Externum LLC · Public disclosure

Privacy Policy

This policy explains how Externum LLC handles information on externum.dev. Optional collection features remain unavailable until their supporting systems and disclosures are approved for activation.

Effective date: August 2, 2026
Last updated: August 2, 2026
Status: Published disclosure · Owner reviewed

1. Who this policy covers

Externum LLC is an Arizona limited liability company. This policy applies to externum.dev, optional Externum accounts, future playtesting-interest registration, and voluntary Project Support offered through this website.

Externum is an online-only studio and does not publish a physical business location. hello@externum.dev is provided for direct inquiries only. Externum does not offer a mailing list, newsletter, commercial email, or emailed development updates.

Externum LLC also operates Tiles Legacy. Externum accounts remain separate from Tiles Legacy accounts and data. Visiting or using Tiles Legacy does not require an Externum account, and Tiles Legacy has separate functions and disclosures.

2. Age limits

Externum services are intended for people at least 13 years of age. Children under 13 may not create accounts, submit forms, or register for playtesting. Users under 18 must have permission from a parent or legal guardian. Project Support may be submitted only by an adult who is at least 18 years old; support associated with a minor must be submitted by the parent or legal guardian.

3. Information Externum may process

Public browsing

Public browsing does not require an account. At launch, essential infrastructure may process limited technical information needed to deliver and secure the site, such as request information, IP address, device or browser information, security events, and essential session data.

Optional Externum accounts

When optional accounts are connected, Supabase will provide managed authentication and database services. Account information may include an email address, a private display name, saved preferences, followed Externum projects, verification state, and security records. Externum will not store passwords directly.

Externum accounts will not contain purchases, payment-card information, game progress, Tiles Legacy account data, public profiles, public posts, comments, uploads, direct messages, or social features at launch.

Direct inquiries

The website contact form is disabled and does not transmit information. A visitor may instead send an ordinary direct email to hello@externum.dev. Direct inquiries are not subscriptions and do not create marketing or development-update consent.

Future playtesting

Playtesting registration is disabled at launch. Any future registration will express interest only and will not guarantee selection, access, compensation, rewards, features, or release timing.

Project Support

If activated later, guest Stripe Checkout may collect the information Stripe requires for payment processing, fraud prevention, receipts, and transaction communication, plus an optional preferred-project selection. Externum will not directly receive or store full payment-card details. Receipt information will be used only for transaction-related purposes.

4. Why information is used

Deliver, secure, maintain, and troubleshoot essential website and account functions.
Verify accounts, manage preferences, and provide safe account recovery.
Respond to direct inquiries.
Manage future playtesting interest without promising selection.
Process support payments, receipts, refunds, disputes, fraud prevention, accounting, and legal obligations through Stripe.
Protect Externum, its projects, and users from fraud, abuse, unauthorized access, and security threats.
Comply with applicable law and enforce applicable terms.

5. Cookies, storage, and tracking

No analytics cookies, advertising cookies, behavioral tracking, cross-site tracking, targeted advertising, third-party marketing trackers, or Vercel Analytics will be used at launch. Externum does not sell personal information.

Only technically necessary cookies or storage may be used for authentication, security, session management, saved preferences, and essential website functions. Future analytics require prior approval, updated disclosures, and appropriate consent controls before activation.

6. Providers and external platforms

PorkbunDomain registration and Externum email serviceActive provider

VercelApproved hosting and deployment providerNot deployed by this implementation

SupabaseApproved managed authentication and database provider for optional Externum accountsNot connected yet

StripeApproved processor for future guest Project SupportCheckout not active

Links to Tiles Legacy, Discord, Stripe, and other platforms lead to services with their own terms and privacy practices. Externum remains responsible for its own obligations and for its selection and use of providers.

7. Retention and deletion

Account information is retained while an account is active, then deleted after a verified deletion request within a reasonable processing period, except for limited security records or information legally required to be retained.
Payment, receipt, refund, dispute, fraud-prevention, and accounting records are retained for seven years. Full card details are not retained by Externum.
Ordinary emails and resolved direct inquiries are retained for no longer than two years after resolution unless needed for an ongoing relationship, contract, dispute, security incident, or legal obligation.
Transaction records are deleted or anonymized after their retention period unless continued retention is legally required.

8. Choices and privacy requests

When accounts are available, users will be able to view and correct their information, change preferences, follow or unfollow projects, and request or complete account deletion. Requests for access, correction, or deletion of applicable personal information may be sent to hello@externum.dev. Externum may reasonably verify the requester’s identity and will respond according to applicable law.

Some records may remain where required for payments, accounting, taxes, fraud prevention, disputes, security, or other legal obligations. A request should identify the account or email involved and the requested action, but should not include passwords, payment-card details, or unnecessary sensitive information.

9. Security

Before account or payment features are activated, Externum intends to use managed authentication, email verification, rate limiting, safe recovery, least-privilege access, server-side secrets, verified payment webhooks, server-side validation, and appropriate abuse protection. Reasonable safeguards reduce risk but cannot promise perfect or absolute security.

10. Policy changes and contact

This policy may be updated prospectively. Material changes will be clearly posted with revised effective and last-updated dates before materially different processing begins. Privacy and copyright questions may be sent to hello@externum.dev.

This owner-reviewed disclosure describes Externum’s current operational decisions and does not claim attorney review or legal advice.