Privacy Policy

This Privacy Policy explains how Overedge Games ("we", "us", "our") handles personal data collected through this website (the "Site"). Overedge Games is an independent game development studio and is the data controller for personal data collected through this Site. You can reach us at [email protected]. We aim to process personal data in line with the EU General Data Protection Regulation (GDPR), the UK GDPR and applicable US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).

By using the Site you acknowledge the practices described here. We may update this policy from time to time; the "last updated" date above reflects the most recent revision.

• Newsletter sign-ups: when you submit the sign-up form we collect the email address you provide, together with your IP address, browser/device type, the page you signed up from, and the date and time of your submission.
• Communications: if you email us, we receive your email address and whatever information you choose to include in your message.
• Analytics data: we run our own self-hosted analytics (Umami) to understand how the Site is used. It records aggregate events such as the pages you visit, the referring URL, and your browser, operating system, device type, screen size and approximate location (country). Our analytics uses no cookies and does not store your IP address — Umami derives a salted, daily-rotating hash that is held only in memory and discarded each day, so visitors cannot be identified or tracked across sites or over time.
• Technical & security data: our hosting and security provider, Cloudflare, processes technical data such as IP address, approximate location (country) and browser/device information in order to serve the Site, protect it against abuse, and provide aggregate traffic statistics.

We do not ask for, and do not knowingly collect, special categories of sensitive personal data through the Site.

We use personal data for the following purposes, each under the legal basis noted:

• Sending the studio newsletter — on the basis of your consent, which you give when you sign up and can withdraw at any time.
• Responding to your enquiries and feedback — on the basis of our legitimate interest in communicating with people who contact us.
• Measuring and improving how the Site is used (via our self-hosted Umami analytics) — on the basis of our legitimate interest in understanding aggregate traffic and improving the Site.
• Operating, securing and improving the Site (including the technical and security processing performed by Cloudflare) — on the basis of our legitimate interest in running a functional, safe website.
• Meeting legal obligations — where processing is required to comply with the law.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We rely on a small number of service providers who process data on our behalf:

• Cloudflare — content delivery, security and basic traffic analytics at the network edge.
• OVH — hosting of our backend/API and associated data storage on a server located in Germany.
• Namecheap (PrivateEmail) — sending our newsletter and receiving the emails you send us.

Your newsletter and enquiry data is stored in a database on our own backend, which is hosted on a server in Germany and therefore remains within the European Union. Certain providers are nonetheless based in or process data in the United States — for example Cloudflare, which operates a global network, and Namecheap, which provides our email service. Where personal data is transferred outside the EEA or UK, we rely on recognised transfer mechanisms such as the Standard Contractual Clauses under each provider's data-processing terms.

Our website analytics are self-hosted: the Umami analytics software runs on our own backend on the OVH server in Germany. Analytics data is therefore not shared with any third-party analytics provider and remains within the European Union.

We keep newsletter data until you unsubscribe or ask us to delete it. We keep emails you send us for as long as needed to handle your request, and for a reasonable period afterwards. Because our Umami analytics data is aggregated and contains no cookies, names or stored IP addresses, we may retain it for as long as it remains useful for understanding and improving the Site. Technical logs are retained by Cloudflare according to its own retention periods. After these periods, data is deleted or anonymised.

We do not use advertising or cross-site tracking cookies. Our website analytics (self-hosted Umami) are cookieless and set no identifiers on your device. Our provider Cloudflare may set strictly necessary cookies that are required for security and to keep the Site functioning (for example, to detect abusive traffic or to run a bot-protection challenge). These do not require consent.

Any optional analytics that identify individuals would only be enabled with your consent where the law requires it. You can control or delete cookies through your browser settings, though disabling strictly necessary cookies may affect how parts of the Site behave.

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including hosting the Site behind Cloudflare's security infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time (for example, by using the unsubscribe link in every newsletter email). EU and UK residents may also lodge a complaint with their local data-protection authority.

California residents have the right to know what personal information is collected, to request its deletion, and to opt out of any "sale" or "sharing" of personal information — which we do not engage in. We will not discriminate against you for exercising any of these rights.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects. To exercise any right, contact us using the details below; we will respond within the timeframe required by applicable law.

The Site is not directed at children, and we do not knowingly collect personal data from children below the age of digital consent (which ranges from 13 to 16 across the EU, and is 13 in the US). If you believe a child has provided us with personal data, please contact us and we will delete it.

Questions about your privacy or your data can be sent to [email protected]. For our Terms of Use, see the Legal page.