Privacy notice

Who controls your data

The controller of your personal data is Filip Brankiewicz, who runs Grimveld as a sole proprietor (jednoosobowa działalność gospodarcza) in Poland.

For anything about your personal data, write to prywatnosc@grimveld.pl.

What we collect

• your email address,
• the character name you reserve,
• the language of the page you sign up on (Polish or English),
• a creator's referral code, if you enter one,
• whether you agreed to emails about the launch,
• when you signed up and when you confirmed your email,
• the version of this notice in force when you signed up.

We don't store your IP address with your sign-up. The site runs on Cloudflare's network, which processes IP addresses and basic technical data in short-lived logs to protect the site from attacks and abuse.

Why we use it and on what legal basis

• Reserving your character name and handling your sign-up, including the email with the confirmation link: at your request, to provide the pre-registration you asked for (art. 6(1)(b) GDPR).
• Emails about the Grimveld launch, meaning reminders before launch and the launch announcement: only if you tick the box for them when you sign up (art. 6(1)(a) GDPR and Polish electronic-communications law). This consent is voluntary and not a condition of the reservation. You can withdraw it at any time; that doesn't affect what we did before.
• Crediting your sign-up to the creator whose referral code you entered, and settling the referral programme: our legitimate interest (art. 6(1)(f) GDPR).
• Protecting the site from abuse, such as mass sign-ups: our legitimate interest (art. 6(1)(f) GDPR).

How long we keep it

• An unconfirmed sign-up is deleted after 7 days and its name released.
• A confirmed sign-up is kept until 6 December 2026, 30 days after the latest possible Season 1 launch date. If you create a game account before then, the reserved name moves to your account, and a separate privacy notice covers account data.
• If you withdraw consent to launch emails, we stop sending them and your reservation stays. If you ask us to erase your data, we delete your sign-up sooner.
• Cloudflare keeps its technical logs briefly, under Cloudflare's own rules.

Who processes it for us

Only service providers that process data on our behalf under data processing agreements:

• Cloudflare, Inc. (USA): website hosting and attack protection,
• Supabase, Inc. (USA): the sign-up database, on servers in Frankfurt (EU),
• Brevo (Sendinblue SAS, France): sending emails.

Cloudflare and Supabase are US companies. If your data leaves the European Economic Area, it is protected by the European Commission's standard contractual clauses or by certification under the EU-U.S. Data Privacy Framework.

The creator whose code you enter never gets your data, only the number of sign-ups with their code. We don't sell data or share it with advertisers.

Your rights

You have the right to:

• access your data and get a copy of it,
• have it corrected,
• have it erased,
• restrict its processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw your consent at any time.

To use these rights, write to prywatnosc@grimveld.pl from the address you signed up with.

You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

Do you have to give us this data

Giving your email and a character name is voluntary, but without them you can't reserve a name. The referral code and the consent to launch emails are optional.

Pre-registration is for people aged 16 or over.

Profiling and cookies

We make no automated decisions about you and don't profile you. The site uses no analytics or advertising cookies.

Changes to this notice

If we change this notice, we publish the new version here with a new date. Every sign-up records which version was in force.