Privacy policy
The short version
- This site only collects your email address, and only if you sign up for the newsletter.
- No cookies, no analytics, no ads, no tracking scripts.
- Your email is used for the newsletter and nothing else. It is never sold or shared for marketing.
- You can unsubscribe with one click in any email, or ask for your data to be deleted.
Who is responsible
This website and newsletter are run by Elarion, the data controller for the personal data described here.
For any privacy question or request, contact us by replying to any newsletter email you have received.
The newsletter
What we collect: your email address. When you sign up and confirm, our email newsletter provider also records the time of sign-up and confirmation, and the IP address used, as proof that you agreed to receive the newsletter. The provider may also record whether an email was opened and which links were clicked, so we can see which updates are interesting. This uses a small image and tracked links in the email, and you can block it by turning off image loading in your email app.
Why: to send you development updates, playtest invitations and news about releases.
Legal basis: your consent (Art. 6(1)(a) GDPR). We use double opt-in: you only start receiving emails after you click the link in the confirmation email. You can withdraw your consent at any time using the unsubscribe link in every email, or by contacting us. Withdrawing consent does not affect anything sent before.
How it works: when you press the subscribe button, your email address is sent directly from your browser to our email newsletter provider. It is never stored on this website.
Visiting this website
This website is hosted on GitHub Pages. Like any web server, GitHub processes technical data such as your IP address, browser type and the pages requested, to deliver the site and keep it secure. GitHub may log visitor IP addresses for security purposes. The legal basis is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). We do not have access to these logs and do not use any analytics.
Fonts and images are served from this website itself. No content is loaded from other servers, advertising or tracking services. Links to other sites, such as Steam or social networks, only send you there when you click them.
Cookies and local storage
This website does not set cookies and does not store anything in your browser. That's why there is no cookie banner.
Service providers
We use these processors, each bound by a data processing agreement:
- Email provider: the newsletter is not open yet. This policy will name the provider before sign-ups start.
- GitHub Pages (GitHub, Inc., United States): hosts this website.
International transfers
Some of these providers process data in the United States or other countries outside the EU/EEA. Where that happens, the transfer is protected by appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long we keep your data
Your email address stays on the list until you unsubscribe or ask us to delete it. After you unsubscribe, the provider may keep your address on a suppression list so you are never emailed again by mistake; ask us if you want it removed completely. Sign-ups that are never confirmed receive no newsletters and are removed.
Your rights
Under the GDPR and similar laws you have the right to:
- access the personal data we hold about you and get a copy of it;
- have it corrected or deleted;
- restrict or object to its processing;
- receive it in a portable format;
- withdraw your consent at any time;
- lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
To use any of these rights, contact us by replying to any newsletter email you have received. We'll respond within one month. We do not sell or share personal information as defined by the California Consumer Privacy Act.
Children
The newsletter is not meant for anyone under 16. We do not knowingly collect their data; if you believe a child has signed up, contact us and we'll delete it.
Security
The site is served only over HTTPS, uses a strict Content Security Policy and runs no third-party scripts. Access to the newsletter list is limited to us and protected with two-factor authentication.
Changes to this policy
If this policy changes, the new version will be posted here with a new effective date. If the change is significant, subscribers will be told by email.