Privacy Policy

1. Who we are

Noctis Games is an independent game studio, and is the party responsible for the personal data described in this policy (the “data controller” under laws that use that term). You can reach us about any privacy matter at contact@noctisgames.com.

2. Personal data we process

We keep data collection to a minimum. This website has no user accounts, no contact forms, no advertising and no newsletter.

• Messages you send us. If you email us, we receive your email address, your name if you provide it, and the content of your message.
• Technical data. When you load the website, our hosting provider and Cloudflare, which delivers the website and protects it against abuse, process your IP address, the date and time of the request, the page requested and browser information (user agent) in order to deliver the site and keep it secure. If Cloudflare asks your browser to pass a security check, it stores a cookie recording the result (see section 4).
• Usage statistics. We use Cloudflare Web Analytics to understand how the website is used. Your browser loads a small script from Cloudflare, which measures page views, referring sites, approximate location at country level, browser, operating system and device type, and page performance. It does not use cookies, does not store anything on your device, does not fingerprint you and does not track you across websites. We only see aggregated statistics and cannot identify individual visitors.

We do not knowingly collect sensitive or special categories of personal data. We do not use personal data for automated decision-making or profiling.

3. Why we process it and on what legal basis

• To read and answer your messages: our legitimate interest in responding to enquiries and, where your message concerns a potential agreement with us, taking steps at your request before entering into a contract.
• To deliver the website and protect it against abuse: our legitimate interest in operating a secure and reliable website.
• To measure and improve the website: our legitimate interest in understanding how the website is used, pursued by means that do not identify individual visitors.
• To comply with legal obligations and to establish, exercise or defend legal claims where necessary.

Some privacy laws, such as the EU and UK General Data Protection Regulation (“GDPR”), require a legal basis for each purpose. Where such a law applies, the bases named above are the ones we rely on. We do not rely on consent, because we do not carry out any processing that requires it.

4. Cookies

This website does not use advertising, analytics or tracking cookies, and does not use comparable tracking technologies such as advertising pixels or device fingerprinting.

The only cookie that may be stored is a security cookie from Cloudflare, which protects this website against bots and abuse. If Cloudflare asks your browser to complete a security check, for example while the website is under attack, it stores a cookie named cf_clearance that records that the check was passed, so you are not asked again on every page. It expires automatically after a short period.

This cookie is strictly necessary to deliver the website securely. It is only sent to this website and is not used for advertising, for analytics or to track you across websites. Because the law does not require consent for strictly necessary cookies, no cookie banner is shown. You can block or delete cookies in your browser settings, but you may then be asked to complete the security check again.

Because we do not track visitors across websites, there is nothing for “Do Not Track” or Global Privacy Control signals to switch off. If any of this changes, we will update this policy and ask for your consent where the law requires it.

5. Who receives your data

We do not sell or rent personal data, and we do not share it for advertising, including cross-context behavioural advertising. We rely on the following service providers, which process data on our behalf:

• Clou.TR (Türkiye) – website hosting.
• Cloudflare, Inc. (United States) – content delivery, website security and privacy-focused website analytics.
• Our email service provider – handling correspondence.

We may also disclose personal data to public authorities where we are legally required to do so.

6. International transfers

This website is hosted in Türkiye and delivered through Cloudflare’s global network. Cloudflare and our email provider operate global infrastructure, so your data may be processed outside your country of residence, including in the United States. Privacy laws in those countries may differ from the ones where you live. Where applicable law restricts such transfers, we rely on the mechanisms it provides, such as the standard contractual clauses offered by these providers.

7. How long we keep it

• Correspondence is kept for as long as needed to handle your enquiry and for up to two years after our last exchange, unless a longer period is required by law or needed for a legal claim.
• Technical logs and analytics data are retained by our providers for limited periods under their own retention schedules; the statistics available to us are aggregated.
• Cloudflare’s security cookie, where one is set, expires automatically after a short period (see section 4).

8. Your rights

Depending on where you live, you may have rights over the personal data we hold about you, including the rights to:

• ask for access to your personal data or a copy of it;
• ask us to delete your personal data;
• ask us to correct or update your personal data;
• be told which personal data we collect or process about you, where it comes from, who we disclose it to and why;
• object to our processing or ask us to restrict it, where it is based on our legitimate interests; and
• withdraw your consent, if we ever process your data on the basis of consent.

Some privacy laws also give you the right to opt out of the sale or sharing of your personal data, of targeted advertising, and of certain uses of sensitive personal data. We do not offer these opt-outs because there is nothing to opt out of: we do not sell or share personal data, we do not run targeted advertising and we do not collect sensitive personal data. For the same reason, a Global Privacy Control signal from your browser changes nothing about how this website treats you.

To make a request, email us at contact@noctisgames.com. We respond free of charge within one month. We may take steps to verify your identity before we answer. Where these rights apply to you, they may be limited in some situations, for example when the law requires us to keep certain data or when we need it to establish or defend a legal claim. We will not treat you differently for exercising any of these rights.

If you are not satisfied with our answer, you can write to us again to ask us to reconsider. Where applicable, you also have the right to complain to the data protection or privacy authority in your country or region of residence.

You may authorise someone else to make a request on your behalf. That person must show that you have authorised them, and we may ask you directly to confirm it or ask for information that confirms their identity.

9. Children

This website is not directed at children and we do not knowingly collect personal data from children under 13, or under the higher age set by the law of their country. If you believe a child has sent us personal data, please contact us and we will delete it.

10. Links to other websites

This website links to third-party platforms. Store buttons open our pages on Steam, trailer buttons open the video on YouTube, and the footer may link to our profiles on Discord, Instagram, X, YouTube and Steam. We do not embed players or widgets from these services, so they receive no data about you while you browse this website. Once you follow a link, the service you arrive at is operated independently, may set its own cookies, and applies its own privacy policy.

11. Security

We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricted access to our mailbox. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy as the website or our games evolve. The current version is always available on this page, and the date at the top shows when it was last revised.