Privacy policy

Last updated: 26 October 2026

In short: this website has no ads and no tracking, and sets no cookies for visitors. We count visits with a privacy-friendly statistics service that doesn't identify you. We only receive personal data when you write to us through the contact form, and we use it only to reply.

1. Who is responsible

The controller of your personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Slovak Act No. 18/2018 Coll. on the Protection of Personal Data is WildPigStudios. For anything about your data, write to wildpigstudios@gmail.com.

2. What we process and why

Visiting the website

When you open a page, your browser sends technical data to the server that delivers the site: your IP address, the address of the page, the time, and your browser’s user agent. Our hosting provider processes this data to deliver the website and to keep it secure, and keeps it in request logs for up to 3 days. The legal basis is our legitimate interest in running a working and secure website (Art. 6(1)(f) GDPR).

Visitor statistics

To see how many people visit the website and which pages they read, we use Cloudflare Web Analytics, provided by our hosting provider. After a page loads, a small script sends the address of the page, the page you came from, your browser and device type, your country (derived from your IP address) and how fast the page loaded. It does not set cookies, does not store anything on your device, does not build a profile of you and does not follow you across other websites. We only see aggregated statistics, never individual visitors. The legal basis is our legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR); you can object to it, or block the script in your browser without affecting the site.

Clicks on links to other websites

Links to game store pages, Ko-fi and our social networks first pass through our own address (for example /go/discord), which counts the click and forwards you right away. We only keep a total per link and month; nothing about you, such as your IP address, is stored with it. The legal basis is our legitimate interest in knowing which of our channels people use (Art. 6(1)(f) GDPR).

Contact form

When you send a message, we store your name, email address, the topic you chose and your message, together with the time it was sent. We use them only to read and answer your message. The legal basis is our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR), or, if your message is about working with us, steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). Providing the data is voluntary, but without an email address we cannot reply.

We keep messages for 12 months after the conversation ends and then delete them, unless we need a message longer to establish, exercise or defend a legal claim. You can ask us to delete your message earlier.

Protection against spam and abuse

To limit how many messages can be sent in a short time, the server stores a keyed hash of the sender’s IP address together with a counter. The hash is not the IP address itself and is not used for anything else. Each entry is only needed for the length of the limit (at most one hour) and expired entries are deleted automatically. If a limit is reached, further submissions are refused for that period; this has no other consequence for you. The contact form also contains a hidden field that only automated bots fill in; such submissions are discarded without being stored. The legal basis is our legitimate interest in protecting the website and its users (Art. 6(1)(f) GDPR).

Administration

The administration area is used only by the studio team. Signing in is handled by our hosting provider’s access service (Cloudflare Access): the team member enters the studio’s email address, receives a one-time code by email, and is then kept signed in by a cookie. The access service keeps a log of sign-ins with the email address, the time, the IP address and its country. The website itself stores no accounts or passwords. Visitors of the public website are not affected.

Dark mode preference

If you switch between the light and dark theme, your choice is saved in your browser’s local storage so the site remembers it. It stays on your device and is never sent to us. You can remove it by clearing the site data in your browser.

3. Cookies

The public website does not set any cookies and does not use any tracking technology. The visitor statistics described above work without cookies or other storage on your device.Only members of the studio team who sign in to the administration receive a cookie, which is strictly necessary to keep them signed in. The saved theme preference (see above) is stored only because you asked for it. Storage of this kind does not require consent under the ePrivacy rules (in Slovakia, Act No. 452/2021 Coll. on Electronic Communications), which is why there is no cookie banner.

4. Who receives your data

We do not sell your data or share it for marketing. It is processed by:

  • members of the studio team who handle your message;
  • our hosting provider, Cloudflare, Inc. (USA), which runs the website, stores its database and uploaded images in the European Union, and processes request data on our behalf;
  • public authorities, only where the law requires us to disclose data.

Our providers act as processors under a data processing agreement and may only use the data to provide their service to us.

5. Transfers outside the EU

The website’s database and images are stored in the European Union. Our hosting provider is based in the United States, and each request is handled in the data centre of its global network closest to the visitor, so request data may be processed outside the EU, including in the United States. The provider is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (Art. 45 GDPR). If any other provider processes data outside the EU, we rely on the European Commission’s standard contractual clauses (Art. 46 GDPR). You can ask us for more information about these safeguards.

6. Fonts, icons and links to other websites

Fonts and icons are served from our own server, so your browser does not contact any font or icon service when you visit. The only script from another address is the visitor statistics script from Cloudflare described above. The site links to other services (for example Ko-fi, Discord, Instagram, Reddit, TikTok, X, YouTube, Steam, Google Play and the App Store), but does not embed them. Nothing is sent to them until you click a link; from then on, their own privacy policies apply.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict how we process it (Art. 18);
  • receive the data you gave us in a portable format (Art. 20);
  • object at any time to processing based on our legitimate interest, for reasons relating to your particular situation (Art. 21).

To use any of these rights, write to wildpigstudios@gmail.com. We will reply within one month; if a request is complex we may extend this by up to two more months and will tell you why. We may ask you to confirm your identity, for example by replying from the email address you used.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.

8. Automated decisions

We do not use your data for profiling or for automated decisions that have legal or similarly significant effects on you (Art. 22 GDPR). The only automatic step is the temporary limit on submissions described above.

9. Security

The website is served only over an encrypted connection (HTTPS). Access to stored messages is limited to the studio team, and the administration can only be reached after signing in with a one-time code sent to the studio’s email address.

10. Children

This website is not directed at children. If you are under 16, please ask a parent or guardian before sending us a message.

11. Changes to this policy

We update this policy when the website or the way we handle data changes. The date at the top shows the latest version.