Privacy Policy for Emberfall

TODO: Draft – have it reviewed and replace the placeholders before publishing.

Protecting your data matters to me. This policy describes which data Emberfall processes.

Controller

[First and last name]
[Address]
Email: [email address]

Data processed

The game's own privacy policy

Emberfall has its own detailed privacy policy: emberfall.schoitsch.net/datenschutz. It is authoritative for the game.

In short:

• Stored: email address, player name, password hash, the IP address at sign-up, timestamps and game data.
• No tracking, no third-party scripts or fonts, only technically necessary cookies (session, "remember me").
• The sign-up IP is deleted after 30 days, as are old notifications and chat messages.
• Data export (JSON) and account deletion are available in the settings at any time; deleted accounts are anonymised.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Contact me at the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. [competent authority].

Changes

This privacy policy is updated when the app or the legal situation changes.

Last updated: [date]