Privacy Policy

Who we are

This site and the Evolvers game are operated by Evo Vegas ("we", "us", "our"), the seller and publisher of the game. Evo Vegas is the data controller for the personal data described in this notice. You can reach us via the in-game support link after signing in.

What we collect

Evolvers stores an anonymous game save (Bio-Energy, gear, missions, ascensions) in your browser's localStorage so the game runs offline and resumes on reload. If you sign in, we additionally store: your email address, a hashed session token, your save state, entitlement (Free / Premium), and any purchase transaction IDs from our payment provider. We may also process technical data such as IP address and device/browser identifiers for security and abuse prevention.

Why we collect it & legal basis

• To provide the game and sync saves across devices — legal basis: performance of a contract with you.
• To grant Premium and Bazaar entitlements you have purchased — legal basis: performance of a contract.
• To prevent abuse (rate limiting, rollback detection, anti-cheat) — legal basis: our legitimate interests in keeping the game fair and secure.
• To comply with tax, accounting, and legal obligations — legal basis: legal obligation.
• Optional communications — legal basis: your consent, which you may withdraw at any time.

Who we share it with

We do not sell your data and we do not set advertising cookies or third-party tracking pixels. We share limited personal data with the following categories of recipients acting under contract:

• Stripe, Inc. — our payment processor, which handles secure card processing, checkout, currency conversion, receipts, and refund execution on our behalf. Evo Vegas remains the seller of record and is responsible for the underlying transaction.
• Lovable Cloud (Supabase) — hosting, database, and authentication for account and save data.
• Professional advisers (legal, accounting) and authorities where required by law.

International transfers

Some of our providers process data outside the UK/EEA. Where this happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Retention

Save data and account records are kept while your account is active. Purchase and tax records are retained for the period required by law (typically 6–7 years). You can request deletion at any time (see below); we will remove your account and its save state within 30 days, except where we must retain records to comply with legal obligations.

Security

We use appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, encryption at rest for the account database, hashed session tokens, row-level access controls so users can only read their own records, restricted administrative access, and continuous monitoring for abuse and unauthorised access. No system is perfectly secure, but we work to protect your data proportionate to its sensitivity.

Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, to withdraw consent where processing is based on consent, and to lodge a complaint with the UK Information Commissioner's Office (ICO). We aim to respond to requests within one month. To exercise these rights, contact us via the in-game support link after signing in.

Cookies & local storage

We use localStorage only for your game save and session token, which are strictly necessary for the game to function. No advertising or analytics cookies are set.