— Legal documents

Privacy Policy

1. Data Controller

The controller of your personal data is CyfroweNiebo.pl (hereinafter: “Studio,” “we,” “controller”).

We have not appointed a Data Protection Officer — we are not required to under Art. 37 GDPR. For any data protection matter, write to the address above.

2. Scope

This policy describes how we process personal data in connection with:

3. The voivodes.com Website

3.1. No cookies, no tracking tools

The site stores no cookies or other identifiers on our side. We don't use Google Analytics, Facebook Pixel, Hotjar, or similar profiling tools.

The site uses Google Fonts to load typefaces. The CSS and font files are fetched directly by your browser from Google's servers — Google receives your IP address and HTTP headers in order to deliver the files, in accordance with its own privacy policy.

3.2. Hosting and Cloudflare Workers

The site is hosted on Cloudflare Workers — Cloudflare's serverless platform running at the network edge. Every HTTP request to voivodes.com is first handled by our short piece of code running in Cloudflare's infrastructure.

What our code does (sources are public, available in the project repository):

Our code does not store your IP address, user agent, or request bodies in any database or log on our side. We collect no telemetry of our own beyond standard HTTP. The PL/EN language switch in the navigation uses plain HTML links to / and /en/ — no cookie required, no additional data sent.

Cloudflare, as the infrastructure operator, keeps its own technical logs (IP address, user agent, request time, URL path, response code) in accordance with its privacy policy and retention policy. Purposes on Cloudflare's side: security, DDoS protection, network traffic statistics, CDN operation. Legal basis: Art. 6(1)(f) GDPR (legitimate interest — keeping the site secure and available).

We have a Data Processing Addendum (DPA) in place with Cloudflare, Inc. under Art. 28 GDPR. The agreement is the standard Cloudflare Customer DPA along with the Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to the United States.

4. Newsletter

Purpose: sending information about the Voivodes game — release dates, demo or playtest openings, behind-the-scenes notes.

Scope of data: your email address, the content of your sign-up message (if you add anything).

Legal basis:

Consent expression: sending a message to newsletter@voivodes.com — clicking the "Sign me up" button opens your mail client with a prefilled subject; confirming the send = expressing consent.

Withdrawal of consent: at any time — reply with the word "unsubscribe" to any newsletter email or write to privacy@cyfroweniebo.pl. Withdrawing consent does not affect the lawfulness of processing before it was withdrawn.

Retention period: we process your address until you withdraw consent. After withdrawal we remove the address from the list within 30 days.

Data recipients:

5. The Voivodes Game (Steam)

The game will be distributed exclusively through Steam (Valve Corporation) on computers with Windows, macOS, and Linux. We are not currently planning console or mobile versions.

5.1. Local save files

Your game progress (save states, settings) is stored locally on your computer. It contains no personal data within the meaning of GDPR and is not sent to our servers.

5.2. Steam Cloud

If you use the optional Steam Cloud synchronization, your saves are stored in Valve's infrastructure in accordance with the Steam policy. The Studio has no access to the content of those saves. Sync can be turned off in Steam settings (Steam → Settings → Cloud) or per-game (game properties → Cloud).

5.3. Crash reports and diagnostics

The game sends no telemetry or crash reports to our servers — the Studio does not run any of its own diagnostic data collection (we do not use Sentry, Firebase Crashlytics, or similar tools).

The only diagnostic data that may be collected is the standard usage statistics and crash reports gathered by Steam itself in accordance with its policy. The Studio receives only aggregated information about game stability from Valve (e.g. distribution of operating systems, crash frequency), with no ability to identify individual players. Opting out of the Steam Hardware & Software Survey is available in the Steam client settings.

5.4. Data at the Steam level

Steam collects its own data (purchase, install, playtime, achievements, ratings, reviews) in accordance with the Steam Privacy Agreement. The Studio receives only aggregated statistics from Valve (number of copies sold, aggregate demographics, reviews). We have no access to your personal data in identifiable form — unless you voluntarily contact us using your personal data.

6. Transfers to Third Countries

Some of our providers are based outside the European Economic Area:

7. Your Rights

You have the right to:

To exercise your rights, write to privacy@cyfroweniebo.pl. We respond within 30 days of receiving a request (Art. 12(3) GDPR).

8. Complaint to a Supervisory Authority

If you believe we process your data unlawfully, you have the right to lodge a complaint with the President of the Polish Personal Data Protection Office:

Residents of other EU member states may file a complaint with their local supervisory authority.

9. Data Security

We use technical and organizational security measures proportionate to the scale of processing: HTTPS encryption on the site, restricted access to the newsletter mailbox, separation of production environments. We cannot, however, guarantee absolute security of transmission over the internet — if you notice an incident involving your data, let us know.

10. Policy Changes

We may update this policy, for example after rolling out new game features or changing infrastructure providers. The date of the last update is shown at the top of the document. We notify newsletter subscribers of material changes by email at least 14 days in advance.

11. Contact

For any data protection matter:

← Back to home