Privacy Policy

1. Overview & Scope

WebSpider Studios ("WebSpider", "we", "us", or "our") is an innovative, AI-first indie game development studio focused on building next-generation immersive gaming experiences, 3D suites, developer tools, and web portals.

This Privacy Policy applies to your use of webspiderstudios.com, the WebSpider 3D Creation Suite, WebSpider IDE, WebSpider Games, WebSpider Launcher, Smart Downloader, and related services.

2. Information We Collect

3. How We Use Your Information

• To provide, operate, and maintain WebSpider Studios software, products, and services.
• To authenticate user identity and enforce Role-Based Access Control (RBAC) security permissions.
• To send critical security verification codes (6-digit 2FA Email OTPs) and account notifications.
• To prevent fraud, illegal activities, or unauthorized access to our portals.
• To comply with legal obligations and respond to valid legal requests.

4. Data Storage & Security Measures

We implement industry-standard technical and organizational security measures to protect your personal data:

• Row Level Security (RLS): Database tables in Supabase are enforced with granular RLS policies. Regular users cannot inspect or mutate administrative UI configs or other users' accounts.
• Encryption: All network communication is encrypted in transit using SSL/TLS protocols. Passwords are salted and hashed using secure cryptographic functions.
• 2FA OTP Authorization: Account profile edits, password updates, and account resets require 6-digit Email OTP confirmation.

5. Cookies & Session Storage

We use essential session cookies and local storage tokens exclusively for maintaining your authenticated user session, security verification state, and dark-mode UI preferences. We do not sell user tracking data to third-party advertising networks.

6. Third-Party Service Subprocessors

We work with trusted cloud infrastructure providers to operate our platform:

• Supabase: Managed Database, Authentication Engine, and Row Level Security.
• Vercel: Cloud Web Application Hosting & Edge Network.
• Resend: Transactional Email & 6-Digit Security OTP Delivery.
• Identity Providers: Google, GitHub, Discord, Steam, LinkedIn, Epic Games.

7. Your Data Rights & 30-Day Deletion Grace Period

Regardless of your geographical location, you have full control over your personal data:

• Access & Update: View and update your profile details anytime via Account Settings.
• 30-Day Account Deletion Grace Period: When you request account deletion, your account is scheduled for permanent deletion 30 days after the request date.
• Weekly Reminders & Revocation Right: You will receive weekly email reminders detailing your remaining days before deletion. You can log in anytime within the 30-day window and click "Revoke & Restore Account" to immediately cancel deletion and restore your account.
• Permanent Erasure: If not revoked within 30 days, your account and associated profile records will be permanently erased.

8. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Privacy Team: