Privacy


How we handle your data on this website. The short version: no tracking, no advertising, and nothing loads from third parties until you ask for it.

No trackingNo analytics, no advertising cookies, no user profiles.
Local fontsFonts load from our own server, not from Google.
Your choiceNewsletter only with double opt in. Videos only load when you press play.

Who is responsible

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Highground Entertainment
Full legal name and postal address to be added

You can reach us about anything related to your data through our contact form.

Hosting and server log files

This website is hosted by an external provider. Whenever you open a page, your browser automatically transmits information that the server stores in log files. This includes:

  • your IP address
  • date and time of the request
  • the page or file requested and the amount of data transferred
  • the referring page, if your browser sends it
  • browser type, version and operating system

We need this data to deliver the website, keep it stable and secure, and investigate attacks. It is not combined with other data sources.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and working website.

Cookies and consent

We use the consent tool CookieAdmin. When you first visit, it asks which cookies you allow and stores your choice in a small cookie in your browser, so it does not have to ask again on every page.

We do not use analytics, advertising or tracking cookies, and we do not build user profiles.

If you log in to the WordPress backend, which only applies to site administrators, WordPress sets the cookies it needs for the login session.

Legal basis: ยง 25(2) TDDDG and Art. 6(1)(c) and (f) GDPR. Storing your consent choice is technically necessary.

Fonts

The fonts on this website are hosted on our own server. When a page loads, no connection is made to Google Fonts or any other external font service.

Newsletter

If you subscribe to our newsletter, we use your email address to send you development updates, playtest invitations and release news. Subscribing is voluntary.

Double opt in

After you submit the form, you receive an email asking you to confirm your subscription. You are only added to the list once you click the confirmation link. We store the time of your signup and confirmation together with your IP address, so we can prove that you really requested the newsletter.

MailerLite

The newsletter is sent with MailerLite, operated by MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. Your email address and the signup data above are stored on MailerLite servers. MailerLite can also record whether a newsletter was opened and which links were clicked, which helps us understand what readers find useful. We have a data processing agreement with MailerLite.

MailerLite belongs to a group that includes MailerLite, Inc. in the United States, so data may be processed outside the European Union. MailerLite, Inc. is certified under the Data Privacy Framework between the European Union and the United States.

Unsubscribing

You can unsubscribe at any time with the link at the bottom of every newsletter. Your email address is then removed from the active list. Withdrawing your consent does not affect the lawfulness of anything sent before.

Legal basis: Art. 6(1)(a) GDPR, your consent.

Contact form

If you write to us through the contact form, we process the details you enter: your name, your email address, the subject and your message. We use them only to answer your request and for follow up questions.

The form is provided by the WordPress plugin FormLayer. Your message is stored in the database of this website, and a copy is sent to our email inbox. It is not passed on to third parties.

We delete your details once your request is fully answered and there is no reason to keep them, unless legal retention periods require otherwise.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages we receive.

YouTube videos

We show our trailers from YouTube in privacy enhanced mode (youtube nocookie). The video is not loaded when you open a page. You only see a preview image served from our own server. Only when you press play does your browser connect to YouTube. YouTube then receives data such as your IP address and the page you are on, and may store cookies or similar information on your device.

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to Google LLC in the United States, which is certified under the Data Privacy Framework between the European Union and the United States. Details are in Google’s privacy policy.

Legal basis: Art. 6(1)(a) GDPR, your consent, which you give by starting the video.

Security

To protect the login area from attacks, we use the security plugin Loginizer. It records the IP address and time of failed login attempts and temporarily blocks addresses after repeated failures. This only affects attempts to log in to the backend, not normal visits.

This website uses an encrypted connection (TLS). You can recognise it by the lock icon and the https address in your browser.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in protecting the website.

Your rights

You have the right to:

  • request information about the personal data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data deleted (Art. 17 GDPR)
  • restrict the processing of your data (Art. 18 GDPR)
  • receive your data in a common, machine readable format (Art. 20 GDPR)
  • object to processing based on our legitimate interests (Art. 21 GDPR)
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)

To use any of these rights, send us a message through the contact form.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or where the suspected infringement took place (Art. 77 GDPR).

Changes to this policy

We update this policy when our website or the services we use change. The current version is always available on this page.

Last updated: 16 September 2026