Stardew Valley

"We may disclose your Personal Data to a third party, such as a service provider or contractor for a business or operational purpose, or with your consent. These service providers and contractors include our: e-commerce service providers; moderation service providers; and data analytic service providers."

Personal data is shared with multiple categories of third-party service providers including data analytics companies and e-commerce platforms, though contractual limits are described.

"We may collect your Personal Data automatically through "cookies" and "web beacons" as you use the Services. Cookies, web beacons, and other automatic data collection technologies on the Services may come from third parties such as Google Analytics or Shopify."

Third-party tracking technologies from Google Analytics and Shopify are embedded in the services, enabling cross-site tracking of user activity.

"We reserve the right to change this Policy from time to time consistent with applicable law. If we make changes to this Policy, we will notify you by revising the date at the top of this Policy and provide you with additional notice such as an in-Game notice, banner on the Websites, or email notification."

The company can change the privacy policy at any time with only a notice obligation and no requirement for affirmative user consent to new terms.

"We retain each category of Personal Data only for as long as necessary to fulfill the purposes for which the Personal Data was provided to us or, if longer, to comply with any legal obligations, to resolve disputes, and to enforce contracts. For example, we may retain Personal Data collected about you to prevent repeated violations or suspected violations of our Terms of Use if your profile has been banned."

Retention periods are described vaguely as 'as long as necessary' with no concrete timelines, and data may be kept indefinitely for banned users or dispute resolution.