Privacy Policy

Covers the RecursionSplash website, Community Button and Pixel Flip: what data we collect, why we collect it, how long we keep it, and how to have it deleted.

Last updated 3 October 2026

RecursionSplash is an independent game studio based in Canada. This policy explains what we collect, why, how long we keep it, and how to have it deleted.

RecursionSplash is responsible for the personal data it controls. For anything in this policy, email privacy@recursionsplashgames.com.

Scope

This policy covers:

recursionsplashgames.com — this website.
Community Button — our game on Steam.
Pixel Flip — our game on Steam.

It also covers emails you send us. It does not cover Steam itself. Valve Corporation collects and processes data under its own privacy policy, which applies whenever you use Steam and which you should read separately.

This website

We count visits with Vercel Web Analytics, provided by Vercel, the company that hosts this site. There is no Google Analytics, no advertising network, no social pixel, and no other third-party tracker on this site. Vercel Web Analytics does not use cookies.

For each page view, Vercel records:

The date and time of the view
The page address, including filtered query parameters
The referrer (the page that linked you here)
Your approximate location (country, region and city), worked out by Vercel from the request
Your operating system and browser, and their versions
Your device type (mobile, tablet or desktop)
The version of the analytics script

To tell visitors apart without cookies, Vercel uses a hash it creates from the incoming request, and it discards the visitor session after 24 hours. Vercel states that these data points are not tied to an individual or an IP address, and that they are used for aggregated statistics. We use those statistics to see which pages get read, where readers come from, and what devices and browsers the site needs to work on. We view them in Vercel's dashboard, which shows the most recent month.

Like any website, our host, Vercel, receives your IP address when your browser requests a page (see Who else receives your data).

Community Button

Community Button has an online backend that we operate. When you play it, we store the following with your account:

Your SteamID and Steam display name. Your SteamID identifies your account so we can save your progress. Your display name is shown to other players (see What other players can see below).
Gameplay and progression data. Clicks, level, experience, Prestige, coins, pets, eggs, Egg Shards, items, auto-clickers, achievements, daily, weekly and monthly challenge progress, and your contribution to the global counter.
Play time. The server records your active in-game time. It is used for playtime rewards such as Egg Troves, and in the click checks described below.
Anti-cheat and moderation records. The server compares the clicks you submit with a limit worked out from your account progression, active multipliers, play time and recent click activity. Clicks above the limit are discarded automatically, and the account may be flagged for review. We keep the outcome of a review and any suspension or ban with your account.
Purchases and Steam Inventory items. When you buy DLC or Community Boost time, or hold Steam Inventory items such as Egg Troves, Collectable Pets or Boost Potions, our server records what you own so the game can apply it. We never see or store your payment details — card numbers, billing addresses and the payment itself are handled entirely by Valve. Trades and sales on the Steam Community Market happen on Steam under Valve's privacy policy.

What other players can see. Your display name appears on the in-game and Steam leaderboards. Community Button also has live community features: the Global Hatch Feed in the game, the Active Clickers list, and an automatic feed on our Discord server that posts some in-game events, such as a player hatching a Legendary or rarer pet. The Privacy setting in the game's settings controls whether your name appears in the hatch feed (in the game and on Discord) and in the Active Clickers list. It is on by default, so your name is not shown in those places. If you turn it off, your Steam display name is shown there, and Discord posts that include it are held by Discord under its own privacy policy.

Approximate country. Community Button gets an approximate country code from Steam's own IP-to-country lookup, a standard Steamworks facility. The code is kept with your account only temporarily, while your clicks are counted toward the live world heatmap, and is not stored with your account long term. The heatmap uses only per-country figures, such as clicks in the last 15 minutes and all-time clicks. Its pings mark countries with recent activity, not individual players, and it shows no player names.

Your IP address. As with any online service, your IP address reaches our game backend and its hosting provider when the game connects, and it may appear in their technical logs. We do not use it to locate you.

Pixel Flip

Pixel Flip does not connect to any server we operate, and we do not collect personal data from it ourselves. Your save syncs through Steam Cloud, and achievements, stats and leaderboards are Steam features, all handled by Valve under its own privacy policy. If you buy anything in Pixel Flip, Valve processes the payment and we never see your payment details. The Unity engine the game is built with may send technical data to Unity Technologies (see Who else receives your data).

Leaderboard entries from the 2024 version of Pixel Flip (before v2.0) were stored with LootLocker, a third-party game-backend service, under the player name you used, and may still be held there. You can ask us to have them deleted (see Your rights).

What we do not collect

We do not ask for your name, email address, postal address or phone number in our games. The only account identity we store is your Steam identity (SteamID and display name).
Both games are built with the Unity engine. Unity Analytics and Unity's Cloud Diagnostics crash reporting are switched off in both, and neither game contains an advertising SDK or a third-party analytics or crash-reporting service such as Sentry. What the engine itself may send to Unity Technologies is described under Who else receives your data.
We do not sell your personal data.
We do not share it with advertisers or data brokers.
We do not build advertising profiles or track you across other websites.

Our servers and hosting providers keep ordinary technical logs, which may include IP addresses and error information, for a short period to keep the service running and to diagnose faults.

Why we are allowed to process it

For players and visitors in the UK and European Economic Area, our lawful bases under the GDPR are:

Purpose	Lawful basis
Running your game account, saving progress and recording which DLC and Steam Inventory items you own	Legitimate interests — providing the online game you chose to start, which cannot work without an account on our server
Recording play time for playtime rewards	Legitimate interests — giving the rewards the game offers for time played
Showing your display name on leaderboards	Legitimate interests — shared leaderboards that all players compete on
Showing your name in the hatch feed, the Discord feed and the Active Clickers list	Consent, given by turning the Privacy setting off; turn it back on at any time to stop
Counting your clicks toward your country on the live heatmap	Legitimate interests — the shared world heatmap
Preventing cheating and abuse, including click limits, reviews and bans	Legitimate interests — protecting the integrity of shared leaderboards and the global counter for all players
Website analytics through Vercel Web Analytics	Legitimate interests — aggregated statistics on which pages are useful and where readers come from, collected without cookies
Replying to emails you send us	Legitimate interests — answering your message

Discarding clicks above the limit is automatic. Suspensions and bans are decided by a person after review, and the game shows an on-screen notice explaining the account's status.

For players in Canada, we rely on implied consent for the game data described above, which is limited to what an online game needs to run your account, the leaderboards and the shared counter. You can withdraw that consent at any time by asking us to delete your data (see Your rights). Because Community Button cannot run your online account without this data, withdrawing consent means you can no longer use its online features. Showing your name in the hatch feed, the Discord feed and the Active Clickers list relies on your express consent, given by turning the Privacy setting off.

Who else receives your data

Valve (Steam) runs your Steam account, Steam Cloud saves, achievements, Steam leaderboards, Steam Inventory, the Steam Community Market, the Item Store and all payments. Valve uses that data under its own privacy policy; it is not our service provider.

These service providers process data on our behalf:

Supabase — hosts the Community Button backend.
Vercel — hosts this website and provides its analytics (see This website). Your IP address reaches Vercel with every request and may appear briefly in its request and security logs.
Cloudflare — DNS and email routing. Emails you send to our addresses pass through Cloudflare on their way to our inbox.
Google — provides the Gmail inbox where emails sent to our addresses are delivered and stored.
LootLocker — holds leaderboard entries from the 2024 version of Pixel Flip (see Pixel Flip).

Unity Technologies makes the Unity engine both games are built with. The Unity runtime may send Unity technical data, such as crash reports and information about your device's hardware, which Unity handles under its own privacy policy. Pixel Flip has Unity's engine diagnostics switched on.

Discord hosts our community server and is not our service provider. Automatic feed posts there include your Steam display name only if you turn the Privacy setting off. Those posts, and anything you post on the server yourself, are held by Discord under its own privacy policy.

Where your data is processed

We operate from Canada, and our service providers are based mainly in the United States, so your data is processed mainly in Canada and the United States; some providers may also handle it on servers in other countries. If you are in the UK or EEA, your data therefore leaves your region. The European Commission and the UK recognise Canada as giving adequate protection for commercial organisations covered by PIPEDA. For our service providers in the United States, we rely on the transfer safeguards in their standard terms.

How long we keep it

Community Button account data (progress, play time, purchase and Steam Inventory records, and any anti-cheat or moderation records): for as long as your account exists. When you ask us to delete it, we delete it, except where the law requires us to keep a record.
Approximate country in Community Button: kept with your account only temporarily for the live heatmap, and not stored with your account long term.
Website analytics: we view the statistics in Vercel's dashboard, which shows the most recent month. Vercel may keep the data longer under its own policies. Vercel tells visitors apart by a hash of the request and discards that visitor session after 24 hours, and no cookie is involved.
Emails you send us: kept only as long as we need them to handle your message and any follow-up. You can ask us to delete them sooner.
Leaderboard entries from the 2024 version of Pixel Flip: see Pixel Flip.

When you contact us

If you email any of our addresses, we receive your email address, any name you include, and whatever you write or attach (for example your SteamID or screenshots). We use it to reply and, for support, to find your game account. Emails are delivered through the providers listed under Who else receives your data.

If you talk to us on Steam, Discord, X, Bluesky, YouTube or SoundCloud, those platforms handle your data under their own privacy policies.

Your rights

Wherever you live, you can ask us to:

See what we hold about you
Correct anything wrong
Delete it
Get a copy in a portable format
Object to or restrict how we use it

You can also withdraw consent you have given, at any time. For example, turning Community Button's Privacy setting back on means your name is not shown in the hatch feed, the Discord feed or the Active Clickers list from then on.

Email privacy@recursionsplashgames.com with your SteamID and what you want done. SteamIDs are public, so before we act on a request we may ask you to confirm that you control that Steam account. We will respond within 30 days. There is no charge.

Deleting your Community Button data removes your progress, your place on our in-game leaderboards and our records of your purchases and items, except where the law requires us to keep a record. Clicks you have already contributed to the global counter cannot be subtracted, because the counter holds only a total and has no link back to you. Some data is held by Valve rather than by us: items in your Steam Inventory (such as Egg Troves, Collectable Pets, Boost Potions and Tamed pets), Steam leaderboards and achievements, and your Steam Community Market history. Deleting your data with us does not remove these automatically. You manage your inventory items, achievements and Market history through Steam; if you also want your scores taken off our games' Steam leaderboards, say so in your request.

If you are unhappy with how we have handled your request, you can complain to:

Canada: the Office of the Privacy Commissioner of Canada (priv.gc.ca)
UK: the Information Commissioner's Office (ico.org.uk)
EEA: your national data protection authority

Children

Our games are not directed at children under 13, and we do not knowingly collect personal data from them. Steam requires its own minimum age to hold an account. If you believe a child has provided us data, email privacy@recursionsplashgames.com and we will delete it.