Notice: From 1 January 2026, the data controller for the Game and Services (as defined in this notice) changed from Aonic AB (Publ) to Aonic UK Ltd, as part of an internal reorganisation within the Aonic Group. This change does not affect how your personal data is processed, the purposes for which it is used, or your rights under this notice. From that date, all references to "Megabit," "we," "us" and "our" in this notice refer to Aonic UK Ltd, doing business as Megabit Publishing.
LOU’S LAGOON
Privacy Notice
Version 3
May 2026
About This Notice
We are Aonic UK Ltd, a private limited company incorporated in England (registration number 14488533) with our registered address at Unit Efg, 4th Floor Zetland House, Scrutton Street, London, England, EC2A 4HJ, doing business as Megabit Publishing (“Megabit”, “we” or “us”). We are a video games publisher and part of the Aonic group.
This notice explains how Megabit collects and processes personal data relating to users of Lou’s Lagoon (“the Game”), including any demo version, and any services we provide in connection with the Game (“the Services”). When we decide how and why your personal data is processed, we act as the data controller.
If you have any questions about this notice or your personal data, contact us at dataprotection@megabit-publishing.com.
This notice covers only the Game and the Services. Where the Game or the Services link to websites or services not operated by Megabit, please refer to their own privacy notices.
What Data We Collect and Why
The data we collect depends on how you use the Game. We only collect personal data when we have a lawful reason to do so. This section sets out each type of data, its purpose, and the legal basis on which we rely.
Running the Game (Legal basis: contract performance)
To provide you with the Game and the Services, we collect:
- your gameplay settings, in-game activity, progression and gameplay events;
- your in-game achievements;
- your customisation choices (such as avatar appearance, seaplane skins and base building configurations); and
- how long and when you play the Game (including total game time and session times).
The Game is available on Steam. You will need an account with the relevant platform provider to access the Game. Megabit does not control the data collected by platform providers – please refer to their own privacy notices for information about how they process your data.
The Game does not require you to create a separate account or register with Megabit.
In-Game Bug Reporting Tool (Legal basis: legitimate interest)
The Game includes a built-in bug and feedback reporting tool. This tool is not triggered automatically – you choose when to submit a report using the button prompt on screen. When you submit a report, the following data may be collected:
- device model;
- operating system version;
- screen resolution;
- language settings.
Bug and feedback reports are sent to Unity Cloud Diagnostics, which is hosted by Unity Technologies on Tiny Roar’s account. Reports are retained for 90 days, after which they are automatically deleted.
This data is collected to identify and resolve technical issues in the Game. It is processed on the basis of our legitimate interest in maintaining the quality and stability of the Game.
Analytics (Legal basis: consent)
If you consent, we collect the following data to improve, test and monitor the Game. This data is processed through Unity Analytics and is linked to a unique installation-specific identifier that is created when you first launch the Game and stored on your device.
We collect:
- the unique installation-specific identifier described above;
- a User ID;
- IDFV (Identifier for Vendor);
- how you play the Game, including gameplay settings, progression, gameplay events and in-game achievements;
- how long and when you play (including total playtime and session lengths); and
- your IP address, but only to identify the country you are playing from.
Giving and withdrawing consent. Consent is requested when you first start the Game. You can withdraw it at any time by opting out in the Game's options menu (Options > General tab). The options menu is accessible from the main menu or at any point during gameplay. Withdrawing consent stops future data collection but does not affect data already collected or your ability to play the Game. To request deletion of data collected before withdrawal, contact us at dataprotection@megabit-publishing.com.
Crash Reporting (Legal basis: legitimate interest)
The Game uses Backtrace (a service provided by Sauce Labs, Inc.) to detect and fix crashes, errors and stability issues. When a crash occurs, a report is automatically sent to us. This report may include:
- device information (model, operating system, app version);
- the last gameplay stages or screens you visited;
- navigation points within the game interface; and
- technical crash details, including a call stack showing where the crash occurred.
Crash reports are pseudonymised per installation and use a separate identifier from the analytics identifier described above – they are not linked to your gameplay analytics data. Reports are used only to diagnose and resolve issues and are shared only with Backtrace as our data processor. Crash reports are stored for up to 365 days, after which they are automatically deleted. No crash report data is used for analytics, profiling or advertising.
Customer Support (Legal basis: legitimate interest)
When you contact us for support, we collect your name or user ID, email address and any information you provide in your request. We use this data to respond to your query. Incomplete or inaccurate information may limit our ability to help.
Competitions and Promotions (Legal basis: consent)
When we run competitions or promotions in connection with the Game (for example via Discord or social media), we collect the social media handle, username or Discord ID you use to enter; any content you submit as part of your entry (your "Submission"); and, if you win or are shortlisted, the contact and shipping details needed to verify your eligibility and award the prize. The terms of each competition set out the full requirements; our competitions are open only to entrants aged 18 or over. We may publish your Submission and the handle you used to enter on our official Discord and social channels for the purpose of operating the competition (including community voting and announcing winners).
We process this data on the basis of your consent, which you give by entering. You can withdraw your consent at any time by contacting us at dataprotection@megabit-publishing.com. The recipients with whom your competition data may be shared are listed in the "Who We Share Your Data With" section below.
How Long We Keep Your Data
We keep your data only for as long as it is needed for the purposes described in this notice. When data is no longer needed, we delete it or anonymise it. The following retention periods apply to specific categories of data:
- Gameplay analytics – retained for as long as needed to improve and monitor the Game. You can request deletion at any time (see “Deleting Your Data” below).
- Email newsletter data – retained until you unsubscribe or request deletion.
- Crash reports – retained in Backtrace for up to 365 days, after which they are automatically deleted.
- Bug and feedback reports – retained in Unity Cloud Diagnostics for 90 days, after which they are automatically deleted.
- Support requests – retained for as long as needed to resolve your query, then deleted.
- Competition and promotion data – entries are kept for up to 60 days after the competition closes; winners' contact details for up to 12 months for prize delivery, support and tax purposes. Submissions we have published on our channels remain visible for as long as those posts remain on the relevant platform.
In some cases, we may need to retain data for longer where required by law. If we do, we will keep it secure and continue to respect your rights where possible.
Who We Share Your Data With
We share your data only where necessary and only with the following recipients:
- Valve Corporation (Steam) – to operate the Game on the Steam platform and facilitate platform features such as achievements.
- Tiny Roar GmbH – the developer of the Game, based in Hamburg, Germany. Tiny Roar assists with development, analytics and support, and has access to analytics data through the Unity Dashboard and to bug reports through Unity Cloud Diagnostics.
- rokaplay GmbH – the co-publisher of the Game.
- BKOM Studios – the developer of the console ports of the Game.
- Service providers – including Unity Technologies (analytics and cloud diagnostics), Sauce Labs, Inc. / Backtrace (crash reporting). Our data processing agreements with these providers require them to process your data only on our instructions and to maintain appropriate security measures. They are prohibited from using your data for their own marketing.
- Other Aonic group companies – our parent group, where necessary for business operations.
- Law enforcement and authorities – where required by law, to comply with legal obligations, or to protect the rights and safety of our users.
- Corporate transactions – if Megabit or Aonic undergoes an investment, merger, acquisition or sale of assets, personal data may be shared as part of that process.
- Competition fulfilment and operations providers – including couriers and shipping providers (for delivery of physical prizes), digital code distribution platforms (for delivery of game keys), and random-draw and polling tools (for selecting winners and operating community votes). These providers process personal data on our behalf under appropriate contractual obligations.
- Social media platforms – where a competition is run via Discord, X, Meta/Instagram, Bluesky or similar, those platforms act as independent controllers of the data you share with them. We encourage you to review their own privacy notices
Megabit does not sell your personal data to third parties.
International Data Transfers
Some of our service providers are based outside the United Kingdom and the European Economic Area. In particular, Backtrace (Sauce Labs, Inc.) stores crash report data in the United States and Unity Technologies may process analytics and cloud diagnostics data in various regions where it operates facilities.
Where we transfer personal data to a country that does not provide an equivalent level of protection, we put appropriate safeguards in place as required by law, such as the UK International Data Transfer Agreement or standard contractual clauses approved by the European Commission. For more details, contact us at dataprotection@megabit-publishing.com.
Cookies and Similar Technologies
The Game itself does not use cookies. However, websites operated by Megabit in connection with the Game (such as the page hosting this notice) may use essential cookies to keep those websites working properly. These cookies do not track you for advertising purposes.
Deleting Your Data
You can request deletion of your data at any time, free of charge, regardless of where you are located. Email us at dataprotection@megabit-publishing.com.
We will act on your request within 30 days. In some cases, we may need to retain certain data where required by law (for example, to comply with a legal obligation or to resolve a dispute). If any exception applies, we will explain why.
Your Rights
Depending on where you are located, you may have rights under applicable data protection laws. These include the right to:
- access the personal data we hold about you;
- correct any inaccurate or incomplete data;
- restrict how we process your data;
- request a copy of your data in a portable format;
- object to our processing of your data; and
- withdraw your consent at any time.
To exercise any of these rights, email us using the contact details in the “How to Contact Us” section below. We will respond within 30 days. If we need more time, we will let you know within that period and explain why.
These rights are not absolute – in some circumstances, we may be unable to fulfil a request in full. If that happens, we will explain why.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). If you are in the EU, you can find your supervisory authority via the European Data Protection Board (edpb.europa.eu).
Children
Lou's Lagoon is not directed at children under the age of 13. However, we recognise that the Game's art style and themes may appeal to younger players.
Megabit does not knowingly collect personal data from children under the age of 13 (or under the applicable age of digital consent in your country). The Game's analytics data collection requires opt-in consent at first launch. If a child provides consent without parental involvement, that consent may not be valid, and we will delete the data on request.
If you are a parent or guardian and believe that a child under 13 has provided Megabit with personal data without your consent, please contact us at dataprotection@megabit-publishing.com. We will delete the data without delay.
Competitions and promotions. Our competitions and promotions in connection with the Game are open only to entrants aged 18 or over, unless the terms of a specific competition expressly say otherwise. We do not knowingly accept entries from, or process personal data of, anyone we believe to be under 18 in connection with our competitions. If you become aware that an entry has been submitted by an under-18, please contact us at dataprotection@megabit-publishing.com and we will remove the entry and delete the dataAdditional Information for California Residents.
Additional Information for California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The categories of personal information we collect are described in the “What Data We Collect and Why” section above.
We do not sell or share your personal information for cross-context behavioural advertising. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.
Under California law, you have the right to:
- request access to the categories and specific pieces of personal information we have collected about you;
- request deletion of your personal information;
- request correction of inaccurate personal information; and
- opt out of the sale or sharing of your personal information (though Megabit does not sell or share personal information).
We will not discriminate against you for exercising any of these rights. To make a request, contact us using the details in the “How to Contact Us” section. We will respond within 45 days, as required by California law.
Changes to This Notice
We may update this notice from time to time – for example, when our services change or when the law requires it. When we do, we will update the date at the top of this notice. For significant changes, we may also notify you directly.
We encourage you to review this notice regularly.
How to Contact Us
If you have any questions about this notice or wish to exercise your rights, contact us at:
- dataprotection@megabit-publishing.com – for privacy and data rights requests
When making a data rights request (such as a deletion or access request), please include the nature of your request in the subject line so we can respond promptly.