PRIVACY POLICY

Last Updated: December 09, 2025

Your privacy highly matters to Warpfrog SAS ("we", "us", "our", the "Company", or "Warpfrog"). This is our Privacy Policy for the website located at Warpfrog.com (the "Website"). Please review this policy carefully to understand our policies and practices, including any use of your information, and how we will treat it (the "Privacy Policy" or "policy"). By accessing or using this Website, you agree to be bound by this Privacy Policy. Where noted, this policy has been adapted to comply with the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 (“CPRA”), although the Company is not a business that is required to comply with either the CCPA or the CPRA. Terms defined in the CCPA and used, but not otherwise defined herein, shall be understood to have the same meaning when used in this Policy.

If we make material changes to how we treat our users' personal information, we will notify you through a notice on the Website home page. The date the Privacy Policy was last revised is identified at the top of the page. You are responsible for periodically visiting our Website and this Privacy Policy to check for any changes.

We collect personal information only when you voluntarily provide it to us, such as:

• Filling in forms on our Website, such as when you enter a contest or promotion sponsored by us on the Website or when you report a problem with our Website;

• If you contact us via email, we will receive records and copies of your correspondence and contact information shared during the exchange, (including email addresses); or

• Your responses to surveys that we might ask you to complete for research purposes.

This Privacy Policy applies to information we collect through this Website, email, text, and other electronic messages between you and this Website, and through your interactions with our advertising and applications on third-party websites and services that link to this Privacy Policy. It does not apply to information collected offline, on other websites operated by the Company or any third party, or by third parties, including through any application or content (including advertising) accessible from or linked to the Website.

No Collection/Processing Of Personal Data

We do not collect or otherwise process any personal data (whether yours or that of any other person) solely from your use of the Website. That means we do not obtain your name, physical address, IP address, geolocation, etc. except when you provide it to us, through the use of cookies or when you voluntarily submit it via forms, surveys, or correspondence, as noted here.

Accordingly, for the purpose of European Union Regulation no. 2016/679 on personal data (the "GDPR") (or any similar legislation if you are located outside of the European Union), Warpfrog is neither a controller nor a processor of personal data.

However, if you purchase a Warpfrog game from a separate platform (including an internet distribution platform that you may access via a link from this Website), your personal data provided on that platform may be collected and processed by that platform. If you do purchase our game from one of these other platforms, the use of your personal data will be governed by that platform's own privacy policy. Warpfrog has no control over and is not responsible for how your data is being processed by these third-parties. Please refer to the relevant privacy policy and terms of use for each such internet distribution platform for any questions regarding the personal data you provide to them.

Mod.io

Warpfrog games may use mod.io for in-game mod browsing. When you link your current platform account from the Website to mod.io, we will send your platform user ID to mod.io, for mod.io authentication purposes only. This information is not stored by us.

What If We Happen to Collect/Process Personal Data?

In the event that you do provide Warpfrog with your personal data (as detailed above), the following rules would apply:

1. Your consent to share the personal data would have to be expressly obtained.

2. Warpfrog shall clearly explain why it is requesting the data and Warpfrog will obtain only as much information that is strictly necessary for the reason it is being collected.

3. Warpfrog will not transfer your personal data to any other person, unless it is required to do so by legal authority duly entitled to make such a request.

4. Warpfrog will not keep your personal data for more than five (5) years after collection.

5. You have the right to request in writing (i) a list of the personal data held by Warpfrog with respect to you, the correction, deletion, limitation to the processing of, the portability/transferability of your personal data, and/or to oppose the processing of your data, or (ii) to lodge a claim in France with the French Commission Nationale de l’Informatique et des Libertés (CNIL / https://www.cnil.fr), or your local personal data protection agency. Please contact us using the Website contact form.

6. Warpfrog is a French société par actions simplifiée with registered office at 4 rue Edith Piaf -Immeuble Asturia C – 44800 Saint-Herblain, France, registered with the Trade and Companies Registry of Nantes, France, under number 848 580 965, as well as at 1700 W. Irving Park Road, Chicago, IL 60613. You may contact the Company using the Website contact form.

Rights and Choices Available to Website Users

Right to Know and Data Portability

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past twelve (12) months (the "right to know"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete below), we will disclose to you:

· The categories of personal information we collected about you.

· The categories of sources for the personal information we collected about you.

· Our business or commercial purpose for collecting or selling that personal information.

· The categories of third parties with whom we share that personal information.

· If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:

o sales, identifying the personal information categories that each category of recipient purchased;

o disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained; and

o the specific pieces of personal information we collected about you (also called a data portability request).

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retain, subject to certain exceptions (the "right to delete"). Once we receive your request and confirm your identity (see Exercising Your Rights to Know or Delete), we will review your request to see if an exception allowing us to retain the information applies. We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, or otherwise perform our contract with you.

2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

3. Debug products to identify and repair errors that impair existing intended functionality.

4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.

5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).

6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.

7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

8.   Comply with a legal obligation.

9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We will delete or deidentify personal information not subject to one of these exceptions from our records and will direct our service providers to take similar action.

Exercising Your Rights to Know or Delete

To exercise your right to know and/or delete described above, please submit a request using the Website contact form. Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information.

You may only submit a request to know twice within a twelve (12) month period. Your request to know or delete must provide sufficient information that allows us to reasonably verify your identity or that of your authorized representative. The requesting party must also describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We will only use personal information provided in the request to verify the requestor's identity or authority to make it.

Response Timing and Format

We will confirm receipt of your request as soon as commercially possible, but please note that you may not receive immediate confirmation.

Our goal is to provide a substantive response to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another forty-five (45) days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option.

Any disclosures we provide will cover no longer than the twelve (12) month period preceding the day we received your request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to such requests unless they become excessive, repetitive, or obviously without merit. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

‍

‍

‍