Privacy policy

1. Who is responsible

Bernat Pallicer Seguí, trading as SUSPIK, is responsible for the personal information described here. SUSPIK is operated from Spain, including when the website serves U.S. customers.

This policy covers the U.S. edition at suspik.com and its connected account and game services. Information about earlier purchases remains in the same account system; a change of language or catalogue does not erase those records.

2. Information we use

• Website visits: IP address, browser and device details, requested page and connection time in hosting and security records.
• Your account: email address, optional name, terms acceptance and access dates; session-token hashes, session dates, browser details and security records. Sign-in uses a one-time code valid for 10 minutes. We do not ask you to create a SUSPIK password.
• Purchases: order, transaction and customer references; product, amount, currency, date, payment status and access rights. Paddle sends us payment confirmations and related events so we can grant or revoke access. We do not receive or store your card number or security code.
• Havenport progress: a signed cookie holds a random game identifier, verified milestones and expiry, plus an account identifier when paid access is linked. Answers submitted for checking are processed by the game server; answer text is not stored in this cookie or a separate game database. Short-lived, hashed session/IP counters help prevent abuse.
• On your device: notes, answer drafts, interface settings and a local copy of your progress are saved in your browser. Backups and exported game files may contain anything you typed. These notes and drafts are not uploaded as an account save. Do not put sensitive personal information in them.
• Messages: your email and anything you send us when asking for help, a refund or a privacy request.

Information comes from you, your browser and our service providers, including Paddle. If you do not provide an email, you can still use the free sample, but cannot use email sign-in or link a purchase to an account.

3. Purposes and legal grounds

The current U.S. account pages do not subscribe you to marketing. If you ask us to check a creator code, we process that code to determine the applicable membership price; no payment is taken by that price check. We do not make decisions with legal or similarly significant effects about you solely by automated processing, and do not use your data for targeted advertising.

4. Providers and international processing

• Hostinger: hosts the website and servers; handles technical connection and security information.
• Supabase (Supabase Pte. Ltd.): stores account, session, order and access records. Our account database is configured in Virginia, United States.
• Resend (Plus Five Five, Inc.): sends sign-in codes and service emails; receives the recipient address and message content. The configured sending region is Virginia, United States.
• Paddle: independently handles checkout, payment information, invoicing, taxes and payment support. For a U.S. purchase, its buyer terms identify Paddle.com Inc. as the contracting Paddle entity.
• Google Fonts: pages that load fonts from Google send Google the IP address and technical request information needed to deliver the font.

Providers may process information in the United States and other countries, including outside the European Economic Area. The contractual data-processing terms for Supabase, Resend and Hostinger describe their applicable transfer safeguards, including standard contractual clauses where relevant. Contact us for information about safeguards applicable to your data.

Read the providers’ own notices: Hostinger, Supabase, Resend, Paddle and Google. We may also disclose information where legally required or needed to establish, exercise or defend legal claims.

5. Retention and account deletion

Your account is retained while it is active. Sign-in codes expire after 10 minutes. Account sessions last up to 30 days and are renewed through use. The Havenport progress cookie expires 30 days after creation. Browser saves remain until you clear them or use the game’s reset tools. Game abuse counters use ten-minute windows and are cleared from server memory shortly after expiry; hosting security records are separate.

Account deletion closes sessions and removes or anonymizes the active account email and optional name. It does not immediately delete all purchase, refund, payment-event, audit or legally required records. Payment records, including the email and customer references supplied by Paddle, may be retained for tax, accounting, fraud prevention or legal claims for the applicable legal period. Support messages and technical records are retained only as long as needed for their purpose or a legal obligation.

If a previous subscription can still be billed, you may need to cancel or resolve it before account deletion can complete. Deleting a SUSPIK account does not itself cancel a Paddle subscription or erase records Paddle holds independently. Browser game saves also need to be cleared separately. Contact us if you need help with any of these records.

6. Your choices and rights

Email privacy@suspik.com with the subject “Privacy” to request access, correction, deletion or a copy of your information, or to object to or request restriction of processing. Where applicable, you may also withdraw consent, use an authorized representative or appeal a decision. We may ask for proportionate verification; we will not ask you to send a password or payment card details.

We respond within one month, or sooner where applicable law requires. Where the law permits an extension for a complex request, we will explain it within the initial period. Requests are free unless a lawful exception applies. We do not penalize you for exercising privacy rights. Some information may be retained where the law requires or permits; we will explain a refusal or limitation.

You may complain to the Spanish Data Protection Agency (AEPD), another competent data-protection authority or the relevant regulator where you live. You do not have to contact us first.

7. Tracking, children and changes

We do not sell personal information or share it for cross-context behavioral advertising. These pages do not use advertising trackers or visitor analytics. Necessary sign-in and game storage operate regardless of a browser’s “Do Not Track” setting; there is no advertising-tracking preference to switch on. The cookie policy explains storage and checkout providers.

SUSPIK games are intended for adults. You must be at least 18 and legally able to contract to create an account or buy. The service is not directed to children under 13, and we do not knowingly collect their information. Contact us if a child has supplied personal information so we can review and remove it where appropriate.

We publish updates here with a new effective date. For material changes affecting your information, we will give an appropriate additional notice and obtain consent where required. A new policy does not authorize unrelated uses of information previously collected.

8. Creator applications and partnerships

This notice also covers partners.suspik.com, our U.S. creator-partnership pages. Applying is optional and is separate from creating a player account or subscribing to marketing.

When you request the Case 1 link, we receive your name, email and creator handle or channel link. We also record the selected desk, the version of the offer displayed, the submission time and campaign labels in your current page URL. Requesting the link is not acceptance of an affiliate agreement. If you later apply to join, we may separately request your platform, audience and content details and record the agreement you accept. We do not request bank details, identity documents or tax forms in this application.

We use this information to review your application, reply and take steps toward a partnership at your request. Our legitimate interests cover proportionate security checks and keeping a record of the application. If you join, contract and legal obligations also apply to administering commissions and the relationship. Applying does not automatically enroll you as an affiliate.

Applications are kept in a private area of our Hostinger hosting and a notification is sent to our Hostinger Mail partnership inbox. They are accessible to the SUSPIK operator and service providers acting for that purpose, not published as a creator directory. We do not use the application to add you to a promotional mailing list.

Unsuccessful or inactive applications are retained for up to six months, unless a longer period is necessary for a specific legal claim or you ask us to keep the conversation open. If you join, we keep necessary partnership and payment records for the relationship and applicable legal retention periods. Email privacy@suspik.com to exercise your rights.

These recruitment pages do not set a 60-day affiliate cookie. The program’s 60-day attribution offer concerns future approved referral links when sales and tracking are available. Any tracking technology and choices will be explained before it is introduced.