This policy explains what personal data Medmenham Games collects through medmenham.games, why, who handles it, and what rights you have. We keep it small on purpose: we only collect what the features below need.
The data controller is Medmenham Games.
Contact for anything privacy-related: contact@medmenham.games.
| Feature | Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| Newsletter ("Dispatches") | E-mail address, sign-up date, a random unsubscribe token | Send you progress updates on Chinagraph | Your consent (art. 6.1.a) | Until you unsubscribe |
| Beta sign-up ("Join the unit") | E-mail address, sign-up date, a random unsubscribe token | Tell you when a test build is available | Your consent (art. 6.1.a) | Until you unsubscribe or the beta ends |
| Contact form | Name, e-mail address, message | Read and answer your message | Our legitimate interest in replying to you (art. 6.1.f) | Up to 12 months after the conversation ends |
| Playtest survey | Your answers and free-text comments. No name or e-mail is requested, so do not include personal details in the comments. | Improve the game | Your consent (art. 6.1.a) | Until the game is released, then deleted or fully anonymised |
| Site analytics | Page views, visits, country, browser and device type, page load performance. No cookies, no profile of you. | Understand how many people visit and fix performance problems | Our legitimate interest (art. 6.1.f) | Per Cloudflare's retention for Web Analytics |
| Server logs | IP address, requested page, user agent, handled by our hosting provider | Security, abuse prevention, delivering the site | Our legitimate interest (art. 6.1.f) | Short-term, per the provider |
Giving us your data is always optional. If you do not provide it, you simply cannot use that feature. We do not sell your data, do not use it for advertising, and do not make automated decisions about you.
This site does not set advertising or tracking cookies. Our analytics (Cloudflare Web Analytics) is cookieless and does not follow you across sites. Cloudflare may set strictly necessary security cookies to protect the site from abuse.
We load fonts from Google Fonts, so your browser connects to Google's servers and your IP address is shared with them when a page loads. See Google's privacy policy.
We use these service providers, who process data on our behalf:
Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, or to receive it in a portable format. Where we rely on consent, you can withdraw it whenever you like; this does not affect anything done before.
Survey answers are not linked to your identity, so we may be unable to find and delete a specific response.
If you think we have handled your data unlawfully, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or to your local authority.
The site is served over HTTPS, and stored data sits with the providers above under access controls. No system is perfectly secure, but we keep the amount of data small to limit any risk.
The site is not directed at children under 14, and we do not knowingly collect their data. If you believe a child has sent us personal data, tell us and we will delete it.
If we change what we collect, we will update this page and its date. For significant changes affecting subscribers we will also say so in a newsletter.