Privacy Policy

Last updated: October 9, 2026

Who we are

This website and ThePeople are operated by McGowanStudios, mcgowan-studios.com. Contact: support@mcgowan-studios.com.

Data we collect

Account

  • Username, email address, first name and last name, entered at registration or on the profile page.
  • A password hash. The password itself is not stored.
  • Date joined, last login, and whether the email address has been activated.

Subscription

  • Stripe customer identifier, whether a subscription is active, and the date a subscription first became past due.
  • Payment card details are entered with Stripe. The website database does not hold them.

Game

  • Experience points, level, player kills, zombie kills, player deaths, zombie deaths, wins, matches played, hours played, and the time you were last seen in game.
  • Your username and these statistics appear on the leaderboard, which is visible to signed-in members. Totals across all players appear on the home page.

Messages

  • Name, email address, subject, message text, status and date for each message sent through the contact form. Messages sent while signed in are linked to your account.

Logs and security emails

  • When a login fails for an existing username, an email is sent to that account's address stating the time and the IP address of the attempt. The IP address is not stored in the database.
  • The web server and the application write request and error logs that can contain IP addresses and requested addresses.
  • Error reports sent to our error tracker include the signed-in user's identity (user id, username and email address) and IP address, together with request details.

Processors and third parties

  • Stripe processes subscription payments and hosts the billing portal.
  • Sentry (self-hosted error tracker at sentry.mcgowan-studios.com) receives error reports, including user and IP address.
  • Plausible Analytics (plausible.mcgowan-studios.com) records page views and download events.
  • Google reCAPTCHA v3 runs on the registration form and on the contact form for visitors who are not signed in. Google receives data about your browser and interaction.
  • cdn.mcgowan.cloud serves the site's stylesheet and scripts; your IP address is visible to it when pages load.
  • Email is sent through our mail server, mail.mcgowan-studios.com.

Cookies

  • sessionid: keeps you signed in. HttpOnly. Expires after 30 days.
  • csrftoken: protects forms against forged requests.
  • Google reCAPTCHA sets its own cookies on pages that use it.

Retention

  • Account, subscription, game and message data is kept until the account is deleted.
  • Deleting the account removes the account record, game statistics, contact messages linked to it, and closes the Stripe account.
  • Application error log files rotate at 10 MB and five older files are kept.
  • The application does not set retention periods for web server logs, error tracker events, analytics data, Stripe records or backups.

Your rights

  • Access and export: Account, Download my data returns your profile, subscription, game statistics and messages as a JSON file.
  • Correction: Account, Profile lets you change your name and email address.
  • Deletion: Account, Delete account removes your account after you confirm your password.
  • For any other request, contact support@mcgowan-studios.com.

Contact

Privacy questions: support@mcgowan-studios.com