Skip to content

Privacy Policy

Last updated: October 6, 2026

Awaited Developments ("we", "us", or "our"), operating in British Columbia, Canada, is responsible for personal information handled through this website, Rust Sign Painter, and Card Counter: Blackjack Coach. This policy covers those products, their purchases, and messages sent to us through this website or support email.

SummonHub is excluded and has its own privacy policy on its website. Client project information is addressed separately in the applicable client arrangements; our legal privacy obligations still apply. This policy explains our practices and is not blanket consent to every use of your information.

1. Website, Support, and Purchases

  • When you contact us, we receive your name, email, subject, message type, and message contents. We use these to respond to inquiries, quotes, support requests, and bug reports.
  • Our website and hosting services process technical request information, such as IP addresses and browser/request details, to deliver pages, maintain security, and prevent abuse. IP addresses are also used for request rate limits.
  • Stripe processes direct payments. We receive checkout customer details, which may include name, email, and billing address, plus order identifiers, currency, amounts, and payment status. We store purchase and license records in Google Firebase/Firestore for delivery, verification, recovery, support, and transaction records. We do not store full payment-card numbers.
  • We record the policy version and your affirmative acceptance when you start a direct purchase. This is separate from consent for optional data processing.
  • Google Play processes Card Counter purchases. The app receives purchase and entitlement information, including purchase tokens and product identifiers, to unlock paid features. Those identifiers are not anonymous merely because they do not contain your name.

This website does not currently include advertising or visitor-analytics scripts. Hosting and external services, including Stripe Checkout, may use cookies or similar technology needed for their services and security. Their notices describe their own use of those technologies.

2. Rust Sign Painter

Pro license activation and verification send your purchase email, license key, hardware/device identifier, requested action, and a request timestamp to our license service. We use these to verify paid access, bind a license to a device, manage device transfers, and prevent abuse. License records include activation/device information, transfer information where applicable, status, and verification dates. The service also processes your IP address for abuse prevention.

The website's purchase, recovery, and license-verification services do not request your painting images. Images or other files you voluntarily send to support are handled as support material. This does not describe data collected separately by Rust, its servers, GitHub, or your operating system.

3. Card Counter: Blackjack Coach

  • The app does not provide a user-account or cloud-sync system. Settings, custom strategies, counting state, and saved practice results are stored on your device. Device backup behavior is controlled separately by Android and your backup settings.
  • Google Analytics for Firebase receives app interactions and feature-use events, including practice starts/completions and the number of correct cards in a completed exercise, ad/reward interactions, and Pro status. Google's SDKs also process app-instance/device identifiers, device and app details, and technical information such as IP addresses and approximate location derived from them.
  • Firebase Crashlytics receives crash and diagnostic information to help identify errors. Firebase Cloud Messaging processes an app-installation notification token for updates and notifications. The app also attaches that token to some analytics and crash-report information.
  • Google AdMob provides ads, including rewarded ads. Its SDK may process your Advertising ID where available, other device identifiers, IP address, device/app information, and ad interactions to serve and measure ads and prevent fraud. Available advertising choices depend on your region, device settings, and Google's consent process.
  • If you choose to share the app, its generated referral link includes your installation's notification token. The link is sent to the app and recipients you select and may be passed through Google Play. Treat referral links as containing an installation identifier.

These services support app operation, paid features, ads, usage analysis, error diagnosis, and notifications. Local storage of practice data does not mean the app sends no data off your device: analytics includes the limited practice information described above.

4. Service Providers and Disclosures

We disclose information as needed to the providers supporting the relevant feature:

  • Stripe for payments, checkout, and fraud prevention.
  • Google, including Firebase/Firestore, Analytics, Crashlytics, Cloud Messaging, AdMob, and Google Play, for the app-specific purposes described above.
  • Website hosting and email providers for delivering pages, transactional license emails, and support correspondence.
  • Discord for internal support notifications when that integration is enabled. Contact-form notifications include the submitted name, email, subject, message type, and message contents.

We may also disclose information when legally required or permitted, to protect rights and safety, or as part of a lawful business transfer with appropriate privacy protections. Providers may process some information for their own purposes under their policies.

We do not sell personal information for money. Card Counter's advertising disclosures are described above. If applicable law treats an advertising disclosure as a sale or sharing of personal information, you may exercise the applicable opt-out rights by contacting us and using the available advertising privacy controls.

5. Consent and Your Choices

We use information you provide to fulfil the purchase or support request you make and for reasonably related purposes permitted by law. We seek additional consent where required for optional processing or a new purpose. Where EU or UK data-protection law applies, processing must have an applicable legal basis: contract performance for purchases and licenses, legal obligations for required records, legitimate interests where permitted for necessary security and support, and consent for optional analytics or advertising where required. You may withdraw consent, subject to legal restrictions; we will explain any effect on the relevant feature.

  • In Card Counter, use Settings → Manage Privacy Settings when Google makes that option available to review advertising choices. Android also provides advertising-ID and notification controls.
  • The advertising form and Android advertising-ID controls are not a general switch for Firebase analytics or crash reporting. Contact us about those processing activities, consent withdrawal, or deletion requests.
  • You can remove locally saved Card Counter data through Android's app-storage controls. Clearing data may remove practice history and preferences; it does not automatically delete provider-held data or refund purchases.
  • You may disable notifications through Android settings. Permission to display notifications is separate from the app's use of an installation token.

6. Processing Outside Canada and Security

Our providers may store or process personal information outside Canada, including in the United States and other countries. Information may be subject to the laws of those countries, including lawful access by their courts and public authorities. We remain responsible for information under our control. Where applicable law requires additional international-transfer safeguards, those requirements apply; contact us for information about the arrangements relevant to your data.

We use safeguards appropriate to the information and service, including encrypted web connections and restricted access to server-side credentials. No system is completely secure. Do not include passwords, full card numbers, or unnecessary sensitive information in support messages.

7. Retention and Deletion

Purchase and license records are retained while needed to provide paid access, verification, recovery, and support, and for applicable tax, accounting, dispute, or legal requirements. Support correspondence is retained while needed to resolve and follow up on the request or meet a legal obligation. We remove or de-identify information when it is no longer needed for those purposes. We do not promise deletion solely because an app or license is inactive.

Where BC's Personal Information Protection Act requires information used to make a decision directly affecting you to be retained for at least one year, that minimum applies. Provider-held analytics, diagnostics, advertising, and messaging data are also subject to the relevant service's retention settings and legal obligations. Contact us for retention information or a deletion request relating to your data.

Locally stored app data remains until removed by you or the app; Android backups may retain copies under your device settings. We may need to retain limited records after a deletion request to comply with law or resolve a dispute. We will explain applicable exceptions and any effect that deleting necessary license information has on paid access before proceeding.

8. Access, Corrections, and Complaints

BC's Personal Information Protection Act applies to our handling of personal information where applicable; Canada's PIPEDA may apply to other activities, including certain interprovincial or international transactions. You may request access to or correction of your information and raise a concern about our practices. Depending on the law applicable to you, additional rights may include deletion, portability, restriction, objection, and opting out of sale or sharing. We will not penalize you for exercising a legal privacy right.

Send requests to our Privacy Officer using the contact details below. We may ask for only the information reasonably needed to verify your identity and locate relevant records. We respond within applicable legal deadlines, including generally 30 business days for BC PIPA access requests, subject to permitted extensions. If we cannot fulfil a request, we will explain the reason and available review or complaint options.

You may complain to the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada where PIPEDA applies, or the data-protection authority responsible for your jurisdiction.

9. Children's Privacy

The covered products are not intended for children under 13. If you believe a child has provided personal information without appropriate authorization, contact our Privacy Officer so we can investigate and take appropriate action. Local age and parental-consent requirements still apply.

10. Policy Changes

We will post updates with a revised date. For material changes, we will give notice through the website, the affected app, or email where available before the change takes effect, unless law requires otherwise. If a new purpose requires consent, we will obtain it before using your information for that purpose. Continued use alone does not supply that consent.

11. Privacy Contact

Direct privacy questions, requests, and complaints to the Privacy Officer, Awaited Developments, British Columbia, Canada, at support@awaiteddevelopments.com or use our contact form. Please indicate that your message is a privacy request and name the relevant app or purchase.