Privacy Policy

1. Who is responsible

The controller under the GDPR is Igor Tverdokhleb, Barkentinenstr. 20, 23558 Lübeck, Germany, who develops and runs Castle Lanes. Contact: [email protected]. See also the imprint.

2. Visiting castle-lanes.com

The website is a set of static pages served from our servers at IONOS Cloud in Frankfurt, Germany. Requests pass through Cloudflare, which provides DNS, encryption (TLS) and protection against attacks.

To deliver a page, Cloudflare and our web server necessarily process your IP address, the requested address, date and time, the referring page, and your browser's user agent. Our web server writes these technical access entries to its container log, which is rotated automatically and not analysed. We do not combine this data with other sources.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is delivering the website securely and reliably.

Fonts, images and scripts come from castle-lanes.com itself. The only exceptions are the trailer and download files from downloads.castle-lanes.com (section 4) and the statistics script (section 3), both operated by us.

3. Website statistics (Umami)

To see how many people visit the site and which content works, we use Umami, an open-source analytics tool that we host ourselves at analytics.hansa.chat on IONOS Cloud in Germany. No data goes to third parties.

Umami records:

• the pages you view, including campaign parameters in the address;
• the site you came from;
• browser, operating system, device type, screen size and language;
• your country, derived from the IP address at the moment of the request;
• clicks on download buttons, and when you start the trailer.

Umami does not set cookies and does not store your IP address. To tell visits apart it uses a one-way hash of the connection and browser data with a salt that changes regularly, so visitors cannot be followed over time or across other websites. We use the statistics only in aggregate.

If your browser sends a “Do Not Track” signal, the script records nothing. You can also object at any time by email (section 8).

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is understanding which parts of the site help players find and download the game. The data is kept for as long as it is needed for these statistics.

4. Downloads and the trailer

The launcher installer, the game files, the version manifests and the trailer video are stored with Cloudflare R2 and served from downloads.castle-lanes.com. When you download a file or play the trailer, Cloudflare processes your IP address, the requested file, date and time and your user agent to deliver it.

Legal basis: Art. 6(1)(b) GDPR (you ask us to provide the file) and Art. 6(1)(f) GDPR (secure delivery).

5. The launcher

The Castle Lanes launcher contacts only downloads.castle-lanes.com: it checks for launcher and game updates and downloads them. Those requests are processed as described in section 4. The launcher does not send us any data about you or your computer.

It stores on your computer, in %LOCALAPPDATA%\CastleLanes: the installed game versions, the player name you entered, and two log files (the launcher's own and the game's output from the last start). This data stays on your device unless you send it to us yourself, for example a log file in a support request. Uninstalling the launcher and deleting that folder removes it.

On Windows the launcher also sets the per-app graphics preference for the game to “High performance”, unless you already chose one, so laptops run the game on their dedicated graphics card. You can change it in Windows Settings › System › Display › Graphics.

6. Playing online

Matches run on our game server eu-1.castle-lanes.com at IONOS Cloud in Frankfurt, Germany. To let you play, the server processes:

• your IP address and port, needed to send the game to your computer. They are held in memory for the session. They are written down only when a malformed network packet arrives, in the server's technical log, which is rotated automatically;
• the player name you chose. Other players in the lobby and in your match see it. It does not have to be your real name;
• match data: lobby and team, race, buildings, units, actions, results and timestamps, together with the player names of everyone in the match. It is kept as a match log and a replay.

We keep match logs and replays to balance the game and fix bugs. Match logs go to the logging service of IONOS Cloud in Germany and are deleted there automatically after 30 days. Replays stay on the game server and are deleted automatically after 90 days.

Legal basis: Art. 6(1)(b) GDPR for running the match you joined, and Art. 6(1)(f) GDPR for balancing and debugging. Our legitimate interest is a fair, working game.

7. Service providers and transfers

• IONOS SE, Montabaur, Germany: cloud hosting of the website, the game server and the statistics, and storage of the game server's logs. We have a data processing agreement with IONOS under Art. 28 GDPR.
• Cloudflare, Inc., San Francisco, USA: DNS, TLS, protection, and storage and delivery of downloads. We have a data processing agreement with Cloudflare. Cloudflare is certified under the EU–US Data Privacy Framework, and the EU Standard Contractual Clauses apply as well.

We do not sell personal data, show advertising, or pass data to anyone for marketing.

8. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to [email protected].

We usually cannot tell which statistics or log entries belong to you, because we hold no identifying data. To find your match logs, tell us your player name and roughly when you played.

You also have the right to complain to a data protection supervisory authority. The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Kiel.

9. Everything else

You do not have to provide any personal data to visit the website. Playing online needs a player name and an internet connection to the game server. We do not use automated decision-making or profiling.

We will update this policy when the game or our setup changes. The date at the top shows the current version.