PrivacyPolicy.

The Short Version

We are a small studio and this is a plain informational website. We want the summary to be honest rather than reassuring, so here it is:

• We do not run analytics. There is no Google Analytics, no Matomo, no tracking pixel, and no advertising network on this site.
• We do not set any cookies of our own, and we do not use cookies to profile you.
• We have no user accounts, no shopping cart, and we do not process payments.
• We do not sell or share your personal information, under any definition of those words, including the broad ones used by California law.
• Your IP address and browser details are recorded in ordinary server logs by our hosting provider, as happens on essentially every website.
• This site loads fonts from Google, which means Google receives your IP address when a page loads. That is currently our only third-party request.

The sections below explain each of these in detail, along with your rights and how to exercise them.

Who Is Responsible

The party responsible for processing personal data on this website - the "controller" under the EU and UK GDPR, and the "business" under California law - is United Division, an independent game development studio based in Pennsylvania, United States.

You can reach us at [email protected] for any question about this policy or about data we hold.

Opposition to Promotional Emails

We expressly prohibit the use of contact details published on this website for sending promotional or informational material that was not expressly requested. United Division reserves the right to take legal action if unsolicited advertising is received.

What We Collect

We collect two categories of data, and nothing else.

Data collected automatically

When you load a page, our hosting provider records a standard server log entry. This is described in full in section 05. We do not combine these logs with any other source, and we do not use them to build a profile of you.

Data you choose to give us

If you email us, or submit the Data Subject Access Request form, we receive whatever you put in that message - typically your email address and the content of your request. We use it only to answer you.

Cookies

This website does not set any first-party cookies. There is no analytics cookie, no advertising cookie, no session cookie, and no consent cookie - because there is nothing to consent to.

Your browser may still store items unrelated to us, and our hosting or CDN provider may set a strictly necessary cookie for security or load balancing purposes. Cookies of that kind are exempt from consent requirements because the site cannot be delivered safely without them.

You can configure your browser to warn you about cookies, refuse them case by case, or delete them automatically when the browser closes. Doing so will not affect how this site works.

Server Log Files

Our hosting provider automatically collects and stores information that your browser transmits when you request a page. These log files contain:

• Browser type and version
• Operating system used
• Referrer URL - the page you arrived from
• Hostname of the accessing device
• Date and time of the request
• IP address

These data are not merged with data from other sources, are not used to identify individual visitors, and are not shared with third parties except where we are legally compelled to do so. Logs exist so that the site can be operated securely and so that abuse and outages can be investigated.

For visitors in the EEA and UK, the legal basis for this processing is Article 6(1)(f) GDPR - our legitimate interest in the secure and reliable operation of the website.

Third Parties We Use

We keep this list short deliberately. Every entry here represents a company that may receive some data about you.

Google Fonts

Our pages load typefaces from Google's font servers at fonts.googleapis.com and fonts.gstatic.com. To deliver those files, Google receives your IP address and basic request headers. We do not control what Google does with that information, and Google is based in the United States. See the Google Privacy Policy for details.

Hosting and content delivery

The site is served by a commercial hosting provider and fronted by a content delivery network. Both process request data - including your IP address - as processors acting on our instructions, for the purpose of delivering pages and filtering malicious traffic.

Form handling

The Data Subject Access Request form is delivered through a third-party form processor, which relays submissions to us by email. It receives whatever you enter into that form.

Community & Social

This website contains ordinary hyperlinks to external platforms, most importantly our Discord server. These are plain links. We do not embed Instagram, Facebook, X, or YouTube widgets, and no social platform receives data about you simply because you loaded a page here.

If you click through and join our Discord, your data there is processed by Discord under its own privacy policy and by us as a server operator. Anything you post publicly in that server is visible to other members. We may keep moderation records - such as notes on warnings or bans - for as long as needed to keep the community safe.

Legal Bases

For visitors in the EEA and UK, we rely on the following bases under Article 6(1) GDPR:

• Legitimate interests - for server logs, security, and the basic operation of the site.
• Consent - where you voluntarily send us a message or submit a form. You may withdraw consent at any time with future effect; an informal email is sufficient. Withdrawal does not affect processing carried out before we received your request.
• Legal obligation - where we are required to retain or disclose information by law.

Your Rights (EEA / UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Access - to be told what data we hold about you, where it came from, who received it, and why it was processed, free of charge.
• Rectification - to have inaccurate data corrected.
• Erasure - to have your data deleted, where no legal retention obligation applies.
• Restriction - to have processing limited in certain circumstances.
• Objection - to object to processing carried out on the basis of legitimate interests.
• Portability - to receive data you gave us in a structured, machine-readable format, and to have it transmitted to another controller where technically feasible.
• Complaint - to lodge a complaint with your national supervisory authority if you believe we have handled your data unlawfully.

Use the Data Subject Access Request form or email us directly. We respond within one month.

Your Rights (US States)

Several US states - including California, Virginia, Colorado, Connecticut, Utah, Texas, and Oregon - grant residents rights over personal information. Depending on your state, these include the right to know what is collected, the right to obtain a copy, the right to correct, the right to delete, and the right to opt out of sale, sharing, targeted advertising, or profiling.

Two points specific to us:

• We do not sell personal information, and we do not share it for cross-context behavioral advertising. There is no opt-out to offer because neither activity takes place.
• We do not use personal information for targeted advertising or for automated profiling of any kind.

To exercise a right, contact us using the details in section 15. We will not discriminate against you for making a request. If you are a California resident, you may designate an authorized agent to submit a request on your behalf; we may ask for proof of that authorization.

Children's Privacy

This website is not directed at children under 13, and we do not knowingly collect personal information from them. We have no account system, so there is no sign-up path through which a child could submit information to us.

Our Discord server is subject to Discord's own minimum age requirement of 13, or higher where local law requires it. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

Retention & Security

Server logs are retained for the period set by our hosting provider, typically a small number of weeks, and are then rotated out. Email correspondence and form submissions are kept only as long as needed to resolve your request and to show that we handled it, then deleted.

The site is served exclusively over encrypted HTTPS connections. You can confirm this from the lock indicator in your browser's address bar. We apply reasonable technical and organizational measures to protect the limited data we hold.

No method of transmission over the internet is completely secure, and we cannot guarantee absolute protection against third-party access.

Do Not Track & Global Privacy Control

Some browsers transmit a "Do Not Track" signal or a Global Privacy Control signal. Because we do not track visitors across sites, do not run analytics, and do not sell or share personal information, there is no tracking behavior for these signals to change. Our handling of your data is identical whether or not you send one.

Changes to This Policy

We may update this policy as the site changes - for example, if we add analytics, a newsletter, or accounts. The "last updated" date at the top of this page always reflects the current version. Where a change materially affects your rights, we will say so prominently rather than quietly amending the text.

Data Requests & Contact

The fastest route for any access, correction, or deletion request is the Data Subject Access Request form. You can also email us directly.