Cookie Policy

This cookie policy explains which cookies and similar storage technologies we use on this website, for what purposes, and what choices you have. The controller within the meaning of the General Data Protection Regulation (GDPR) is Linus van Doren, Schönleinstraße 8, 10967 Berlin, Germany. Further details about the controller can be found in our imprint (Impressum).

If you have questions about data protection or this policy, you can reach us at linus@nosedivestudio.com.

Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your browser on your next visit, maintain sessions, or remember preferences. In addition to cookies, we use your browser’s local storage — a local store whose contents, unlike cookies, are not automatically transmitted to the server but remain solely on your device until deleted by the website or by you.

Legally, cookies and comparable storage technologies (including local storage) are treated alike: storing information on your device and accessing it are governed by § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Storing information on your device and accessing it is governed by § 25 TDDDG: as a rule, this requires your consent (§ 25 (1) TDDDG). No consent is required where storage or access is strictly necessary to provide a digital service you have explicitly requested (§ 25 (2) no. 2 TDDDG) — this applies to the necessary cookies and storage entries listed below.

Any subsequent processing of personal data is governed by the GDPR. Where we process data based on your consent, the legal basis is Art. 6 (1) (a) GDPR. Where processing is necessary to perform a contract or pre-contractual measures (e.g. login and session management), it is based on Art. 6 (1) (b) GDPR. Where we pursue a legitimate interest (e.g. the technically reliable provision of the website), the legal basis is Art. 6 (1) (f) GDPR.

On your first visit we show you a cookie banner. Using equally prominent buttons, you can accept all consent-based categories, reject them all, or make a per-category selection (analytics, marketing) via “Settings”. Necessary cookies and storage entries are exempt from the banner because the website does not work without them.

As long as you have not made a decision, no consent-based cookies are set and no such services are loaded. You can change or withdraw your decision at any time via the “Cookie settings” link in the footer or the button in this policy.

If we materially change our use of cookies (e.g. by adding new services), we increase the version number of the stored consent. You will then be asked for your decision again on your next visit.

Your decision is stored in your browser’s local storage under the key “twa-cookie-consent” (JSON with the fields categories, timestamp and version).

The following cookies and storage entries are strictly necessary to operate the website. They enable core functions such as login, session management, language preference, and storing your cookie decision. The legal basis is § 25 (2) no. 2 TDDDG and, where personal data is processed, Art. 6 (1) (b) or (f) GDPR. No consent is required for these, and they cannot be disabled, as the website would not function without them.

We currently do not use any analytics services (e.g. audience measurement or usage statistics). No analytics cookies are set.

The “Analytics” category is nevertheless provided for in our cookie settings: should we introduce an analytics service in the future, it will only be loaded after your prior consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). We will then update this policy and ask for your consent again.

We currently do not use any marketing or tracking services (e.g. advertising networks, conversion measurement, or remarketing). No marketing cookies are set.

The same applies here: should marketing services be added in the future, they will only be loaded after your prior consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), and this policy will be updated accordingly.

Our landing page and the game map embed interactive maps whose map tiles are loaded from CARTO (CartoDB Inc.) via basemaps.cartocdn.com. When the map loads, your IP address and user agent are, for technical reasons, transmitted to CARTO’s servers; this may involve a transfer to third countries (in particular the USA), safeguarded by EU standard contractual clauses. CARTO does not set any cookies in this process. The legal basis is our legitimate interest in displaying the map (Art. 6 (1) (f) GDPR). More information: https://carto.com/privacy.

The in-game location search may send search terms to the Nominatim service of the OpenStreetMap Foundation (United Kingdom) when the list of places loaded with the scenario returns too few results; clicking an empty spot on the game map sends that point’s coordinates to display the corresponding address. Your IP address and browser identifier are transmitted; no cookies are set. Details can be found in our privacy policy.

The fonts used on this website are embedded locally (self-hosted via next/font). No connection to servers of Google or other font providers is established when you visit the site.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the website, Vercel processes technically necessary connection data (in particular IP address, date and time of access, requested page, user agent) in server logs. Content is served via EU edge locations where possible; a transfer to the USA cannot be ruled out and is safeguarded by EU standard contractual clauses (Art. 46 (2) (c) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. The legal basis is our legitimate interest in the secure and reliable provision of the website (Art. 6 (1) (f) GDPR).

Authentication and application data are processed via Supabase; a data processing agreement pursuant to Art. 28 GDPR is in place with Supabase as well. More information: https://supabase.com/privacy.

The retention period of each cookie and storage entry is listed in the table in section 5. Session cookies are deleted when the session ends or you log out; persistent entries remain until the stated period expires or you delete them yourself. Local storage entries (including your cookie decision) remain stored until you remove them via your browser settings or change your decision.

You can inspect and delete cookies and local storage contents at any time in your browser settings. Please note that the website will not work, or will work only to a limited extent, without the necessary cookies.

You can withdraw any consent you have given at any time with effect for the future, or change your selection. To do so, open the cookie settings via the button below or the “Cookie settings” link in the footer. The lawfulness of processing carried out before the withdrawal remains unaffected (Art. 7 (3) GDPR).

You also have the rights under Art. 15 to 21 GDPR: the right of access to the personal data concerning you, and the rights to rectification, erasure, restriction of processing, data portability, and objection to processing based on Art. 6 (1) (f) GDPR. To exercise your rights, an informal message to linus@nosedivestudio.com is sufficient.

Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged infringement. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, https://www.datenschutz-berlin.de. An overview of all German supervisory authorities is available at https://www.bfdi.bund.de.