Privacy Policy

1. Who we are

FishyHam Studios (Pty) Ltd ("FishyHam Studios", "we", "us") is a company registered in South Africa (registration number 2026/758863/07). We make our own games, mobile apps and video content.

We are the "responsible party" for the personal information described in this policy, as defined in the Protection of Personal Information Act, 2013 ("POPIA").

• Email[email protected]
• AddressOur postal address is available on request by email.
• Information OfficerYou can reach our Information Officer (a director of the company) at [email protected].

2. What this policy covers

This policy applies to:

• Our website, https://fishyhamstudios.com;
• Our mobile apps and games, including any we release in future;
• Our social publishing tool, an internal tool we host ourselves and use only to publish to, and read basic information from, our own FishyHam Studios social media accounts.

If a particular app or game handles information in a way not described here, it will tell you in the app or game itself and on its store listing.

3. The website

Our website does not have accounts, forms or tracking. In particular:

• No cookies. We do not set cookies and we do not use analytics or advertising trackers.
• Game high score. The mini-game saves your high score in your own browser's storage. It never leaves your device and we cannot see it.
• Fonts. Our fonts are hosted on our own website, so loading the site does not send your information to a font provider.
• Hosting. Our host, Cloudflare, processes technical information such as IP addresses to deliver and protect the site.
• Email. If you email us, we receive your email address and whatever you choose to write, and use it only to reply.

Lawful basis (POPIA section 11): our legitimate interest in running a secure website and answering messages.

4. Our apps and games

Each app and game only collects the information it needs to work. Depending on the product, this may include:

• Information you give us, such as account or profile details, where a product has accounts;
• Permissions you choose to grant, such as notification access or location. A product only asks for a permission when a feature needs it, and you can turn permissions off in your device settings at any time;
• Game and app data, such as save files, settings and progress, which is kept on your device unless a feature needs to store it online;
• Technical information, such as device type, operating system and crash reports, used to fix problems and keep products working;
• Store information: when you download or buy through an app store such as Google Play or Steam, the store handles that transaction under its own privacy policy and shares only limited information with us (for example that a purchase was made).

We use this information only to provide, maintain, secure and improve the product you are using, and to respond to you. Each product's store listing includes its data-safety details, and the product tells you before it asks for any permission.

Lawful basis (POPIA section 11): performing our agreement with you to provide the app or game you chose to use, your consent where a product asks for a permission, and our legitimate interest in keeping our products working and secure.

5. Our social publishing tool and platform connections

We run a social media scheduling tool on our own server to publish posts to FishyHam Studios' own accounts on platforms such as Facebook, Instagram, TikTok, YouTube, X, Reddit and Discord.

• We connect these platforms' APIs only to our own accounts. We use them to publish our posts and to read basic information about our own accounts and posts (for example follower counts and post performance).
• We do not use these connections to collect information about other people, and we do not sell, rent or share data obtained through them.
• We do not use data obtained through these APIs for advertising profiles or targeting.
• Access tokens issued by the platforms are stored securely on our own server and can be revoked at any time (see our Data Deletion page).

6. YouTube API Services

Our publishing tool uses YouTube API Services. By interacting with features that use YouTube, you are also bound by the YouTube Terms of Service, and Google's handling of data is governed by the Google Privacy Policy.

You can revoke our access to your Google account data at any time through Google's security settings: security.google.com/settings/security/permissions.

7. Google API Services: Limited Use

FishyHam Studios' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use Google user data only to provide the features described above; we do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition; we do not use it for advertising; and we do not allow people to read it except with your consent, for security purposes, to comply with law, or where the data has been aggregated and anonymised for internal operations.

8. Who we share information with

We use a small number of service providers ("operators" under POPIA) who process information on our behalf and under our instructions:

• Cloudflare: website hosting, security and content delivery;
• Oracle Cloud: hosting for our social publishing tool;
• Google (YouTube API Services for our own channel);
• The social platforms listed in section 5, when we publish to our own accounts;
• App stores (Google Play, and Steam for games), which handle downloads and purchases under their own privacy policies.

We do not sell personal information. We may disclose information if the law requires it.

Information outside South Africa. Some of these providers store or process information outside South Africa. Where this happens we rely on section 72 of POPIA, using providers that are bound by data protection laws or agreements offering a level of protection comparable to POPIA.

9. How long we keep information and how we protect it

We keep personal information only for as long as we need it for the purpose it was collected, or as long as the law requires. Emails are kept while a conversation is active and deleted when no longer needed.

We protect information with reasonable technical and organisational measures, including encrypted connections (HTTPS), restricted access to our systems, and keeping platform access tokens on our own server. No system is perfectly secure; if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.

10. Your rights

Under POPIA you have the right to:

• ask whether we hold personal information about you and request access to it;
• ask us to correct or delete it;
• object to us processing it, and withdraw consent you have given;
• complain to the Information Regulator.

To use any of these rights, email [email protected]. We will respond within 30 days. For deletion requests specifically, see our Data Deletion page.

If you are not happy with our response, you can contact the Information Regulator (South Africa): inforegulator.org.za.

11. Children

Our website, apps and games are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email [email protected] and we will delete it.

12. Changes to this policy

We may update this policy as our products change. The date at the top shows when it was last updated. If a change is significant we will make it clear on this page or in the affected app.