Privacy policy
Last updated 25 October 2026.
This policy explains how Stitchwork Studios (“SWS”, “we”, “us”) handles personal information on this website. We are based in the United Kingdom and follow the UK GDPR and the Data Protection Act 2018.
Who we are
Stitchwork Studios is an independent game studio making Stay Awhile. We are setting up Stitchwork Studios as a company in the United Kingdom. We will add the registered company name, number and address here once they exist. Until then, contact us through the Contact page.
What we collect
You can create an account on this website. It has no comments and no payment pages, and we do not show ads or use advertising trackers. The personal information we collect directly is what you type into the contact form, the suggestions form, the playtest application form, the poll and when you create an account. Our website platform also collects basic visit statistics (analytics) and uses cookies, explained below and in our Cookie policy.
Website analytics
We use the visitor statistics built into Odoo, our website platform, and Google Analytics to see how many people visit and which pages are popular. This can include the pages you view, when you visit, the country you are in (worked out from your IP address), your browser and device type, and the page that sent you here. Odoo and Google Analytics may use cookies to give each visitor an anonymous ID so repeat visits can be counted.
We use this information in summary form to improve the website. We do not use it to identify you or to build profiles about you. Our legal basis is our legitimate interest in understanding and improving our website, and where the law requires it, your consent to optional cookies. Odoo processes its statistics on our behalf. Google Analytics is provided by Google, which handles the data it collects under its own Privacy Policy and may process it outside the UK. Google Analytics only runs if you accept optional cookies in the cookie banner. We do not use advertising trackers and we do not sell your data.
Cookies
Our website runs on Odoo, which uses cookies. Essential cookies keep the site working. Optional cookies, such as the ones that give each visitor an anonymous ID so we can count visits, only run if you allow them in the cookie banner. Our Cookie policy lists every cookie, what it does, and how to change your choice at any time.
Spam protection (reCAPTCHA)
We use Google reCAPTCHA on our forms (contact, sign up and password reset) to tell real people from automated bots. reCAPTCHA runs in the background. When it runs, it sends information to Google, such as your IP address, your browser and device details, and how you interact with the page. Google uses this to decide whether you are a person and handles it under its own Privacy Policy and Terms of Service.
Our legal basis is our legitimate interest in keeping the website and our forms secure. Your data may be processed by Google outside the UK. reCAPTCHA may also set a cookie, listed in our Cookie policy.
Spam protection on our suggestions and playtest forms (Cloudflare Turnstile)
The suggestions form and the playtest application form use Cloudflare Turnstile to tell real people from automated bots. When it runs, it sends information such as your IP address and browser details to Cloudflare, which uses it to decide whether you are a person, under its own Privacy Policy. Our legal basis is our legitimate interest in keeping our forms secure. Cloudflare also runs the service that receives these forms for us, so it handles your submission on our behalf. Your data may be processed outside the UK.
Embedded videos
Some devlogs may include YouTube videos. Nothing is loaded from YouTube until you click play. When you do, YouTube (Google) may set cookies and collect data under its own privacy policy. We use YouTube's privacy-enhanced mode.
Joining the team (Google Forms)
Our “Join the team” page links to a Google Form that opens in a new tab. Nothing is loaded from Google on our website, and Google only sees you once you open the form. When you do, Google may set cookies and collect data under its own Privacy Policy. What you type into the form is stored by Google Forms and is available to our team. We use it only to consider you for the team and to contact you about it, and we keep it for as long as we need to for that. We will delete applications that are not taken forward within a reasonable time, and you can ask us to delete yours sooner using our Data requests page.
Player accounts
If you create an account, we collect your name, email address and password. Your password is stored in a scrambled (hashed) form, so we cannot read it. We use your details to let you sign in, to give you access to playtests and supporter content, and to contact you about your account. Our legal basis is performing our agreement with you when you sign up, and our legitimate interest in keeping accounts secure.
We keep your account until you ask us to delete it. To see, correct or delete your details, use your account page or see our Data requests page. Our website platform, Odoo, stores account data on our behalf. If you link your account to a supporter tier on another service, such as Patreon, that service has its own privacy policy.
Playtest applications
If you apply for a closed playtest from the player area, we collect your name, the email address of your account, and optionally your Discord username, platform and a note. We store them as a private card in Codecks, where only the team can see them. We use them to choose playtesters and to contact you about the playtest. Our legal basis is our legitimate interest in running playtests, and your request to take part. We delete applications once the playtest they were for has finished, unless you ask us to remove them sooner.
Polls
Signed-in players can vote in polls in the player area. To stop repeat voting, we keep a one-way record linked to your IP address and the poll for up to 90 days. We store the vote totals, not who voted for what. Our legal basis is our legitimate interest in running fair polls.
Devlog alerts
When we publish a devlog, our service posts a message to our own Discord server. This does not involve any visitor's personal information.
The suggestions form
If you send a suggestion, we collect the title, the details and an optional name or nickname that you type in. We store them as a private card in our task-planning tool, Codecks, where only the team can see them. We use them to read and consider your idea. Our legal basis is our legitimate interest in hearing from players. Please do not include personal details such as your email address.
The contact form
If you use the contact form, we collect your name, email address and message. We use them only to read your message and reply to you. Our legal basis is our legitimate interest in answering people who contact us.
Your message is received by our website system, Odoo, which stores it and may email it to our team. Our website host processes it on our behalf. We keep messages for as long as we need to deal with them, then delete them. We do not sell your details or use them for marketing.
The roadmap page
The roadmap page loads task progress from our service on Cloudflare. Like any web request, this gives that service your IP address and browser details. We do not use them to identify you.
Other services this website uses
- Google Fonts. The pages load typefaces from Google. When your browser does this, Google receives your IP address and standard browser details. Read Google’s privacy policy for what it does with them.
- Hosting. Our website host may keep technical logs, such as IP addresses, to run and secure the service.
Other places we are online
We link to Discord, Patreon, YouTube, TikTok, Instagram and X. When you use those services, they collect your information under their own policies, and we do not control that. On Discord, we see what you post in our server, such as your username and messages. On Patreon, we see the details you choose to share when you become a supporter.
Your rights
Under UK data protection law you can ask us to:
- tell you what personal information we hold about you,
- correct it if it is wrong,
- delete it,
- restrict or stop how we use it, and
- give you a copy of it.
To use any of these rights, follow the steps on our Data requests page, or contact us through the Contact page.
Complaints
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Children
Stay Awhile is aimed at an age rating of PEGI 16 to 18, and this website is not meant for children under 13. We do not knowingly collect personal information from them.
Changes
If we add things like an email list or new tools that use your information, we will update this policy before we start using them, and change the date at the top.
Privacy policy
Last updated 25 October 2026.
This policy explains how Stitchwork Studios (“SWS”, “we”, “us”) handles personal information on this website. We are based in the United Kingdom and follow the UK GDPR and the Data Protection Act 2018.
Who we are
Stitchwork Studios is an independent game studio making Stay Awhile. We are setting up Stitchwork Studios as a company in the United Kingdom. We will add the registered company name, number and address here once they exist. Until then, contact us through the Contact page.
What we collect
You can create an account on this website. It has no comments and no payment pages, and we do not show ads or use advertising trackers. The personal information we collect directly is what you type into the contact form, the suggestions form, the playtest application form, the poll and when you create an account. Our website platform also collects basic visit statistics (analytics) and uses cookies, explained below and in our Cookie policy.
Website analytics
We use the visitor statistics built into Odoo, our website platform, and Google Analytics to see how many people visit and which pages are popular. This can include the pages you view, when you visit, the country you are in (worked out from your IP address), your browser and device type, and the page that sent you here. Odoo and Google Analytics may use cookies to give each visitor an anonymous ID so repeat visits can be counted.
We use this information in summary form to improve the website. We do not use it to identify you or to build profiles about you. Our legal basis is our legitimate interest in understanding and improving our website, and where the law requires it, your consent to optional cookies. Odoo processes its statistics on our behalf. Google Analytics is provided by Google, which handles the data it collects under its own Privacy Policy and may process it outside the UK. Google Analytics only runs if you accept optional cookies in the cookie banner. We do not use advertising trackers and we do not sell your data.
Cookies
Our website runs on Odoo, which uses cookies. Essential cookies keep the site working. Optional cookies, such as the ones that give each visitor an anonymous ID so we can count visits, only run if you allow them in the cookie banner. Our Cookie policy lists every cookie, what it does, and how to change your choice at any time.
Spam protection (reCAPTCHA)
We use Google reCAPTCHA on our forms (contact, sign up and password reset) to tell real people from automated bots. reCAPTCHA runs in the background. When it runs, it sends information to Google, such as your IP address, your browser and device details, and how you interact with the page. Google uses this to decide whether you are a person and handles it under its own Privacy Policy and Terms of Service.
Our legal basis is our legitimate interest in keeping the website and our forms secure. Your data may be processed by Google outside the UK. reCAPTCHA may also set a cookie, listed in our Cookie policy.
Spam protection on our suggestions and playtest forms (Cloudflare Turnstile)
The suggestions form and the playtest application form use Cloudflare Turnstile to tell real people from automated bots. When it runs, it sends information such as your IP address and browser details to Cloudflare, which uses it to decide whether you are a person, under its own Privacy Policy. Our legal basis is our legitimate interest in keeping our forms secure. Cloudflare also runs the service that receives these forms for us, so it handles your submission on our behalf. Your data may be processed outside the UK.
Embedded videos
Some devlogs may include YouTube videos. Nothing is loaded from YouTube until you click play. When you do, YouTube (Google) may set cookies and collect data under its own privacy policy. We use YouTube's privacy-enhanced mode.
Joining the team (Google Forms)
Our “Join the team” page links to a Google Form that opens in a new tab. Nothing is loaded from Google on our website, and Google only sees you once you open the form. When you do, Google may set cookies and collect data under its own Privacy Policy. What you type into the form is stored by Google Forms and is available to our team. We use it only to consider you for the team and to contact you about it, and we keep it for as long as we need to for that. We will delete applications that are not taken forward within a reasonable time, and you can ask us to delete yours sooner using our Data requests page.
Player accounts
If you create an account, we collect your name, email address and password. Your password is stored in a scrambled (hashed) form, so we cannot read it. We use your details to let you sign in, to give you access to playtests and supporter content, and to contact you about your account. Our legal basis is performing our agreement with you when you sign up, and our legitimate interest in keeping accounts secure.
We keep your account until you ask us to delete it. To see, correct or delete your details, use your account page or see our Data requests page. Our website platform, Odoo, stores account data on our behalf. If you link your account to a supporter tier on another service, such as Patreon, that service has its own privacy policy.
Playtest applications
If you apply for a closed playtest from the player area, we collect your name, the email address of your account, and optionally your Discord username, platform and a note. We store them as a private card in Codecks, where only the team can see them. We use them to choose playtesters and to contact you about the playtest. Our legal basis is our legitimate interest in running playtests, and your request to take part. We delete applications once the playtest they were for has finished, unless you ask us to remove them sooner.
Polls
Signed-in players can vote in polls in the player area. To stop repeat voting, we keep a one-way record linked to your IP address and the poll for up to 90 days. We store the vote totals, not who voted for what. Our legal basis is our legitimate interest in running fair polls.
Devlog alerts
When we publish a devlog, our service posts a message to our own Discord server. This does not involve any visitor's personal information.
The suggestions form
If you send a suggestion, we collect the title, the details and an optional name or nickname that you type in. We store them as a private card in our task-planning tool, Codecks, where only the team can see them. We use them to read and consider your idea. Our legal basis is our legitimate interest in hearing from players. Please do not include personal details such as your email address.
The contact form
If you use the contact form, we collect your name, email address and message. We use them only to read your message and reply to you. Our legal basis is our legitimate interest in answering people who contact us.
Your message is received by our website system, Odoo, which stores it and may email it to our team. Our website host processes it on our behalf. We keep messages for as long as we need to deal with them, then delete them. We do not sell your details or use them for marketing.
The roadmap page
The roadmap page loads task progress from our service on Cloudflare. Like any web request, this gives that service your IP address and browser details. We do not use them to identify you.
Other services this website uses
- Google Fonts. The pages load typefaces from Google. When your browser does this, Google receives your IP address and standard browser details. Read Google’s privacy policy for what it does with them.
- Hosting. Our website host may keep technical logs, such as IP addresses, to run and secure the service.
Other places we are online
We link to Discord, Patreon, YouTube, TikTok, Instagram and X. When you use those services, they collect your information under their own policies, and we do not control that. On Discord, we see what you post in our server, such as your username and messages. On Patreon, we see the details you choose to share when you become a supporter.
Your rights
Under UK data protection law you can ask us to:
- tell you what personal information we hold about you,
- correct it if it is wrong,
- delete it,
- restrict or stop how we use it, and
- give you a copy of it.
To use any of these rights, follow the steps on our Data requests page, or contact us through the Contact page.
Complaints
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Children
Stay Awhile is aimed at an age rating of PEGI 16 to 18, and this website is not meant for children under 13. We do not knowingly collect personal information from them.
Changes
If we add things like an email list or new tools that use your information, we will update this policy before we start using them, and change the date at the top.