This translation is provided as a courtesy - the German version is legally authoritative. (Impressum · Datenschutzerklärung)
Legal Notice
Information pursuant to § 5 DDG (German Digital Services Act)
Evgen Grebenyuk
Provider of the game “Fortress Fight Kingdom”
Luhnenstraße 7
30559 Hannover
Deutschland
Contact
E-Mail: [email protected]
Alternatively, you can reach us directly in the game via the feedback function in the main menu.
Consumer dispute resolution
We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Copyright and licenses
Fortress Fight Kingdom is free software under the GNU General Public License v3 (or later). The graphics, music and fonts used are freely licensed (CC0 / CC-BY / OGA-BY / OFL) - the complete list of sources can be found in the game under “Credits & Licenses”.
Privacy Policy
In short: Fortress Fight Kingdom collects as little data as possible. No tracking, no advertising, no analytics cookies, no selling of data. You play pseudonymously - you only need an email address if you voluntarily want to secure your account. The details:
1. Controller
Evgen Grebenyuk
Provider of the game “Fortress Fight Kingdom”
Luhnenstraße 7, 30559 Hannover, Deutschland
E-Mail: [email protected]
2. Hosting and server logs
The game and the game server run at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner (hetzner.com/AV/DPA_en.pdf, hetzner.com/legal/privacy-policy). When you access the game and during multiplayer, technically necessary connection data is processed (IP address, time, requested resource) to provide the service and protect it against abuse (Art. 6(1)(f) GDPR). Server logs are automatically deleted after 14 days at the latest and are not linked to your game account. You have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).
The game is delivered, and the connection to the game server is routed, through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare terminates the TLS encryption, protects against attacks (e.g. DDoS) and forwards requests to our server through an encrypted tunnel. In doing so, Cloudflare processes technically necessary connection data on our behalf (IP address, time, requested resource) (Art. 6(1)(f) GDPR). A data processing agreement including EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR for the transfer of data to the USA is in place with Cloudflare; Cloudflare is additionally certified under the EU-U.S. Data Privacy Framework (cloudflare.com/cloudflare-customer-dpa, cloudflare.com/privacypolicy).
3. Game account (pseudonymous)
On first start, a pseudonymous account is created automatically - without registration and without providing any personal data. Stored server-side are:
- a random account identifier and your (changeable) player name,
- device keys - exclusively as a cryptographic hash, never in plain text,
- game statistics (Elo rating, games, wins, match history),
- your friends list (links between account identifiers).
The legal basis is the provision of the game (Art. 6(1)(b) GDPR). The data is stored until you delete your account (see section 8).
4. Securing your account via email (optional)
You can voluntarily secure your account with an email address in order to restore it on other devices or after data loss. In that case:
- Your address is stored and used solely for account sign-in - no newsletter, no advertising.
- Sign-in links and codes are valid for 15 minutes, can only be used once and are stored server-side only as a hash.
- Dispatch is handled by our processor Resend Inc. (USA). A data processing agreement including EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR for the transfer of data to the USA is in place with Resend (resend.com/legal/dpa, resend.com/security/gdpr).
- For abuse control we log only the type and time of each email sent - no addresses, no content.
Legal basis: Art. 6(1)(b) GDPR. The address is removed when the account is deleted; securing the account with a new address completely replaces the old one.
5. Feedback (optional)
Messages submitted via the feedback function are stored with player name, game version and time in order to improve the game (Art. 6(1)(f) GDPR) - for a maximum of 14 days, after which they are automatically deleted. New feedback is delivered to our operator mailbox by email (hosted by StartMail B.V., Netherlands - privacy policy). The same applies to emails you write directly to our contact address. You may object to the processing of your feedback at any time (Art. 21 GDPR).
6. Local storage (no tracking)
The game stores your progress, settings, achievements and device key in your browser’s local storage (localStorage). This is technically required for operation (§ 25(2) TDDDG) - which is also why there is no cookie banner. No cookies or comparable techniques are used for advertising or tracking purposes.
7. Data security
We take appropriate technical and organizational measures to protect your data (Art. 32 GDPR): transmission is encrypted via TLS/HTTPS, device keys and sign-in codes are stored exclusively as cryptographic hashes, and access to the systems is restricted to the necessary minimum.
8. Recipients
Your data is not sold and not shared for advertising purposes. The only recipients are the processors named in this policy (hosting, delivery and protection of network traffic, email dispatch, operator mailbox).
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR).
- Deletion works directly in the game: multiplayer menu → “Delete account”. This deletes the account, player name, email address, device keys and friendships; match entries are depersonalized.
- For all other requests, an email to [email protected] is sufficient.
- You can also lodge a complaint with a data protection supervisory authority - the competent authority is die Landesbeauftragte für den Datenschutz Niedersachsen (lfd.niedersachsen.de).
10. Children and minors
The game is not specifically aimed at children and does not require any personal information. Communication between players is limited to predefined quips - there is no free chat.
11. Version and changes
Version: 2026-09-26. If the data processing changes, this policy will be updated; the current version is available at this address at any time.