Data Policies

Our data policy is straightforward but we want to outline it here so you know what happens when you share your personal information with us.

Data Collected

We collect two types of information.

The first is details you give us, like your email address, name, phone number, and shipping address. These are used so that we (and only Waterworks Games) can share updates and process orders for you. When you sign up on our website, your email goes to Flodesk, the service we use for our newsletter, and Flodesk sends you an email to confirm it's really you.

We use third party tools like Flodesk, Meta, Kickstarter, Shopify, Amazon, and others to help us collect, store, protect, and use that data, and we have our own internal systems to securely operate the business. We also work with our fulfillment partners including Allplay, Meeples Distribution, V-Logic, Zatu Games, and Aetherworks and share details in order to fulfill orders. We don't sell customer data to anyone and have no plans to monetize our user and follower lists.

The second type is information collected automatically when you visit our website, like your web browser, your rough location (your country), the pages you look at, and the buttons you click. We use PostHog to see how our pages are used, and on some pages it records how you move around the page so we can fix what's confusing. Anything you type into a form is hidden from those recordings, and we drop your IP address before anything is stored.

Advertising

We advertise on Meta (Facebook and Instagram) and use Meta's tracking pixel to see which ads are working. When you sign up for our newsletter or click through to buy a game, our website lets Meta know it happened. If you've allowed it, that includes a scrambled (hashed) copy of your email address so Meta can tell us which ad brought you here. That is the only way an email reaches Meta from us: never in plain text, and we don't upload our email lists to ad platforms or build audiences from them.

Your Choices

If you're visiting from the EU or UK, we ask first, and nothing for ads loads until you say yes. Anyone can turn ad tracking off at any time with the "Your privacy choices" link at the bottom of every page, and if your browser sends a Global Privacy Control signal, we treat that as a no. Turning off cookies or installing an adblock extension still works too.

We set a couple of small cookies that don't identify you: one remembers your region so prices and shipping are right, and one remembers which version of a page you saw.

Our email list can be unsubscribed from any email we send. If you want to see what we have on you, fix it, or have it deleted, or if you suspect abuse, please reach out to us through our contact page.

This policy was updated November 8th, 2026 when we moved our website off Cargo, switched our newsletter to Flodesk, and replaced Google Analytics with PostHog.