Privacy policy
Last updated: 2026-10-06
This policy explains what personal data the server of the game Under the Static (and its light version) keeps, for how long, why, and how you can exercise your rights. The rule is to keep as little as possible.
Who is responsible
- Data controller
- Marco Morais (a título pessoal)
- Contact
- gdpr@underthestatic.com
- Server hosting
- 100Limite, Portugal
What is kept
| What | For how long | Why (legal basis) |
|---|---|---|
| Support message: category, text, nickname (optional), version, tone, language and the game's support code | While open; deleted when closed | Answering your request (consent given when sending) |
| Reply email (optional), encrypted | Same | Only to reply, if you asked (consent) |
| Error report: cleaned message and stack, version, summarised browser, act and day, game options | While open; deleted when closed | Fixing game errors (consent) |
| Game save attached to a report (optional) | Same | Reproducing the error (separate consent) |
| Supporter: platform, platform identifier (only as a non-reversible pseudonym), tier and dates | While you support and until you ask for deletion | Delivering support rewards (performance of the support agreement) |
| Personal supporter code (only a hash; the code itself is not kept) | Until revoked or the supporter is deleted | Identifying supporters without accounts or email |
| Nickname in the credits and the date of consent | Until you withdraw consent | Public credits (consent, which you may withdraw at any time) |
| Name proposed for the Ark (reward) | Until decided; the approved one stays in the game | Delivering the reward (performance of the support agreement) |
| Name suggestions (the suggested name, linked to the supporter until moderation) | Until the round is deleted; if the supporter is deleted, the suggestion becomes anonymous | Delivering the reward (performance of the support agreement) |
| Votes in naming rounds: only a pseudonym of the voter (never the code or the email) | Until the round closes; afterwards only the counts remain | Ensuring one vote per supporter (performance of the support agreement) |
| Notifications from support platforms: only a reference to avoid processing twice (no name or email) | 30 days | Operation and security (legitimate interest) |
| Daily IP pseudonym (non-reversible; changes every day) | Counters: 2 days. Failed logins: 24 h. Logs: 30 days | Security: limiting abuse (legitimate interest) |
| Security and audit logs (events, no content or emails) | 30 days | Security and accountability (legitimate interest) |
| Act key requests: only counts per day, version and act | 90 days | Detecting abuse (legitimate interest) |
| Refused act key requests: reason, version, act, support code and daily IP pseudonym | 30 days | Helping you when you contact support (legitimate interest) |
What is never kept
- your IP address in clear;
- the full browser user-agent;
- tracking, advertising or player statistics cookies;
- supporters' email addresses (see «Supporters»);
- message contents in logs or in email notifications.
When the game contacts the server
- on the title screen, to read the signed configuration (can be turned off in the options);
- when opening «Support» and viewing the credits;
- when sending a message or an error report;
- when requesting or renewing the act keys.
Supporters
- When you support on Ko-fi, Patreon or another platform, the platform notifies the server. Only a non-reversible pseudonym of your identifier, your tier and the dates are kept.
- You receive a personal code. It is personal and non-transferable: do not share it. Only a hash is kept. It can be revoked and you can ask for a new one.
- If the platform sends your email, it is used only to send you the code, once, and it is not kept.
- With the code, the supporter page shows the test builds, the naming rounds (vote and suggest) and your credits. The page uses no cookies and does not keep the code.
- You only appear in the credits if you consent in the game, with your code and a nickname of your choice. You can withdraw consent the same way; the nickname disappears from the next credits release.
- Payment is handled by the support platform, under its own privacy policy. The server never sees payment data.
Your rights
- access: to know what data exists about you and get a copy;
- rectification of inaccurate data;
- erasure ("right to be forgotten");
- restriction of, and objection to, processing based on legitimate interest;
- portability (a machine-readable copy, JSON);
- withdrawing consent at any time, without affecting what was done before;
- complaining to a supervisory authority (in Portugal, the CNPD, www.cnpd.pt, or the one in your country).
How to exercise your rights
- In the game or on the website, under «Contact», choose the «Privacy» category, or write to the contact above.
- As there are no accounts, tell us how to find you: your personal supporter code, the platform and the identifier or email you use there (only for the search; not kept), or the reference of the message you sent.
- You will get an answer within one month. The request and the answer are not kept with personal data.
Other information
- There is no automated decision-making or profiling.
- Data stays on the server named above. Support platforms have their own policies.
- The administration panel uses a session cookie for the administrator only; players get no cookies.
- If this policy changes, the date above changes, and changes that need new consent are asked for in the game.