data, including taking you off an early-access list;
- Object or restrict — stop or pause a particular use;
- Port — hand you your data in a portable, machine-readable form;
- Withdraw consent — at any time, without affecting what was lawful before you withdrew it.
Email [email protected] with "Privacy Request" in the subject line. We answer within 30 days, and we will not charge you or treat you differently for asking.
If you are in the Philippines
You additionally hold the rights to be informed, to damages for a violation, and to lodge a complaint with the National Privacy Commission. We would rather you came to us first, but the door is yours to choose.
If you are in the EEA or the UK
You have the GDPR rights listed above and the right to complain to your local supervisory authority.
If you are in California or another US privacy state
We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not process it for cross-context behavioural advertising. You may still exercise your rights to know, delete, and correct through the same email address. We honour Global Privacy Control signals sent by your browser.
13 Children and young players
This site is not directed at children under 13, and our early-access forms will not accept an age below 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, write to us and we will delete it promptly.
If you are between 13 and the age of majority where you live, please get a parent or guardian's permission before signing up. Under Philippine law, processing the data of a minor generally requires the consent of a parent or guardian.
14 Changes to this policy
We will update this page when what we do changes — a new game, a new tool, a new obligation. The "last updated" date at the top always reflects the current version. If a change materially affects your rights, we will make it obvious: a notice on the site, and an email to anyone on an early-access list where we have your address.
Continuing to use the site after an update means you accept the revised policy.
15 Contact us
Privacy enquiries
The Prodigal Developers
Olongapo, Zambales, Philippines
[email protected]
Questions, corrections, deletions, or a complaint — all of it goes to the same inbox, and a person reads it.