Privacy notice

1. In short

Carthoryn has no accounts, no cookies, no analytics, no advertising and no trackers. Your game data stays in your browser. The only personal data we receive is what you choose to send us by email or through the contact form, and the basic technical records any web server keeps.

2. Who is responsible

Carthoryn is the controller of personal data described in this notice. Write to privacy@carthoryn.co.uk with any question about your data.

3. What stays on your device

Your age answer, storage choice, Base Camp settings and any pause are kept in your browser's local storage. Your ink and logbook are kept there too if you choose Accept, or only for the current tab if you choose Reject. Your current session is kept for the tab only. None of this is sent to us. The cookie and storage page lists every key.

4. What we receive

Messages: when you use the contact form we receive your name, email address, topic and message, the time you sent it, and a one-way scrambled form of your IP address used only to limit spam. When you email us we receive what you send.

Server records: like any website, our host's server logs the pages requested, the time, the browser type and the IP address, to keep the site running and secure.

5. Why we use it, and the lawful basis

We use messages only to reply to you and to deal with what you raise. Our lawful basis is our legitimate interest in answering people who contact us. We use server records to keep the site working and secure, also as a legitimate interest.

6. How long we keep it

Messages are deleted within 12 months of our last reply. Server records are deleted within 30 days unless we need them to investigate misuse of the site.

7. Who we share it with

We do not sell or share personal data for marketing. Our hosting provider processes server records and stored messages on our behalf under a written contract. We would disclose data only if the law required it.

8. Where it is handled

We aim to keep data in the United Kingdom. If a provider handles it elsewhere, we rely on UK adequacy regulations or the International Data Transfer Agreement to protect it.

9. Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, object to our use of it or ask us to restrict it. Write to privacy@carthoryn.co.uk. We reply within one month, as the law requires, and we may need to confirm your identity first.

You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would welcome the chance to put things right first.

10. Children

Carthoryn is for adults only, and we do not knowingly receive data from anyone under 18. If you think a child has sent us a message, write to us and we will delete it.

11. Changes

We will update this notice if what we do with data changes. The date at the top shows the latest version.