Privacy

Controller

Night Haven Interactive
Owner: Michael Schulze
Meyerdamm 36
28876 Oyten
Germany

Our own server and connection data

We operate the website and email service on our own dedicated server in Germany. The server processes your IP address, date and time, requested address, data volume, HTTP status and, where provided, referrer, browser and operating system information.

This serves delivery, secure operation, troubleshooting and prevention of abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and functioning website. Technically necessary connection data is required to retrieve a page.

Access, error and PHP logs are rotated weekly, with five older logs retained. With regular rotation this corresponds to approximately five to six weeks. Relevant extracts concerning a specific security incident may be preserved separately until it is resolved and, where necessary, for legal proceedings.

Server-side access statistics (AWStats)

AWStats is configured on our own server to analyse access logs. It evaluates page requests, browsers, operating systems and referring pages, among other information. IP addresses and hostnames obtained through DNS lookups may be processed. No cookies or external browser analytics scripts are used for this. The legal basis is Art. 6(1)(f) GDPR, based on our interest in assessing reach and technical usage.

Monthly statistics files are stored separately from the server logs described above, on our own server, and are intended for administrative access only.

Contact by email

We process your email address and the information you provide to answer enquiries. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual matters; otherwise Art. 6(1)(f) GDPR based on our interest in handling your enquiry. Providing information is voluntary; without a reply address we cannot respond by email.

Ordinary enquiries are deleted once resolved unless further clarification is needed. Contract-related correspondence may be kept to establish or defend claims until the end of the third calendar year following closure of the matter. Documents subject to statutory commercial or tax retention duties are kept for the period applicable to that document type.

Language selection and external links

The language follows the page requested and your selection. No external IP or country lookup takes place. Only when you use the language selector yourself do we store the preference in local storage under “warstead-language-manual”. It remains until you change your choice or clear website data in your browser. It serves only the requested language function (Section 25(2)(2) TDDDG; Art. 6(1)(f) GDPR). Selection via the page address remains possible when browser storage is blocked.

Fonts, images, icons and translation files are served locally. No advertising or tracking cookies are set. External services such as Steam are linked; a connection to their provider is made when you open a link. Legal documents and newsletter signup are offered in German and English.

Newsletter: consent and withdrawal

For the Warstead newsletter from Night Haven Interactive, we need your email address and confirmation that you are at least 16. We do not collect your name, country or age group. We store the form language, signup and confirmation times, consent version and, where applicable, unsubscribe time. The newsletter contains development updates, game content and announcements about Warstead. Sending it is based on Art. 6(1)(a) GDPR in conjunction with Section 7(2)(2) UWG.

The address is activated only after confirmation of the email link (double opt-in). The link is valid for 48 hours. Unconfirmed entries are then deleted; daily maintenance removes them within a further 24 hours at the latest. To limit abuse, an IP verification value calculated with a secret key is considered for one hour and removed by the next maintenance run, within a further 24 hours at the latest. The basis is Art. 6(1)(f) GDPR and our interest in preventing automated subscriptions. Server logs have the separate retention period above.

Consent is voluntary. You may withdraw it with future effect at any time using the unsubscribe link or by writing to newsletter@warstead.com. Sending newsletters stops when you unsubscribe. The lawfulness of earlier processing remains unaffected.

Necessary consent and withdrawal records are kept separately from active recipients until the end of the third calendar year following withdrawal. This serves the defence of possible claims and evidence of lawful mailing (Art. 6(1)(f) GDPR). They are then deleted by daily maintenance and are not used for further advertising.

Steam key promises independent of the newsletter

For a promised key, we store the email address, confirmation time, position, language and promotion terms version in a separate promotion list. This serves fulfilment of the promise under Art. 6(1)(b) GDPR. Unsubscribing does not cancel an already confirmed entitlement. Later key delivery does not subscribe you to the newsletter again.

Unfulfilled promises remain stored until fulfilled. After documented delivery, necessary evidence is kept until the end of the third calendar year following fulfilment to defend possible claims under Art. 6(1)(f) GDPR, and then removed by daily maintenance. For corrections, deletion requests or an outstanding promise, contact newsletter@warstead.com. Any necessary continued retention will be explained individually. The promotion terms apply.

Recipients and transfers

Access is limited to people responsible for operations, enquiries or promotion fulfilment, to the extent necessary. The website and email sending run on our own server in Germany. Your chosen receiving provider also processes email sent to you. We do not sell addresses or pass them to other businesses for their advertising.

Authorities or other recipients receive data where required by law. The website does not embed external geolocation, external font services or advertising networks. Voluntarily opening external links may result in processing outside the EEA under the respective provider’s terms.

Your rights and objection

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation. You may object to direct marketing at any time without giving such reasons. Consent may be withdrawn at any time with future effect. Contact info@warstead.com.

Technical allocation of promotion places follows the order of valid confirmations; you may ask us to review uncertainties.

Complaints and updates

You may complain to a data protection supervisory authority, particularly where you habitually reside, work or where the alleged infringement occurred. The State Commissioner for Data Protection of Lower Saxony is responsible for our place of establishment.

We update this policy when processing changes. An update does not replace any required new consent.