Privacy

Privacy Policy

Last updated: July 13, 2026

1. Who We Are

Hollowmarch is operated by Daniel Bick, trading as Bytemix Studios ("we", "us", "our") — a sole proprietorship under German law, not a registered legal entity. All references to "Bytemix Studios" in this document refer to Daniel Bick as a natural person. Full contact details are in the imprint. This policy explains how we collect, use, and protect your personal data when you use our website and game.

2. Data We Collect

Account data

• Username
• Password (stored only as a salted PBKDF2 hash — we never store plaintext passwords)
• Email address (required at registration) and its verification status
• Which version of the terms you accepted, and when
• Playtest waitlist opt-in and any granted playtest access
• Account creation date

Game data

• Characters, their progress, inventory, skills, and settings
• In-game actions necessary for the game state

Connection data

• IP address (for connection handling, rate limiting, and abuse prevention)
• WebSocket connection metadata and login timestamps

3. Data We Do Not Collect

• No third-party analytics, tracking scripts, or advertising services — on the website or in the game.
• No fingerprinting or cross-site tracking.
• No sharing, selling, or transferring of your data to third parties for their purposes.
• Your email is used solely for verification and password recovery — never for news, promotions, or anything you would need to unsubscribe from.

4. Cookies

This website sets exactly one cookie: hm_session, an opaque sign-in session id, essential for the account area to function. It carries no tracking information. The game client itself uses no cookies; its local settings are stored on your device.

5. How We Use Your Data

• Authenticate your account and maintain your session
• Send the emails you trigger yourself (verification, password reset)
• Save and restore your game progress
• Operate the game world and playtest access waves
• Prevent abuse, cheating, and unauthorized access
• Monitor server health and performance

6. Data Storage, Processors & Security

All data is stored on our own server located in Germany, with Hetzner Online GmbH (Germany) as the infrastructure provider. Transactional email (verification, password reset) is delivered via IONOS SE (Germany) as our email provider. No other third parties process your data.

• Passwords hashed with salted PBKDF2
• Encrypted connections (HTTPS/WSS)
• Verification and reset links are single-use and expire automatically
• Server access restricted to the operator only

However, no system is completely secure. We cannot guarantee absolute security of your data, especially during the early development phase.

7. Data Retention

Your account and game data are retained for as long as your account exists. Connection data (IP addresses in server logs) is retained for up to 30 days for abuse prevention, then automatically deleted. Expired verification and reset tokens are unusable immediately and cleaned up routinely.

8. Your Rights (GDPR)

• Right of access — request a copy of all personal data we hold about you.
• Right to rectification — request correction of inaccurate data; you can change your email yourself on the account page.
• Right to erasure — delete your account yourself at any time on the account page; it removes your account, characters, and progress permanently.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to specific processing of your data.

To exercise any of these rights, email info@hollowmarch.com. We respond within 30 days. Upon a deletion request, personal data is fully removed within 30 days; some data may be retained for a limited additional period where required for legal obligations or abuse prevention.

9. Children's Privacy

Hollowmarch is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you are between 13 and 16, you must have the consent of a parent or legal guardian to use the game. If we become aware that we have collected data from a child under 13, we will delete the account and associated data promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the game or this website. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

For any questions or requests regarding your privacy and personal data, email info@hollowmarch.com.