Privacy
How we handle your data on this website. The short version: no tracking, no advertising, and nothing loads from third parties until you ask for it.
Who is responsible
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Highground Entertainment
Full legal name and postal address to be added
You can reach us about anything related to your data through our contact form.
Hosting and server log files
This website is hosted by an external provider. Whenever you open a page, your browser automatically transmits information that the server stores in log files. This includes:
- your IP address
- date and time of the request
- the page or file requested and the amount of data transferred
- the referring page, if your browser sends it
- browser type, version and operating system
We need this data to deliver the website, keep it stable and secure, and investigate attacks. It is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and working website.
Fonts
The fonts on this website are hosted on our own server. When a page loads, no connection is made to Google Fonts or any other external font service.
Contact form
If you write to us through the contact form, we process the details you enter: your name, your email address, the subject and your message. We use them only to answer your request and for follow up questions.
The form is provided by the WordPress plugin FormLayer. Your message is stored in the database of this website, and a copy is sent to our email inbox. It is not passed on to third parties.
We delete your details once your request is fully answered and there is no reason to keep them, unless legal retention periods require otherwise.
Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages we receive.
YouTube videos
We show our trailers from YouTube in privacy enhanced mode (youtube nocookie). The video is not loaded when you open a page. You only see a preview image served from our own server. Only when you press play does your browser connect to YouTube. YouTube then receives data such as your IP address and the page you are on, and may store cookies or similar information on your device.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States, which is certified under the Data Privacy Framework between the European Union and the United States. Details are in Google’s privacy policy.
Legal basis: Art. 6(1)(a) GDPR, your consent, which you give by starting the video.
Steam and Discord
Our pages link to Steam and Discord, for example to wishlist a game or join our community. These are plain links. No data is sent to Valve or Discord while you browse our website. Only when you click a link and leave this site do the privacy policies of those platforms apply:
Security
To protect the login area from attacks, we use the security plugin Loginizer. It records the IP address and time of failed login attempts and temporarily blocks addresses after repeated failures. This only affects attempts to log in to the backend, not normal visits.
This website uses an encrypted connection (TLS). You can recognise it by the lock icon and the https address in your browser.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in protecting the website.
Your rights
You have the right to:
- request information about the personal data we hold about you (Art. 15 GDPR)
- have incorrect data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- restrict the processing of your data (Art. 18 GDPR)
- receive your data in a common, machine readable format (Art. 20 GDPR)
- object to processing based on our legitimate interests (Art. 21 GDPR)
- withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
To use any of these rights, send us a message through the contact form.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or where the suspected infringement took place (Art. 77 GDPR).
Changes to this policy
We update this policy when our website or the services we use change. The current version is always available on this page.
Last updated: 16 September 2026