Privacy policy

This is a translation for your convenience. The German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Platborn Studios UG (haftungsbeschränkt) i. G.
Represented by its managing director Tobias Bodenstein
Auenstraße 11
80469 Munich, Germany
Email: [email protected]

We are currently not required to appoint a data protection officer under Art. 37 GDPR and Section 38 BDSG.

2. At a glance

This website sets no cookies and uses no analytics, tracking or advertising services.
Fonts, images, music and sounds come exclusively from our own server. No content from third parties such as Google Fonts, YouTube or social networks is loaded.
Personal data is only processed when you visit the site (server log files), sign up for the beta or write to us.

3. Hosting and server log files

This website is delivered via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare delivers the site through a global network of data centres and protects it against attacks. When any page is requested, Cloudflare automatically processes data transmitted by your browser:

IP address
date and time of access
requested address and amount of data transferred
referrer (the previously visited page), if transmitted
browser type, version and operating system

This data is technically necessary to deliver the website and serves its security and stability, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and without errors. We do not analyse this data ourselves or combine it with other data sources. Cloudflare stores it only as long as necessary for delivery and security; details can be found in Cloudflare’s privacy policy. Cloudflare sets no cookies on this website.

We have a data processing agreement with Cloudflare under Art. 28 GDPR; it is part of Cloudflare’s terms of service. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Art. 45 GDPR. The EU standard contractual clauses apply in addition.

The connection is encrypted with TLS, recognisable by “https://” and the padlock symbol in the address bar.

4. Cookies and local storage

We do not set cookies. So that the site remembers your settings, it stores four small entries in your browser’s storage:

mg-lang: the language you chose (persistent until you change it or clear your browser storage)
mg-sound: whether you turned the sound off (persistent, as above)
mg-motion: whether you reduced motion (persistent, as above)
mg-intro: whether the intro has already played in this session (deleted when you close the tab)

These entries never leave your browser and are not transmitted to us. They are strictly necessary for the functions you request; the legal basis is Section 25(2) no. 2 TDDDG. You can delete them at any time in your browser settings.

5. Fonts, images, music and links

The website uses the Tinos font, loaded from our own server; if Times New Roman is installed on your device, that font is used instead. No external font services are used. Images, card data, music and sounds are also hosted on our own server. You can turn the sound off at any time via “Sound” in the navigation; your choice is saved.

We refer to our channels on Discord, YouTube, TikTok, Instagram and Steam with plain links only. No content or scripts from these services are embedded, and no data is transmitted to them unless you click. Only when you follow a link does the respective provider process your data according to its own privacy policy.

6. Beta sign-up

If you sign up for the beta, we process your email address to give you access to the beta and to inform you by email about the beta, news about the game, the Kickstarter campaign and the Steam launch (newsletter). You give your consent by submitting the form; the notice is shown right next to the sign-up button. The legal basis is your consent under Art. 6(1)(a) GDPR. We use a double opt-in procedure: you receive an email and confirm your sign-up via a link. We log the sign-up and confirmation with a timestamp in order to be able to prove them.

For sign-up and sending we use Brevo, a service of Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France. Your address is passed from our server directly to Brevo and stored there in the EU; Brevo also sends the confirmation email. We have a data processing agreement with Brevo under Art. 28 GDPR. Brevo counts opens and clicks of our emails only anonymously, without linking them to individual recipients, so we cannot see who opened an email or clicked a link. We store your address until you unsubscribe. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by writing to us.

7. Contact by email

If you write to us, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise Art. 6(1)(f) GDPR (our interest in answering requests). We delete the data once the request has been dealt with, unless statutory retention obligations apply.

8. Your rights

You have the right at any time to:

access the data stored about you (Art. 15 GDPR)
rectification of inaccurate data (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object under Art. 21 GDPR: Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons.

A short email to [email protected] is enough. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Other

You are neither legally nor contractually obliged to provide us with personal data. Without the server log files, however, the website cannot be delivered. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

We update this policy when the website or the legal situation changes. The version published here applies.

Last updated: October 2026