PRIVACY POLICY

This site sets no tracking cookies, builds no advertising profiles, and sells nothing about you to anyone. The only personal data it collects is the email address you choose to leave on the alpha waitlist — and that is used for exactly one thing: telling you when the game opens.

The controller for this site is the operator named in the imprint. For any privacy request, use the contact address given there.

When you join the waitlist we store: your email address, the time you signed up, the wording of the promise you signed up under, which page the signup came from (including, where present, a referrer hostname or a UTM source tag), and the IP address the signup was made from. The IP address and timestamp exist to prove the signup was real and yours — under the GDPR the burden of demonstrating consent lies with us (Art. 7(1)).

Legal basis: your consent (Art. 6(1)(a) GDPR). The purpose is a small number of one-off notifications about the game becoming available — the alpha opening. There is no newsletter, and the address is never shared with third parties for their own purposes.

Withdrawing is as simple as it should be: email the address in the imprint, or reply to any mail we send, and the row is deleted. All waitlist data is deleted once its purpose is fulfilled — after launch notifications have gone out.

The data is stored in a Cloudflare D1 database. Cloudflare, Inc. operates as our processor (see Hosting below).

The waitlist form is protected by Cloudflare Turnstile, which distinguishes people from bots. Turnstile evaluates technical signals from your browser (including your IP address) to make that call. It sets no tracking cookies and is loaded only when you interact with the form. Legal basis: our legitimate interest in keeping automated abuse out of the list (Art. 6(1)(f) GDPR).

We use Cloudflare Web Analytics — a cookieless, privacy-first measurement tool that counts page views and referrers without fingerprinting individual visitors, storing client-side state, or tracking anyone across sites.

The site is served by Cloudflare Pages (Cloudflare, Inc., USA). Cloudflare processes connection data (such as IP addresses) technically to deliver the site and defend it against attacks. Cloudflare is certified under the EU-U.S. Data Privacy Framework, and we rely on that adequacy decision together with Cloudflare's standard data processing addendum for any transfer outside the EU.

Links to external communities (such as Discord) lead to services with their own privacy policies. Nothing is transferred to them by this site — they only learn about you if you follow the link.

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection (Art. 21), plus the right to withdraw consent at any time with effect for the future (Art. 7(3)), and to lodge a complaint with a supervisory authority (Art. 77). One email to the address in the imprint exercises any of them.