‹  Home

Legal

Privacy Policy

How we handle personal data when you visit mixedmoongames.com. Short version: as little as technically possible.

1. Controller

The controller under the General Data Protection Regulation (GDPR) and other national data protection laws is:

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

We have not appointed a data protection officer, because the conditions of section 38 of the German Federal Data Protection Act do not apply to us. For any privacy matter, use the email address above.

2. What this site does and does not do

mixedmoongames.com is a purely static website. You can use all of it without giving us any personal data. In detail:

• No cookies. We set no cookies at all, neither strictly necessary ones nor any for analytics or advertising. What we store is one local storage entry, described in section 4.
• No tracking. There are no analytics services, no pixels and no ad networks on this site. We do not count you and we do not profile you.
• One external resource, and you can switch it off. Fonts, images, icons, stylesheets and scripts are served exclusively from our own server. There is no Google Fonts embed, no CDN, no YouTube player and no social media widget. The only third party element is the Steam store widget on the home page, described in section 4. It is on by default and can be turned off under Cookie settings.
• No forms, no accounts, no newsletter. We collect no input from you on this site.

That leaves only the processing that cannot be avoided when a website is delivered at all, described in section 3.

3. Server log files

When you open this site, your browser automatically sends information that our host stores in server log files. This can include:

• browser type and version
• operating system in use
• referrer URL, meaning the page you came from
• pages requested and volume of data transferred
• date and time of the request
• IP address of the requesting device

We do not merge this data with other sources and we draw no conclusions about individual people from it.

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering the site correctly, keeping it stable and secure, and in defending against and investigating attacks on our systems.

Retention: log files are deleted after seven days at the latest, unless they are needed longer to investigate a specific security incident.

4. Cookies and local storage

This site sets no cookies of its own. Nothing is written to or read from your device for analytics, profiling or advertising. What we do store is a single record of the choice you make in the consent dialog, so that we do not have to ask again on every page.

What is stored

The mmg-consent entry is strictly necessary for the service you asked for, namely honouring your own choice, so the legal basis is section 25(2) no. 2 TDDG. It holds nothing but your answers and the date you gave them: no identifier, no profile, nothing that could identify you, and it never leaves your browser for our server or anyone else.

You can delete it at any time through your browser under "clear site data".

The Steam store widget

One element on this site is not ours: the Steam store widget on the home page, supplied by Valve Corporation, 10400 NE 4th Street, Bellevue, WA 98004, USA. It shows the store entry for Monarchs at Play together with the wishlist button.

The widget is an iframe loaded from store.steampowered.com. Displaying it opens a connection from your browser to Valve's servers. Valve receives your IP address, the referring page, your browser type and language, and can set its own cookies on your device through that frame. What Valve does with that data is outside our control and covered by their own privacy policy, linked in section 7. Because Valve is based in the United States, data can be transferred outside the European Union.

The widget is active by default, so the store page is usable directly on our site without an extra click. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is showing the current state of our own store page, including price, release status and the wishlist button, in the place where people read about the game.

You can switch it off. Open Cookie settings, untick "External content" and confirm. The frame is then removed immediately, nothing further is requested from Valve, and it stays off on every later visit until you change it back. In its place you get a plain link to the store page. The consent dialog offers reject all, accept selection and accept all as three equally weighted buttons, and closing it without choosing is not treated as agreement.

Objecting and withdrawing

You can object to the Steam widget at any time with effect for the future, without giving a reason and without any disadvantage, under Art. 21(1) GDPR. Use the Cookie settings link, which sits in the footer of every page. Any objection or consent you give does not affect the lawfulness of processing carried out beforehand. If you take no action at all, your stored choice expires after 12 months and we ask again.

5. Hosting

This site is hosted by an external provider in Germany. The host processes the data listed in section 3 solely on our behalf and on our instructions, under a data processing agreement in accordance with Art. 28 GDPR.

6. Contacting us by email

If you contact us at the email address or phone number given on this site, we process the details you send us, such as your name, contact data and the content of your message, solely to deal with your request.

Legal basis is Art. 6(1)(b) GDPR where your request relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries.

We keep your message until the purpose for storing it no longer applies, meaning until your request has been dealt with, and unless you ask us to delete it earlier. Mandatory statutory retention periods, in particular under commercial and tax law, remain unaffected.

Please note: our contact address runs on Google's Gmail service. Email you send to us is therefore transmitted to Google Ireland Limited and may be transferred to third countries, including the United States. If you would rather avoid that, write to the postal address in section 1.

7. External links: Steam, Discord, social media

This site links to external services, in particular the Steam store page for Monarchs at Play, our Discord server, our profiles on YouTube, X, TikTok and Instagram, press kit and trailer folders on Google Drive, and the websites of the bodies that fund the studio, named in the footer.

These are plain links. No widgets, buttons or iframes belonging to those providers are embedded here. As long as you do not click a link, no connection is made to their servers and no data reaches them.

The moment you follow a link, you leave our site. From that point on only the privacy terms of the respective provider apply, and we have no influence over their processing:

• Steam, Valve Corporation: store.steampowered.com/privacy_agreement
• Discord, Discord Netherlands BV: discord.com/privacy
• YouTube and Google Drive, Google Ireland Limited: policies.google.com/privacy
• X, Twitter International Unlimited Company: x.com/en/privacy
• TikTok, TikTok Technology Limited: tiktok.com/legal/privacy-policy-eea
• Instagram, Meta Platforms Ireland Limited: privacycenter.instagram.com/policy

Some of these providers also process data outside the European Union. Please read their privacy notices before you send them any data.

8. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR), to learn whether and what data we process about you
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of any consent given, with effect for the future (Art. 7(3) GDPR)

An informal message to mixed.moon.games@gmail.com is enough to exercise any of these.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

SSL and TLS encryption

This site uses SSL and TLS encryption for security. You can tell an encrypted connection by the address bar switching from "http://" to "https://". With encryption active, the data you send us cannot be read by third parties.

9. Changes to this policy

We update this policy whenever changes to the site or to the law make it necessary, for example if a newsletter, a contact form or embedded video is added later. The version available here applies to each new visit.

Last updated: September 2026