Nations at Arms
Legal

Privacy policy

This policy explains which personal data Nations at Arms processes, why, and what rights you have. We collect only what the game needs to run, plus visitor statistics for the website that work without cookies. There is no advertising and no tracking across other websites. The one exception is YouTube, and only once you choose to play a video (see Embedded content).

Controller

Tim Rucker
c/o flexdienst – #22331
Kurt-Schumacher-Strasse 74
67663 Kaiserslautern
Deutschland

Email: info [at] nationsatarms [dot] com

The player cookie

When you first open the game, the server sets one cookie, naa_player. It holds a random identifier that keeps your saved games and running sessions yours. It is strictly necessary for the service you request (§ 25 (2) no. 2 TDDDG), so we don't ask for consent:

  • HttpOnly — scripts on the page can't read it
  • Expires 400 days after your last visit (each visit renews it)
  • Not used for tracking or shared with anyone

Legal basis: Art. 6 (1) (b) GDPR — providing the game you asked to play.

Saved games

Saves and sessions are stored on our server, linked to your player identifier, until you delete them or your account.

Player poll

Our player poll at /poll is optional and every question can be skipped. When you start it, we store:

  • your answers, including anything you type into free-text fields and, only if you enter them, your name, Discord username and email address
  • a random identifier in a cookie, naa_poll, so your answers are saved as you go and you can continue later. It is HttpOnly, only sent to the poll and expires 400 days after your last save
  • a hash of your IP address, made with a secret key, so we can spot many submissions from one connection. We don't store the IP address itself

Before your first save, Cloudflare Turnstile checks that you are a person and not a bot. Cloudflare processes your IP address and technical details about your browser for this check. In most cases you don't see anything.

The answers are stored on Cloudflare's servers (see Hosting and delivery). We use them to decide how to develop the game and, if you left contact details, to contact you about contributing. We delete the answers once we've evaluated them, at the latest one year after the poll closes. To have your answers deleted earlier, write to info [at] nationsatarms [dot] com with your Discord username or email address, or the date you took part.

Legal basis: your consent, given by taking part — Art. 6 (1) (a) GDPR, and § 25 (2) no. 2 TDDDG for the cookie, which the poll you asked to take needs. You can withdraw your consent at any time by writing to us. Turnstile: Art. 6 (1) (f) GDPR — our interest in keeping bots out of the results.

Server logs

Our servers log each request: IP address, time, requested address, response status and browser user agent. We use the logs to keep the service running and secure, and delete them after 30 days. Legal basis: Art. 6 (1) (f) GDPR — our interest in a secure, working service.

Error reports and performance data

If the game crashes, your browser sends an error report to our own server: the error message, technical details, browser type, game version and session ID. We also record technical performance figures of the service on our own server. Neither goes to a third party, and neither is used to profile you. Legal basis: Art. 6 (1) (f) GDPR — our interest in finding and fixing faults.

Website visitor statistics

We use Cloudflare Web Analytics to count visits to the website and see which pages are read. It works without cookies and doesn't identify individual visitors. The statistics are kept for 6 months. Legal basis: Art. 6 (1) (f) GDPR — our interest in improving the website. You can object at any time by writing to info [at] nationsatarms [dot] com.

More details: Cloudflare Web Analytics

Hosting and delivery

  • Cloudflare hosts and delivers the website, protects it against attacks, controls access during testing, provides the visitor statistics and stores the player poll's answers. Cloudflare processes connection data on our behalf under a data processing agreement; transfers to the USA rely on the EU–US Data Privacy Framework and standard contractual clauses.

Embedded content

Content from Discord is only loaded after you click it. Until then, no data is sent to Discord.

News posts can contain YouTube videos. Until you press play, a video is shown as a preview image stored on our own server and no data is sent to YouTube. When you press play, the video loads from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google then receives your IP address, the address of the page and technical details about your browser, and may store cookies or similar data on your device to measure how the video is used and to personalize content and ads. If you are logged into a Google account, Google can link the view to that account. Data may be transferred to Google LLC in the USA; this relies on the EU–US Data Privacy Framework.

Legal basis: your consent, given by pressing play — Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time for the future by deleting the YouTube cookies in your browser and not playing further videos. Google's privacy policy: policies.google.com/privacy.

Links to other sites

Links to Discord, Reddit, Instagram and TikTok take you to those services; their privacy policies apply there.

Your rights

Under the GDPR you have the right to:

  • access your data (Art. 15), correct it (Art. 16) and have it deleted (Art. 17)
  • restrict processing (Art. 18) and receive your data in a portable format (Art. 20)
  • object to processing based on our legitimate interests (Art. 21)
  • complain to a data protection supervisory authority, e.g. the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz

To use any of them, write to info [at] nationsatarms [dot] com.

Changes

We update this policy when the game changes what it processes. See also the legal notice.

Last updated: 22 Oct 2026