This page explains what personal data Hellborn Trail collects when you use this website, how we use it, and your rights under applicable data-protection law (GDPR / UK GDPR).
When you subscribe to our newsletter, we store:
Your name and email are used solely to send you development updates, launch news, and previews about the Hellborn Trail board game. Your IP address and user-agent are used strictly for rate-limiting and spam prevention; they are not used to profile you or for marketing.
The legal basis for this processing is your consent, given when you submit the subscription form.
We keep your subscription record for as long as you remain subscribed. If you unsubscribe, your record is removed within 30 days. Anti-abuse records (IP addresses in our rate-limit log) are kept for a maximum of 48 hours and then automatically deleted.
We do not sell your personal data and we do not share it with third parties for their own marketing purposes. We may use a third-party email-delivery service (for example Mailchimp, Brevo, or SendGrid) to send the newsletter; in that case your name and email will be processed by that provider on our behalf, under their own privacy terms.
You have the right to:
To exercise any of these rights, get in touch via our contact page. We will respond within 30 days.
We set one session cookie (PHPSESSID) when you load a page that contains the newsletter form. It is strictly necessary for the form's anti-CSRF protection and expires when you close your browser. We do not use analytics, advertising, or tracking cookies.
This site loads CSS and font assets from the public jsDelivr content-delivery network (bootstrap, bootstrap-icons). Those requests may expose your IP address and user-agent to jsDelivr, in the same way any normal web request does. No personal data is shared with them.
If we change this policy we will update the date at the top of this page and, where appropriate, notify existing subscribers by email.