RISEHAM · DATA PROTECTION

Your world.
Your data.

This page describes data used by the website and current version of the game. It will be updated before new uses are introduced.

1. Data controller

Studio Ramel is responsible for the processing described here. To exercise your rights or ask a question:

2. What we use and why

Your account

Verified email address, account ID, name if supplied by a provider, creation and sign-in dates, and account status. This data identifies you and gives you access to the game.

Signing in

Hash of the temporary link, expiry and usage dates, temporary OAuth state, and Google or Apple ID if you choose that service. Plain links are not stored in the database. We do not receive your Google or Apple password.

Your acceptance of the terms

Account ID, date, version and hash of the accepted documents to establish the applicable terms.

Your messages

Name, email, subject and message from the contact form to handle your request. Avoid including passwords, bank details or unnecessary sensitive data.

Security and email

Technical information required for sign-in, IP address and browser information processed by the infrastructure or anti-bot service. The application uses an IP or email hash to limit abuse. Delivery statuses and permanently failing addresses support reliable transactional messages.

The game

Prototype progress and preferences are stored locally in your browser in an account-specific area. Game files are cached to speed up loading. The view you consult determines which map resources are requested.

3. Legal bases and choices

Processing provides the requested service, keeps it secure, answers your messages and meets applicable obligations. Where the GDPR applies, the bases are contract performance or requested pre-contractual steps, legitimate interests in security and support, and legal obligations as relevant. Optional uses requiring consent will involve a separate choice.

You can sign in by email without linking Google or Apple. Viewing the map does not require sharing your GPS location. Creating an account or contacting us does not trigger marketing emails.

4. Providers and recipients

Data access is limited to Studio Ramel and providers necessary to operate the service. Cloudflare Turnstile checks forms and processes technical browser data for that purpose. Email delivery and asset distribution are planned through Cloudflare. Google and Apple sign-in services are contacted only when you choose them.

The map may request tiles and fonts from OpenFreeMap and the terrain provider named in the game credits when those files are not already included in the pack. These requests disclose the IP address and requested resource to the relevant server. Providers' own policies govern their processing.

Data may be processed outside Switzerland, including in the United States for some Cloudflare, Google or Apple services. Production hosting locations and contractual safeguards must be specified when commissioned. The development version runs locally; exclusively Swiss processing is not promised.

Learn more: Cloudflare, Google and Apple.

5. Retention periods

• Accounts and acceptances are kept throughout our relationship with you, then deleted on closure, except for limited retention justified by a legal duty or dispute.
• Sign-in links expire after 15 minutes and OAuth states after 10 minutes. The daily cleanup removes links expired for more than a day and OAuth states expired for more than an hour.
• Delivery metadata is removed after 90 days. Permanently failing addresses are kept as long as needed to avoid unwanted sending; you may request correction.
• Contact messages are kept in the application for at most 12 months. Follow-up email exchanges are kept while the request is handled, then for at most 12 months after closure, unless a specific legal need requires otherwise.
• Cached files and local saves remain in your browser until replaced, evicted or deleted by you. Deleting them may remove local progress.

Hosting log and backup retention periods will be specified before public opening. They must remain limited to security and recovery needs.

6. Cookies and local storage

A session cookie keeps you signed in and protects forms. An additional temporary cookie secures the Google or Apple callback. Turnstile loads on protected forms. The game uses local storage and Cache Storage for progress and assets. No advertising or audience measurement tools are currently included, so no advertising preference banner is displayed.

You can remove this data in your browser. This signs you out and may delete local progress, without automatically deleting your server account.

7. Your rights

Depending on applicable law, you may request access, rectification, deletion, restriction of processing, object to processing or obtain a copy in a usable format. You may withdraw consent for uses based on consent. Send your request to [email protected] ; proportionate identity verification may be required.

You may also contact the Federal Data Protection and Information Commissioner, or the competent authority where you live. You can submit a privacy request without creating an account, by email or using the contact form.

A cookie also remembers your language for one year. The language in the page URL takes priority.