How Vardrenn handles your data.

Who is responsible

Vardrenn is developed by Joost Rijksen, who is responsible (the controller) for the personal data described on this page.

For any privacy question or request, email privacy@vardrenn.com.

Visiting the website

vardrenn.com is hosted by STRATO. Like most web servers, STRATO’s servers record visitors’ IP addresses in log files for security purposes, such as detecting and defending against attacks. STRATO states that these IP addresses are kept for a maximum of 7 days.

The website uses no advertising or cross-site tracking tools. It sets no cookies of its own and does not store anything in your browser. Its pages, images and scripts are served from vardrenn.com, except the website statistics script and the Cloudflare Turnstile check described below.

The Founding Tester application

When you apply to become a Founding Tester, we store:

• your email address;
• the platform you will mainly play on (Desktop, iPhone or Android);
• your Discord username;
• whether you have played persistent online strategy games before, if you answer;
• what interests you most about Vardrenn, if you answer;
• when the application was created and last updated.

We use this only to assess your application, select Founding Testers, and contact and organise the participants of the Vardrenn Founding Test, including sending selected applicants an invitation to the private Vardrenn testing Discord with instructions.

When a new application has been stored, our application service sends us one notification email so that we know it has arrived. That email contains your email address, the platform you chose, your Discord username and the time of the application. Your answers about strategy games and what interests you about Vardrenn are not included; they stay in the application database. The notification is delivered through Resend, described under Services involved.

The application is not a newsletter or mailing list. We do not use it for marketing, and we do not sell your data.

Our application database does not store your IP address, browser or device details, or any of the Turnstile signals described below. Only one application per email address is kept for each Founding Test; applying again does not change the first one. To correct your details, email us.

Why we may use your application

We process Founding Tester applications on the basis of our legitimate interest in selecting, contacting and organising suitable participants for the Vardrenn Founding Test (Article 6(1)(f) GDPR).

We rely on this because the Founding Test is a real, current part of Vardrenn’s development; the application asks only for the limited information needed to assess and contact applicants; applying and taking part are voluntary; the data is not used for marketing; it is kept for a limited time; you can ask us to delete it; and when you apply you can reasonably expect your answers to be used to assess and administer your application.

You can object to this processing at any time by emailing privacy@vardrenn.com. We will then withdraw and delete your application.

Bot protection (Cloudflare Turnstile)

When the application form is open and you reach it, your browser loads Cloudflare Turnstile to check that the form is used by a person rather than a bot. We use it because of our legitimate interest in protecting the application form and the website against bots, spam and automated abuse.

To do this, Turnstile processes security signals from your browser and connection, including your IP address, TLS fingerprint and User-Agent header, together with our site key and the website the check runs on. Cloudflare states that it processes these signals as our processor when it protects our website, and that it may separately act as controller when it uses this processing to improve Turnstile. See Cloudflare’s privacy policy.

Turnstile gives the form a one-time token. Our application service checks that token with Cloudflare and then discards it. Neither the token nor the Turnstile signals are stored with your application.

Website statistics (Umami)

To understand how the website is used and whether our search for Founding Testers reaches people, we use Umami Cloud, a website statistics service. Your browser loads a small script from cloud.umami.is that counts page visits and a few interactions on the site: opening the trailer, choosing a Founding Tester button, starting the application form, and the outcome of sending it (for example accepted, or not sent because the verification failed). With a visit it records the page address, including any campaign or referrer information in the link you used to reach us, the website you came from, your browser and device type, screen size, language and the country derived from your IP address.

Nothing from the application form is sent to Umami: not your email address, Discord username, platform or answers, and no application identifier. Our statistics use no cookies and store nothing in your browser. Umami states that it collects no personally identifiable information, anonymises the data it collects and does not track you across websites. See Umami’s privacy policy.

We do this because of our legitimate interest in understanding how vardrenn.com is used and in improving the website and the recruitment of Founding Testers.

Services involved

• STRATO hosts vardrenn.com, as described above.
• Supabase runs the application service and database. Our project is deployed in Supabase’s West EU region in Ireland, so the application database is hosted there. Supabase states that data assigned to a region is stored and primarily processed in that region. Its data processing agreement covers its subprocessors and international transfers, including EU Standard Contractual Clauses where applicable, so some processing outside the European Economic Area cannot be ruled out.
• Cloudflare provides the Turnstile bot protection described above.
• Umami Cloud provides the website statistics described above.
• Resend delivers the notification email about your application to a Vardrenn mailbox. To do this, Resend processes the contents of that email: your email address, the platform you chose, your Discord username and the time of the application. See Resend’s privacy policy.
• Email. Invitations for the first Founding Test are sent manually from a Vardrenn email address. The email service that handles that mailbox processes your email address and our messages to deliver them.

Discord

Discord only becomes relevant if you are selected. Selected Founding Testers receive a private invitation to the Vardrenn testing server on Discord and can choose whether to join.

Discord processes your data independently under its own privacy policy; we do not control that processing. For users in the European Economic Area, Discord states that Discord Netherlands B.V. is the controller of personal data collected through Discord, that data may be processed in the United States and other countries, and that it relies on transfer mechanisms such as the EU-U.S. Data Privacy Framework and EU Standard Contractual Clauses where applicable. See Discord’s privacy policy.

Within the private testing server, Vardrenn can see your Discord username and what you post there.

How long we keep your application

• If you are not selected, your application is deleted no later than three months after the Founding Test phase ends.
• If you are selected, it is kept while you take part as a Founding Tester, and deleted no later than three months after your participation ends.
• It is deleted sooner if you ask us to and a valid deletion request applies.

Age

Founding Testers must be 16 or older. The application is not intended for anyone under 16. If you believe someone under 16 has applied, email privacy@vardrenn.com and we will delete the application.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, withdraw your application, or object to how we use it. Email privacy@vardrenn.com from the address you applied with, so we can confirm the application is yours.

If you are unhappy with how we handle your data, you can complain to the data protection authority in your country. In the Netherlands this is the Autoriteit Persoonsgegevens.

Changes

When this notice changes, we update this page and the date at the top.