Privacy policy

This policy explains how personal data is handled when you visit playwildsite.com (the "site"), the official website for the game Wildsite. It is written to meet the transparency requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR and applicable US state privacy laws.

The short version

• The site has no user accounts, forms, comments or newsletter sign-up. We never ask you for personal data.
• We do not use advertising, tracking pixels, fingerprinting or social media plugins.
• We use Google Analytics to count visits only if you click Accept in the cookie banner. Until then nothing from Google is loaded, and you can withdraw your consent at any time through "Cookie settings" at the bottom of every page.
• Without your consent, the only cookies that may appear are strictly necessary security cookies from our host.
• We do not sell or share your personal data, and we do not use it for profiling or targeted advertising.
• Like every website, the site cannot work without your IP address. Our host, Cloudflare, processes it to deliver and protect the site. If you open a news post with images, Valve's Steam servers also receive it.

1. Who is responsible

The controller responsible for personal data processed through this site is VIVIDDI ENTERTAINMENT SRL, the developer and publisher of Wildsite ("we", "us").

• Address: Str. Ion Pillat 4, Sector 3, 030887 Bucharest, Romania
• Privacy contact: vividdi.ent@gmail.com

We are not required to appoint a Data Protection Officer, because we do not carry out large-scale or systematic monitoring of individuals. Privacy questions are handled directly by the team at the contact above.

2. What this site does not do

playwildsite.com is a static website. Pages are generated in advance and served as plain files, so no code of ours runs on a server when you visit. In particular, the site does not:

• offer accounts, logins, contact forms, comments, newsletter sign-ups or purchases;
• load any analytics before you consent, or use any analytics tool other than Google Analytics (section 3.4);
• show advertising or use advertising, retargeting or conversion pixels (Meta, Google, X, TikTok or others);
• embed YouTube, Discord, X or other social media players or widgets;
• load fonts from Google Fonts or any other font service, since all fonts are hosted on our own domain;
• store anything on your device, apart from your cookie choice and, if you accept, the Google Analytics cookies.

The trailer, screenshots, press kit files and fonts are all served from playwildsite.com itself. Buttons that lead to Steam, Discord, YouTube or X are ordinary links. Nothing is sent to those services until you click one.

The site is still static, and Google Analytics runs in your browser only if you have accepted it (section 3.4).

3. Data processed when you visit

3.1 Hosting, delivery and security (Cloudflare)

The site is hosted on and delivered by Cloudflare's global network. When your browser requests a page or file, Cloudflare necessarily processes technical data about that request:

• your IP address and its approximate location (country or region);
• the date and time of the request, and the page or file requested;
• your browser's user agent (browser type, version and operating system) and preferred language;
• the referring page, if your browser sends it;
• technical connection data such as the protocol, TLS version and response status.

Purpose: to deliver the site to you, keep it fast and available, and protect it against attacks, abuse, bots and denial-of-service attempts. Cloudflare may assess requests automatically, for example to block malicious traffic or to show a browser check. Such security checks have no legal or similarly significant effect on you.

Legal basis: our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR). A website cannot be delivered without this data.

Retention: we do not keep our own access logs and do not use this data to identify you. Cloudflare processes it as our service provider and keeps request logs only briefly, as set out in its own policies. Security data may be kept longer where needed to investigate or stop an attack.

Recipient: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, acting as our processor under its Data Processing Addendum. See the Cloudflare privacy policy.

3.2 Images in news posts (Valve / Steam)

The news pages republish our official Steam announcements. Some images in those posts are loaded directly from Steam's image servers (clan.akamai.steamstatic.com, operated by Valve Corporation through the Akamai content network). When a page with such an image is shown, your browser connects to those servers, and they receive your IP address, user agent and the time of the request. We tell your browser not to send the address of the page you are reading (the referrer).

Purpose and legal basis: to show our announcements in full without copying Valve's files, based on our legitimate interest in presenting our official news (Art. 6(1)(f) GDPR). Valve processes this data as an independent controller. See the Valve privacy policy. The home page, FAQ, roadmap and press kit load nothing from Steam.

3.3 When you email us

If you write to us by email, for example through the press contact, we receive your email address, your name if you give it, and whatever you choose to include in your message.

Purpose and legal basis: to read and answer your message and handle any follow-up, such as press or review key requests. The legal basis is our legitimate interest in responding to people who contact us (Art. 6(1)(f) GDPR) or, where your message concerns an agreement with us, taking steps at your request before entering into it (Art. 6(1)(b) GDPR).

Retention: we keep correspondence only as long as needed to deal with your request and any follow-up, and then delete it, unless we must keep it longer to meet a legal obligation or to establish, exercise or defend legal claims. Our email is hosted by Google (Gmail), which may process it in the EU and the USA.

3.4 Visitor statistics (Google Analytics), only with your consent

When you first visit, a banner asks whether you accept analytics cookies. Accept and Reject are equally easy, and the site works the same either way. Only if you click Accept do we load Google Analytics 4. If you reject, or ignore the banner, no request is made to Google and no analytics cookies are set.

The Google Analytics script (the "Google tag") is fetched from Google's servers at googletagmanager.com, which receive your IP address when it loads. This too happens only after you accept.

If you accept, Google Analytics collects:

• a random identifier stored in a cookie, which recognises your browser on later visits;
• the pages you view, how long you stay, scrolling, clicks on outbound links and file downloads;
• the website or search that brought you here (referrer);
• device type, browser, operating system, screen size and language;
• approximate location (country, region, city), derived from your IP address. Google Analytics 4 does not log or store IP addresses.

Purpose: to understand how many people visit, which pages are useful and where visitors come from, so we can improve the site and our communication about Wildsite. We see only aggregated reports. We do not try to identify you, and we do not combine this data with other data about you.

Settings we use: Google signals and ad personalisation are switched off, and the data is not used for advertising. Google's advertising consent signals are set to "denied". The analytics cookies expire after 13 months, and Google Analytics keeps event data for 14 months before deleting it automatically.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive). You can withdraw it at any time, as easily as you gave it, by clicking "Cookie settings" at the bottom of any page and choosing Reject. We then delete the analytics cookies from your browser and stop loading Google Analytics. Withdrawal does not affect processing carried out before it. We ask again after 6 months.

Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor under the Google Ads Data Processing Terms, with possible transfer to Google LLC in the USA (see section 6). See Google's privacy policy and how Google uses data from sites that use its services. You can also block Google Analytics on all websites with Google's opt-out browser add-on.

3.5 Links to other services

The site links to Steam, Discord, YouTube, X (Twitter) and vividdi.com. When you follow one of those links, you leave this site and the other service's privacy policy applies:

• Steam (Valve)
• Discord
• YouTube (Google)
• X

Wishlisting, buying or playing Wildsite takes place on Steam and in the game, not on this site. That processing is covered by Valve's privacy policy and by the game's own terms and notices, not by this policy.

4. Cookies and similar technologies

We store your cookie choice in your browser's local storage, so we don't ask on every page. Google Analytics cookies are set only after you accept. Cloudflare may set a small number of strictly necessary security cookies, which do not require consent. See the cookie policy for the full list.

5. Who receives your data

We never sell, rent or trade personal data. It is only received by:

6. International transfers

Cloudflare and Valve are based in the United States, Google Analytics data may be processed by Google LLC in the United States, and Cloudflare serves the site from data centres worldwide, usually the one closest to you. Where personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, the transfer relies on appropriate safeguards. These are the EU-US Data Privacy Framework and its UK and Swiss extensions, where the recipient is certified, or the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask us for more information about these safeguards.

7. How long data is kept

8. Your rights

If you are in the EEA, the UK or Switzerland, data protection law gives you the right to:

• Access the personal data we hold about you and get a copy of it (Art. 15 GDPR);
• Rectify inaccurate or incomplete data (Art. 16);
• Erasure of your data ("right to be forgotten") (Art. 17);
• Restrict how we process it (Art. 18);
• Data portability, where processing is based on contract or consent and is automated (Art. 20);
• Object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21);
• Withdraw consent at any time, where we rely on it, without affecting earlier processing;
• Lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where an alleged breach took place. Our lead authority is Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest. Other EU authorities are listed by the European Data Protection Board, and in the UK the authority is the Information Commissioner's Office.

To exercise any of these rights, contact vividdi.ent@gmail.com. We will reply within one month, which can be extended by two more months for complex requests, in which case we will tell you why. Exercising your rights is free. We may ask for information to confirm your identity. Because the site does not identify visitors, we may be unable to link request data such as IP addresses to you. If so, we will tell you (Art. 11 GDPR).

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR).

9. US residents

Residents of California and other US states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas and Oregon) have rights to know, access, correct and delete personal information, and to opt out of its sale, sharing for cross-context behavioural advertising, and profiling. We collect only the categories described in section 3: identifiers (IP address and, if you accept analytics, a cookie identifier), internet activity (request data and, with consent, pages viewed), approximate location and, if you email us, the contents of your messages. We use them only for the purposes described there. Google acts as our service provider for analytics and may not use the data for its own advertising.

We do not sell or share personal information, have not done so in the past 12 months, and do not use or disclose sensitive personal information. Analytics only runs if you opt in through the cookie banner, and you can switch it off at any time through "Cookie settings". You can use your rights by contacting vividdi.ent@gmail.com, directly or through an authorised agent, and we will not discriminate against you for doing so.

10. Children

The site is a general-audience game website and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, for example by email, contact vividdi.ent@gmail.com and we will delete it.

11. Security

The site is served only over encrypted HTTPS connections. Because it is static and has no database or user accounts, it holds no personal data that could be leaked from the site itself. We limit access to our email and hosting accounts to the people who need it and protect them with strong authentication.

12. Changes to this policy

We update this policy when the site or the law changes, for example if we add a newsletter or a new service. The date at the top shows the latest version. If we ever want to use data in a way that needs your consent, we will ask for it before we start.

13. Contact

For questions about this policy or your personal data, contact VIVIDDI ENTERTAINMENT SRL at vividdi.ent@gmail.com.