← Back to the studio

Nordic Wolf Studios

Privacy Policy

What we collect, why we need it, and how to contact us about your personal data.

Last updated:

01Who is responsible

Nordic Wolf Studios is operated by Anders Thomsen, who is responsible for the personal data processed through this website. You can contact Anders about this policy or your personal data:

This policy covers the studio website, its contact form and playtest sign-ups. Games, game platforms and external community services may have their own privacy notices.

02Information we process

  • Contact enquiries: your name, email address, subject, message, the time you submitted it and whether the studio has read it. We also process any personal information you choose to include in your message or follow-up correspondence.
  • Website delivery and security: technical connection information, including your IP address, the requested page and browser request information, is processed when your browser connects to the server. Technical information may also appear in operational or error logs.
  • Administrator access: a login cookie allows authorised studio administrators to remain signed in.

You choose whether to contact us. The contact form requires a name, email address, subject and message so that we can understand and respond to your enquiry. Please do not include passwords, payment details, national identification numbers or sensitive personal information.

03Why we use it

We use contact information to read, manage and respond to enquiries, including player support, press requests and potential collaborations. For general correspondence, our legal basis is our legitimate interest in communicating with people who contact the studio (Article 6(1)(f) GDPR). Where an enquiry is necessary to take steps at your request before entering into a contract with you, or to perform that contract, Article 6(1)(b) applies instead.

We process technical connection information to deliver the website, diagnose faults and protect it against misuse. This is based on our legitimate interest in operating a reliable and secure website (Article 6(1)(f)). Where we must retain or disclose information to comply with a legal obligation, Article 6(1)(c) applies.

We do not use contact enquiries for marketing, sell personal data, or make decisions with legal or similarly significant effects based solely on automated processing.

04Hosting and access

The website and contact-form database are hosted on a Hetzner server in Helsinki, Finland, within the European Union. Contact messages are stored in the studio website's database and can be read by authorised studio administrators. The form does not send messages through an external form service.

Our hosting provider processes information as necessary to provide the infrastructure. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

The website's contact database is not intentionally transferred outside the European Economic Area. If you contact us by email, your message also passes through the email services used by you and the recipient; those services are separate from the website contact database.

05How long we keep it

We keep contact enquiries while they are being handled and for up to six months after the enquiry is closed. We then delete the personal information unless a specific legal obligation or an ongoing legal claim requires longer retention. In that case, we keep only what is necessary for that purpose.

This period covers the enquiry and follow-up correspondence held by the studio. Deletion is handled by the studio; it is not currently an automatic feature of the website.

Technical logs are stored separately from contact enquiries. Application logs rotate when their storage limit is reached; web-server access logs currently have no automatic expiry. They require manual review and deletion by the studio. You can contact us about log information relating to you.

The six-month enquiry policy also requires the studio to review backup copies and follow-up correspondence when deleting an enquiry, so that restoring a backup does not reintroduce information that should have been deleted.

06Playtest sign-ups

When you join a playtest list, we store your email address, the selected game, the time of registration and the version of the consent you accepted. We use these details to manage that playtest list and contact you about participation. Signing up does not create a newsletter subscription or guarantee access.

The list is stored in the website database on our Hetzner server in Finland and is accessible to authorised studio administrators. The website does not send automatic confirmation emails or invitations.

You can withdraw your consent and ask us to remove your registration at any time by contacting the studio. We use the list only for the selected playtest and remove registrations when they are no longer needed for it. The studio handles deletion, including review of backup copies.

07Cookies and tracking

The website does not use advertising cookies, analytics tracking or third-party marketing pixels. Fonts are served by the website rather than requested from Google by your browser.

The nws_admin cookie is set when a studio administrator signs in. It is used only for authentication, lasts for up to 30 days and is not needed for ordinary visitors. You can remove it in your browser settings; doing so signs the administrator out.

No newsletter service is connected to this website. The newsletter field, if displayed, does not save or transmit your email address or create a subscription.

08Your rights

Under applicable data-protection law, you may request access to your personal data, correction of inaccurate information, deletion or restriction of processing. You may object to processing based on legitimate interests. Where processing is automated and based on consent or a contract, the right to data portability may also apply. These rights depend on the circumstances and are subject to legal exceptions.

Send your request to Anders using the email address above, or use our contact form. We normally respond within one month. If a lawful extension is necessary, we will explain why within that month. We may ask for proportionate information to verify your identity.

You may complain to the data-protection authority in the country where you live or work, or where you believe an infringement occurred. See the European Data Protection Board's list of supervisory authorities.