Privacy policy

1. At a glance

This website only provides information about the game SALVAGE STORM. It sets no cookies, uses no tracking, no analytics and no advertising, and loads nothing from third-party servers (no external fonts, scripts, videos or maps). There is no registration, no comment function, no form and no newsletter. The language is chosen through the page address only; nothing is stored on your device for it.

Personal data is processed in two cases only: for technical reasons when you open the website (sections 3 and 4), and when you contact us (section 5).

2. Controller

Phone: +49 911 9769120
E-mail: info.nospam@salvage-storm.com

A data protection officer is not required by law and has not been appointed.

3. Hosting and server log files

This website is hosted on the server lx01.giant-hosting.de in a data centre in Germany. Where a service provider is involved, it processes the data solely on our behalf under a contract pursuant to Art. 28 GDPR.

Each time a page or file (e.g. an image, video or font) is requested, the web server automatically records the following data in a log file:

• IP address of the requesting device,
• date and time of the request,
• requested address (URL),
• referrer (the previously visited page, if your browser sends it),
• user agent (browser and operating system),
• HTTP status code,
• amount of data transferred (bytes).

Purpose: delivering the website, keeping it stable and running, and detecting and defending against attacks and abuse. Legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure and working website. Without this data the website cannot be delivered.

Retention: log data is deleted after 14 days at the latest. It is kept longer only if and as long as individual entries are needed to investigate a specific security incident.

Log data is not combined with other data and is not used to build user profiles.

4. Cloudflare (delivery and protection against attacks)

All requests to this website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare provides the encrypted connection (TLS), caches files to deliver them faster, and protects the server against overload and other attacks (content delivery network and DDoS protection).

In doing so, Cloudflare processes the technical data of your request, in particular your IP address, the requested address, date and time, browser and system information (user agent, headers) and security-related characteristics of the request. Cloudflare forwards the request to our server, where it is logged as described in section 3.

Legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is fast and secure delivery of the website, protected against attacks. Cloudflare acts as our processor under the Cloudflare Data Processing Addendum (Art. 28 GDPR).

Transfer to the USA: Cloudflare is certified under the EU-US Data Privacy Framework. For certified companies, an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, the Data Processing Addendum contains the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

Cloudflare's analytics and measurement features (e.g. Cloudflare Web Analytics) are switched off for this website. Only if Cloudflare classifies a request as possibly automated or malicious may a security check be shown, setting a strictly necessary cookie that serves solely to fend off attacks (Section 25 (2) no. 2 TDDDG).

More information: Cloudflare privacy policy.

5. Contact by e-mail, phone or fax

If you contact us, we process your details (e.g. name, e-mail address, phone number, content of the message) to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries, e.g. from press and players).

We delete the data as soon as it is no longer needed for handling your request, unless statutory retention obligations (e.g. for business letters under Section 257 HGB and Section 147 AO) apply.

6. Links to Steam and itch.io

The buttons to Steam (Valve Corporation) and itch.io are plain links. Merely visiting this website does not send any data to these platforms. Only when you click such a link do you open the respective provider's page; its privacy policy then applies.

7. Videos, images and fonts

All videos, images and fonts on this website are stored on our own server and loaded from there (through Cloudflare). The background video on the home page has no audio track; the trailer only starts when you play it yourself. No data is processed beyond what is described in sections 3 and 4.

8. Encryption

This website is delivered over a TLS-encrypted connection (HTTPS), recognisable by “https://” in your browser's address bar.

9. Your rights

With regard to your personal data, you have the following rights:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR).

We inform the recipients of your data about any rectification, erasure or restriction where required (Art. 19 GDPR).

Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to the contact details above is sufficient.

Right to lodge a complaint (Art. 77 GDPR): you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

10. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

11. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.