Website Privacy Policy

1The Short Version

The Website is a static page about the studio and its games. It has no accounts, no login, no forms, no newsletter, no shop and no comment section, so there is very little for it to know about you.

2Who Is Responsible

For the purposes of applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), RTForge is the controller responsible for the processing described in this Privacy Policy.

RTForge is an independent game studio based in Bratislava, Slovakia. It is currently operated by an individual developer and is not a separate incorporated company.

You can reach us at rtforgestudio@gmail.com with any question about this policy or to exercise your data protection rights.

3What This Policy Covers

This policy applies to the Website at rtforge.eu and to email you send us at the address above.

It does not cover:

• playing our games, including any online services they provide — each game has its own privacy policy, linked from that game’s section on this site and from its store page;
• the stores our games are sold through, together with the store pages and community features they host — today that means Steam, where Valve Corporation processes personal data under its own privacy policy;
• any other website you reach by following a link from here.

4Hosting and Server Logs

The Website is hosted on Cloudflare Pages, operated by Cloudflare, Inc., and delivered through Cloudflare’s global network.

Serving a web page is not anonymous by nature: to send the page to your browser, our host necessarily receives the request, which includes your IP address, the address of the page requested, your browser’s user agent string, and the time of the request. Cloudflare processes this to deliver the Website and to keep it available and secure — for example to absorb denial-of-service attacks and block abusive traffic.

Cloudflare acts as our processor for this and is bound by its data processing terms. RTForge does not maintain its own server log of visitors, and we do not build a database of visitors’ IP addresses.

5Website Analytics

We use Cloudflare Web Analytics to understand in general terms how the Website is being used — roughly how many people visit, which pages they open, and which sites they arrive from.

The measurement is carried by a small script that your browser loads from Cloudflare (static.cloudflareinsights.com) when the page opens. Cloudflare uses the request’s IP address and user agent momentarily to derive coarse, non-identifying information — such as the country, the browser family and the device type — and to distinguish one visit from another. What we see is aggregated statistics. We cannot single you out from it, and we do not attempt to.

We do not use Google Analytics or any advertising or profiling platform on the Website.

6Cookies and Local Storage

The Website sets no cookies of its own, and in normal use it stores nothing on your device.

The one exception is a developer tool. Opening the Website with #debug in the address reveals a panel we use to tune the 3D scene, and that panel remembers its settings in your browser’s local storage. It is a technical convenience for development, it holds no personal data, it never leaves your browser, and it is not reached in ordinary use of the Website.

Third-party content embedded in the Website may set cookies of its own once it is loaded — see the next section.

7Embedded Game Media

Where the Website presents one of our games, it shows that game’s trailer and screenshots. Those files are not stored on our servers: they are the ones the game’s store serves for its own store page, loaded directly from the store’s content delivery network. Every game currently on the Website is distributed on Steam, so in practice this means Valve’s network — domains under steamstatic.com, delivered by Akamai.

This means that when that part of the page loads, your browser makes a request to the store’s content delivery network, and that request necessarily discloses to the store operator and its delivery provider your IP address, your user agent, and the fact that you were on rtforge.eu. The store operator may also set its own cookies in the process. That processing takes place under that operator’s privacy policy, not ours, and we have no access to it.

The trailer itself is set not to preload: the video is only fetched once you press play. The preview images are loaded with the page.

We embed this media so a game can be seen where it is described, rather than only behind a link. If you would rather not have your browser contact the store’s servers, a content blocker or an equivalent browser setting will prevent it.

8Fonts and Other Assets

The Website’s typeface, styles, scripts and 3D models are served from rtforge.eu itself.

Beyond the game media described in section 7 and the analytics measurement described in section 5, the Website loads no advertising tags, no social media widgets and no tracking scripts.

One small script does not come from us: our host rewrites the email addresses on the page so that automated address harvesters cannot read them, and adds a script that restores them for you. It is served from rtforge.eu along with everything else, it runs only to make the email links work, and it collects nothing.

9Links to Other Websites

The Website links to external places, such as the store pages where our games are sold. Once you follow such a link you are on someone else’s service, governed by their privacy policy. We are not responsible for how they handle your personal data, and we encourage you to read their policies.

10Email and Business Enquiries

The Website invites you to write to us — about the games, about client work, or about anything else. It does this with a plain email link rather than a form, so nothing is submitted through the Website itself.

If you do write to us, we process what your message contains: your email address, your name if you give it, and anything else you choose to include. We use it to read and answer your message, to carry the conversation forward, and to keep a reasonable record of correspondence.

Our mailbox is hosted with Google (Gmail), which processes the message as part of providing the email service.

We keep correspondence for as long as it remains useful for the purpose it was sent for, and for administrative record-keeping. If you would like a conversation deleted, write to us and we will consider and process the request in accordance with applicable law.

11Legal Bases for Processing

Under Article 6 of the GDPR, we rely on the following:

Legitimate interests — Article 6(1)(f)

• delivering the Website to your browser and keeping it available and secure;
• understanding in aggregate how the Website is used, so we can improve it;
• presenting our games with their own trailer and screenshots;
• reading and answering the messages people send us.

In each case we have weighed the effect on you. The processing is limited to what serving a page and counting visits requires, produces no profile of you, and is not used to make decisions about you.

Legal obligation — Article 6(1)(c)

Where the law requires us to keep or disclose certain information, we do so.

Steps prior to a contract — Article 6(1)(b)

Where your message is an enquiry about working together, we process it in order to respond and to take steps at your request before entering into a contract.

12Data Retention

• Request and security logs are held by our host for the short periods set by its own retention practice. We do not keep our own copy.
• Analytics exists only as aggregated statistics, which are retained while they remain useful for operating and improving the Website.
• Email is kept for as long as reasonably necessary for the correspondence and for administrative purposes.

When personal data is no longer necessary for the purpose it was collected for, we delete or anonymise it, subject to any legal obligation to retain it.

13International Data Transfers

Some of the providers involved in the Website are established outside the European Economic Area, or operate global networks that may process data outside it — in particular Cloudflare, Valve and Google.

Where such a transfer takes place, the provider is responsible for applying the safeguards required by Chapter V of the GDPR to its own processing, typically the European Commission’s Standard Contractual Clauses together with supplementary measures, or an adequacy decision where one applies.

To be concrete about what this means for the Website: Cloudflare serves it from whichever point of presence in its global network is nearest to you, which may be outside the European Economic Area. We do not restrict delivery to a particular region.

14Your GDPR Rights

If the GDPR applies to you, you have the following rights, subject to the conditions and exceptions the law provides:

• Right of access — to ask what personal data we hold about you and receive a copy.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to have your data deleted where the law provides for it.
• Right to restriction — to have processing restricted in certain circumstances.
• Right to data portability — where applicable, to receive your data in a structured, commonly used, machine-readable format.
• Right to object — to object to processing based on our legitimate interests, on grounds relating to your particular situation.

To exercise any of these rights, write to rtforgestudio@gmail.com. We may ask for information to confirm who you are, so that we do not disclose personal data to the wrong person.

You also have the right to lodge a complaint with a data protection supervisory authority. In Slovakia this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky); you may also complain to the authority in your country of residence.

15Children

The Website is aimed at a general audience and is not directed at children. We do not knowingly collect personal data from children.

If you believe a child has sent us personal data, write to rtforgestudio@gmail.com and we will take reasonable steps to investigate and, where appropriate, delete it.

16Security

The Website is served over an encrypted HTTPS connection. It is a static site with no database and no user accounts, which keeps the amount of data that could be exposed to a minimum.

We take reasonable technical and organisational measures appropriate to that risk. No internet service can promise absolute security, and we make no such promise here.

17Changes to This Policy

We may update this Privacy Policy — for example if the Website gains a feature that processes data differently, or if a provider changes.

The “Last updated” date at the top of this page shows when it was last revised. Continued use of the Website after a change means the updated policy applies.

18Contact

Questions about this policy, about how the Website handles your data, or about your rights:

We make reasonable efforts to answer privacy requests within the period required by applicable data protection law.

Last updated: 8 September 2026