Corporate Website Privacy Policy

1. Introduction

Welcome to Manta Studios.

Manta Studios is an independent video game development and publishing brand operated by Crusader Ventures Ltd, a company established in Malta, European Union.

We create, develop, publish, and promote games, interactive entertainment, and digital experiences for audiences around the world.

Your privacy matters to us. We are committed to handling personal information responsibly, protecting the information entrusted to us, and being transparent about our data processing practices.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit https://mantastudios.com (the “Website”), communicate with us, or interact with services and features made available through our corporate Website.

It also explains your privacy rights and how to exercise them.

We aim to follow the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Who We Are

The Website is owned and operated by:

Legal entity: Crusader Ventures Ltd
Trading name: Manta Studios
Registered office: SOHO St. Julians Punchbowl Centre, Elia Zammit Street, Unit P046, St. Julian's, STJ 3154, Malta
Country: Malta, European Union
Website: https://mantastudios.com
Privacy enquiries: [email protected]

Company registration number: C 115576

For the purposes of the European Union General Data Protection Regulation (GDPR) and applicable data protection legislation, Crusader Ventures Ltd is the data controller for the personal information processed under this Privacy Policy.

We determine why and how such information is processed, except where another organisation acts as an independent or joint data controller.

This Privacy Policy is intended to reflect applicable data protection requirements, including Regulation (EU) 2016/679 (GDPR), Malta’s Data Protection Act (Chapter 586), and applicable electronic communications privacy legislation.

3. Scope of This Privacy Policy

This Privacy Policy applies to the processing of personal information associated with:

Visiting and browsing the Manta Studios corporate Website.
Exploring our games, product information, announcements, media, and publications.
Contacting us through forms, email, or other communication channels.
Submitting business, partnership, licensing, or publishing enquiries.
Requesting information about our studio, products, or services.
Subscribing to newsletters and promotional communications, where offered.
Participating in promotional campaigns, surveys, or events, where offered.
Applying for employment, freelance, or other professional opportunities, where offered.
Interacting with corporate Website features, embedded content, and associated technologies.

3.1 Separate Privacy Policies

This Privacy Policy does not automatically govern personal information processed through our separately distributed games and applications.

Our Android and Apple mobile games are covered by our separate Manta Studios Mobile Games Privacy Policy and any relevant game-specific privacy disclosures.

Browser-based games, desktop games, and other interactive products may have their own privacy notices describing their particular data processing practices.

Where you access a game from the Website, the applicable game privacy notice will be made available through the relevant game page, product interface, or distribution platform.

If a product is embedded directly within the Website, both this Privacy Policy and the applicable product privacy notice may be relevant to different processing activities.

Third-party websites and platforms linked from our Website are subject to their own privacy practices.

4. Personal Information We Collect

The information we process depends on how you interact with the Website and which features you use.

We do not require visitors to create an account or provide their name simply to browse ordinary public corporate content.

Nevertheless, limited technical information is ordinarily processed when a website is accessed.

4.1 Information Collected Automatically

When you visit the Website, our hosting infrastructure, security systems, or other enabled services may process technical information such as:

Internet Protocol (IP) address.
Browser type and version.
Device category and operating system.
Language and regional preferences.
Date and time of visits.
Requested pages, files, and resources.
Referring website or page, where available.
HTTP request information and response codes.
Technical error and performance information.
Approximate geographical region inferred from technical information.
Security-related events, such as suspicious requests or automated traffic.

These details may be processed for delivery of the Website, technical operations, security, fraud prevention, troubleshooting, and service availability.

Additional analytics or advertising-related collection will depend on the technologies actually enabled and your applicable privacy choices.

4.2 Information You Provide Voluntarily

When you contact us, we may process the information you choose to submit, including:

Name and surname.
Email address.
Company or organisation name.
Professional position or job title.
Telephone number, if provided.
Country or region.
Subject and contents of your message.
Files, documents, or other materials you choose to attach.
Records of our subsequent correspondence.

We use this information to understand your enquiry, respond appropriately, and maintain relevant communications.

Please do not submit passwords, payment card details, identity documents, health information, or other sensitive information unless specifically requested through an appropriate secure process.

4.3 Business, Publishing, and Partnership Enquiries

If you contact us regarding game development, licensing, distribution, publishing, collaborations, investment, sponsorship, advertising, or commercial opportunities, we may process:

Your professional contact details.
Company or organisation information.
Proposed project or collaboration details.
Business correspondence.
Meeting notes and follow-up actions.
Relevant contractual or commercial documentation.

We may also receive professional contact information through business introductions, referrals, or publicly available professional sources where lawful and relevant.

Where we obtain personal information indirectly, we will provide additional information as required by applicable law.

If we offer a newsletter or other subscription service and you choose to subscribe, we may process:

Your email address.
Your name or preferred name, where requested.
Subscription date, source, and consent records.
Communication preferences.
Email delivery, subscription, and interaction information where the relevant functionality is enabled and lawful.

We may use this information to send game announcements, studio news, product launches, development updates, events, and other communications covered by your subscription preferences.

Where required, we will obtain your consent before sending electronic marketing communications.

You may unsubscribe at any time using the unsubscribe mechanism in relevant emails or by contacting us.

Unsubscribing will not prevent us from sending necessary responses to enquiries you initiate or communications required by law.

4.5 Employment and Professional Applications

If we provide an opportunity to apply for employment, freelance work, contracting, or other professional engagements, we may process:

Contact information.
CVs and professional profiles.
Employment and education history.
Skills, qualifications, and portfolios.
Work samples and submitted applications.
Interview notes and recruitment correspondence.
Other relevant information voluntarily provided during the application process.

We use this information to evaluate applications, communicate with candidates, assess suitability, and administer recruitment.

We do not request sensitive personal information unless necessary and supported by an appropriate legal basis.

We will not retain unsuccessful applications for longer than the applicable recruitment retention period, unless another lawful basis justifies continued retention.

Where recruitment is handled through an external provider, its own privacy information may also apply.

4.6 Events, Surveys, and Promotional Activities

If the Website offers competitions, surveys, giveaways, playtesting registrations, mailing lists, or event registrations, we may collect information necessary to administer the relevant activity.

Additional activity-specific privacy information and participation rules may be provided at the point of collection.

We will not use information submitted for one activity for unrelated purposes without an appropriate legal basis.

4.7 Public Content and Testimonials

Where we publish testimonials, interviews, creator features, community contributions, or other material containing personal information, we will establish an appropriate legal basis and respect applicable publicity, privacy, and intellectual property rights.

We may request permission to publish identifying information, photographs, attribution, or professional details where appropriate.

Any public submission feature will be accompanied by relevant information about the visibility and potential redistribution of submitted content.

5. How and Why We Process Personal Information

We process personal information only when we have an appropriate purpose and lawful basis.

Under Article 6 GDPR, the relevant lawful bases may include consent, performance of a contract, steps requested before entering a contract, compliance with legal obligations, and legitimate interests.

The following table summarises our principal processing activities.

Processing activity	Purpose	Lawful basis
Website delivery and essential technical operations	Deliver requested pages and keep the Website functioning	Legitimate interests, or contractual necessity where applicable
Security logs and abuse prevention	Detect malicious traffic, protect infrastructure, and investigate incidents	Legitimate interests or legal obligation
Responding to general enquiries	Read and reply to visitor communications	Legitimate interests
Responding to pre-contractual requests	Evaluate and arrange requested contractual services	Steps prior to entering a contract, where applicable
Business and partnership correspondence	Manage professional relationships and commercial discussions	Legitimate interests or contractual necessity
Optional analytics	Understand website usage and improve performance	Consent where required, or legitimate interests where legally justified
Newsletter and promotional emails	Send subscribed updates and marketing communications	Consent or another specifically applicable lawful basis
Recruitment	Review applications and assess candidates	Pre-contractual steps, legitimate interests, or legal obligation, as applicable
Financial and legal administration	Meet recordkeeping, taxation, and regulatory duties	Legal obligation
Establishing or defending legal claims	Protect lawful interests and resolve disputes	Legitimate interests or another applicable legal basis

Our legitimate interests may include operating a secure and reliable Website, managing professional communications, responding to genuine enquiries, understanding website performance, protecting against misuse, and developing our business.

Before relying on legitimate interests, we consider whether those interests are overridden by individuals’ rights and freedoms.

Where consent is required, we will not treat silence, inactivity, or preselected options as valid consent.

You may withdraw consent at any time without affecting the lawfulness of processing undertaken before withdrawal.

6. Cookies and Similar Technologies

Our Website may use cookies, browser storage, and similar technologies.

Cookies are small data files stored on a device or accessed through a browser. Other technologies can perform similar functions without being conventional cookies.

Different categories of technology have different purposes.

6.1 Strictly Necessary Technologies

Strictly necessary technologies may be used to:

Deliver requested Website functionality.
Maintain essential security protections.
Support traffic routing or load balancing.
Preserve necessary session information.
Record your privacy preferences.
Prevent technical errors or abuse.

Where a technology qualifies for an exemption under applicable electronic communications legislation, consent is not required for that particular storage or access operation.

Related personal data processing must still have an appropriate lawful basis under the GDPR.

6.2 Functional Technologies

Optional functional technologies may remember preferences or provide enhanced features, such as language settings or embedded interactive functionality.

Where consent is legally required, these technologies will not be activated until the necessary consent is obtained.

6.3 Analytics Technologies

Where website analytics are enabled, analytics systems may measure:

Page visits and navigation patterns.
General visitor engagement.
Referral sources.
Browser and device categories.
Loading speeds and performance.
Interactions with Website features.
Aggregate campaign results.

We use this information to evaluate and improve the Website.

Analytics technologies requiring consent will be activated only after the necessary consent is obtained.

We aim to use aggregated and privacy-preserving analytics wherever reasonably practical.

6.4 Marketing and Advertising Technologies

Where enabled, marketing technologies may be used to measure promotional campaign effectiveness, advertising conversions, or interactions with our advertising activities.

Certain technologies may also be used by third-party services for advertising personalisation or cross-site tracking.

Such processing will be disclosed and subject to the consent and other legal requirements applicable to the particular activity.

We do not treat ordinary browsing as consent to optional advertising tracking.

Where optional consent-based technologies are used, we will provide an appropriate consent mechanism.

This may include options to accept or reject non-essential technologies and to make more granular choices where necessary.

Where legally required, a mechanism for reopening privacy preferences will remain accessible so that consent can be changed or withdrawn.

You may also manage or delete cookies using your browser settings. Disabling certain technologies may affect associated functionality.

A separate Cookie Policy or cookie information panel may provide additional information about the exact cookies and technologies enabled, their providers, purposes, and lifetimes.

7. Website Analytics and Performance Monitoring

We may use analytics, diagnostics, performance monitoring, and security systems to understand how the Website operates.

These systems may process technical events, visit information, errors, and performance measurements.

We may use aggregated statistical information to assess interest in our games, improve Website navigation, identify technical issues, and evaluate general business performance.

Where an analytics provider uses personal information on our behalf, we will assess the appropriate contractual arrangements and safeguards.

Where analytics involve access to information stored on a visitor’s device, or storage of information on that device, we will respect applicable consent requirements.

We will identify material analytics and monitoring services in the Website’s relevant disclosures.

8. Contact Forms and Communications

When you submit a message through our Website or contact us directly, we use the information provided to process and respond to your enquiry.

Communications may be routed through our email provider, form processing services, or other relevant infrastructure.

We take reasonable measures to prevent unauthorised access, spam, abuse, and unnecessary disclosure of submitted information.

We may retain a limited history of communications to maintain continuity, handle follow-up requests, address disputes, or meet applicable legal requirements.

Submitting a contact form does not, by itself, subscribe you to marketing communications.

Unless a separate lawful basis applies, we will not use your contact information to send unsolicited promotional email.

9. Newsletters and Direct Marketing

Where the Website provides a newsletter or marketing subscription, we will explain what you are subscribing to and provide the choices required by applicable law.

Marketing communications may concern:

New game releases.
Upcoming projects and announcements.
Game updates and events.
Studio news.
Promotions and special offers.
Relevant developer, publishing, or partnership news.

You can withdraw consent or unsubscribe at any time.

We may retain limited suppression records to ensure that unsubscribe and objection requests continue to be respected.

Withdrawal of marketing consent does not require deletion of unrelated records that we are legally entitled or required to retain.

We do not purchase or use third-party marketing contact lists without assessing the applicable legal requirements.

The Website may display or link to content from external services, including game distribution platforms, video hosting services, social networks, or other websites.

Examples of potential content include:

Gameplay trailers and video demonstrations.
Game store listings.
Social media posts and profiles.
Interactive media.
External game distribution pages.

If embedded content communicates directly with a third-party provider, that provider may receive technical information such as your IP address, browser characteristics, and interaction details.

Where embedded services use non-essential cookies or similar technologies requiring consent, we will implement appropriate controls before activating them.

Where practical, we may use privacy-enhanced embedding configurations or a click-to-load mechanism.

Following a conventional external link may take you to a third-party website governed by its own policies.

Manta Studios is not responsible for the independent privacy practices of third-party websites.

11. Game Showcases, Downloads, and External Stores

Our corporate Website may showcase games or link visitors to platforms where our games are available.

These may include web gaming portals, mobile application stores, desktop marketplaces, and other distribution platforms.

When you follow a link to an external store or download platform, that platform may independently process information concerning your visit, account, downloads, transactions, and platform activity.

Any purchases, subscriptions, or downloads conducted through a third-party platform are subject to that platform’s relevant privacy practices.

Where a Manta Studios game is launched or embedded directly on our Website, game-specific privacy disclosures may apply in addition to this policy.

This corporate Privacy Policy should not be interpreted as a complete explanation of data processed by individual games.

We may share information with carefully selected recipients where necessary for legitimate operational, contractual, or legal purposes.

Recipient categories may include:

Website hosting and infrastructure providers: For content delivery, web hosting, domain infrastructure, security, and network operations.

Communication and email providers: For processing forms, receiving messages, delivering transactional communications, and managing authorised newsletters.

Analytics and technical service providers: For permitted usage analysis, diagnostics, and performance monitoring.

Professional advisers: Including accountants, auditors, legal advisers, and other relevant professional service providers.

Business partners: Where necessary to evaluate or perform a specific collaboration, subject to applicable confidentiality and data protection requirements.

Recruitment service providers: Where applicable to an employment or contracting opportunity.

Competent authorities: Where disclosure is required by law, a valid legal process, or another lawful obligation.

Corporate transaction participants: Where necessary in connection with a lawful restructuring, acquisition, merger, or disposal of a business or relevant assets.

We assess whether each recipient acts as a data processor, independent controller, or joint controller, and establish the appropriate legal arrangements where necessary.

We do not disclose personal information for unrelated purposes without a valid legal basis.

13. International Transfers of Personal Information

Manta Studios is operated from Malta, within the European Union.

Some of our service providers may operate internationally or process information outside the European Economic Area.

Where personal information is transferred to countries outside the EEA, we will take the measures required by applicable data protection law.

Depending on the recipient and transfer, these measures may include:

An applicable European Commission adequacy decision.
The European Commission’s approved Standard Contractual Clauses.
Other recognised transfer mechanisms permitted by law.
Supplementary contractual, technical, or organisational safeguards where necessary.

For transfers to eligible US organisations, the EU-US Data Privacy Framework may apply where the recipient is appropriately certified and the transfer falls within the relevant adequacy decision.

You may contact us to request further information about applicable international transfer safeguards and how to access them where required by law.

14. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purpose for which it was collected, unless a longer period is required or permitted by law.

Retention periods depend on the nature of the information, the applicable services, and the relevant legal obligations.

Information category	Retention approach
Technical access and security logs	Retained for a limited period according to our configured infrastructure and security retention schedule
General enquiries	Retained for the applicable correspondence retention period after the last relevant interaction
Business and partnership correspondence	Retained while the relationship or discussion is active and for an appropriate follow-up or legal period
Newsletter subscriptions	Retained until unsubscribe or another valid termination of the subscription, with limited suppression records where necessary
Recruitment applications	Retained for the applicable recruitment period, with any longer retention supported by a lawful basis
Contracts and financial documents	Retained according to applicable contractual, taxation, accounting, and legal requirements
Privacy requests and consent records	Retained as reasonably necessary to manage preferences, demonstrate compliance, and address claims
Optional analytics information	Retained according to the configured and disclosed retention periods of the relevant analytics system

The exact retention periods for applicable Website systems must be documented internally and reflected in any service-specific disclosures where appropriate.

When the applicable retention period expires, information is securely deleted, anonymised, or otherwise handled in accordance with legal obligations.

We may retain information for a longer period where necessary to establish, exercise, or defend legal claims, comply with binding obligations, or preserve evidence relating to a security incident.

15. Security of Personal Information

We take reasonable and proportionate technical and organisational measures to protect information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access.

Depending on the processing activity, these measures may include:

HTTPS and encryption for data in transit.
Restricted access to administrative systems.
Authentication and account security controls.
Appropriate handling of passwords, credentials, and secrets.
Security monitoring and abuse prevention.
Software maintenance and vulnerability remediation.
Access permissions based on operational necessity.
Appropriate contractual safeguards with service providers.
Backups and recovery procedures where necessary.
Data minimisation and retention controls.

Security measures are reviewed in light of relevant risks and changes to our infrastructure.

No online system can guarantee absolute security.

Where a personal data breach occurs, we will investigate and take the notification and remedial actions required by applicable law.

16. Your Rights Under Data Protection Law

Depending on the jurisdiction and circumstances, you may have the following rights:

Right of access: To request confirmation of whether we process personal information about you and obtain access to qualifying information.

Right to rectification: To request correction of inaccurate information or completion of incomplete information.

Right to erasure: To request deletion of personal information where the applicable legal requirements are satisfied.

Right to restriction: To request restrictions on certain processing activities in qualifying circumstances.

Right to data portability: To receive qualifying personal information in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller.

Right to object: To object to processing based on legitimate interests, including related profiling, on grounds relating to your particular situation.

Right to object to direct marketing: To object at any time to processing for direct marketing purposes, including related profiling.

Right to withdraw consent: To withdraw consent whenever consent is the legal basis for processing.

Rights concerning automated decisions: To exercise applicable rights in relation to solely automated decisions that produce legal or similarly significant effects.

These rights may be subject to legal conditions, limitations, and exceptions.

Exercising Your Rights

To submit a privacy request, contact:

[email protected]

Please explain your request and provide sufficient information for us to identify the relevant processing activity.

Where we have reasonable doubts about identity, we may request additional information proportionate to the request.

Under the GDPR, we will ordinarily respond without undue delay and within one month, subject to lawful extensions where necessary.

Requests are generally handled without charge, except in circumstances where applicable law permits a reasonable fee or refusal, such as manifestly unfounded or excessive requests.

Supervisory Authority

If you believe that your personal information has been processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority.

Our supervisory authority in Malta is:

Office of the Information and Data Protection Commissioner (IDPC)
Malta
Website: https://idpc.org.mt
Complaints: https://idpc.org.mt/file-a-complaint/

You may also have the right to complain to another competent supervisory authority in the European Union.

We welcome the opportunity to review and address any concerns raised directly with us.

17. Children’s Privacy

The corporate Website is primarily intended to provide information about Manta Studios, its games, and its business activities.

Some of our games may appeal to younger audiences. However, the presence of family-friendly or child-friendly game content does not mean that all corporate Website features are intended for children.

We do not knowingly seek unnecessary personal information from children through corporate contact, marketing, or professional enquiry features.

Where we operate a feature directed at children or knowingly process children’s personal information, we will apply the additional requirements of applicable legislation.

This may include age-appropriate information, data minimisation, restrictions on profiling, and parental authorisation where required.

Parents or legal guardians concerned about information submitted by a child may contact us to exercise applicable rights.

Information processed through individual games is addressed in the relevant game privacy notices.

18. Third-Party Links and Independent Services

The Website may link to independent websites, application stores, social platforms, community websites, and partner services.

Once you access an external service, its privacy terms may govern the processing performed by that service.

We encourage visitors to review third-party privacy notices before submitting personal information.

We do not accept responsibility for the independent data processing practices of third parties outside our control, without prejudice to any legal responsibilities we may have in relation to integrations or data disclosures that we arrange.

19. Automated Decision-Making and Profiling

We do not use ordinary corporate Website enquiries or visitor information to make solely automated decisions that produce legal or similarly significant effects concerning individuals.

Automated technical systems may be used for security filtering, spam detection, traffic management, or permitted statistical analysis.

Where a future feature introduces qualifying automated decision-making or profiling, we will provide the additional information and safeguards required by applicable law.

20. Is Providing Personal Information Mandatory?

You may generally browse the public corporate Website without voluntarily supplying personal contact information.

Certain technical information is necessary for a browser to communicate with our web infrastructure and receive requested content.

If you choose to contact us or participate in an optional feature, we may require limited information to provide the requested response or service.

For example, an email address may be necessary to reply to an email enquiry or administer an email subscription.

Information required for a particular contract, legal obligation, or optional feature will be identified where applicable.

If you do not provide information necessary for a requested service, we may be unable to fulfil that specific request.

We will distinguish mandatory information from optional information where relevant.

21. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect:

Changes to our Website or business activities.
Introduction or removal of Website features.
Changes to service providers or technical infrastructure.
Updates to applicable legislation or regulatory guidance.
Changes to our information handling practices.
Improvements to our privacy and security measures.

When this policy changes, we will update the “Last updated” date.

Where required by law, we will provide additional notice or obtain new consent before implementing material changes.

We encourage visitors to review this Privacy Policy periodically.

22. Contact Information

For privacy questions, data protection requests, concerns, or enquiries about this policy, please contact:

Manta Studios
Operated by Crusader Ventures Ltd
Malta, European Union

Registered address: SOHO St. Julians Punchbowl Centre, Elia Zammit Street, Unit P046, St. Julian's, STJ 3154, Malta
Privacy email: [email protected]
Website: https://mantastudios.com

We are committed to addressing privacy concerns fairly, transparently, and in accordance with applicable legal obligations.

End of Privacy Policy

Document: Manta Studios Corporate Website Privacy Policy
Document owner: Crusader Ventures Ltd
Applicable website: https://mantastudios.com
Version: 1.0.0