Velarod

Privacy and cookie policy

Effective 28 September 2026

This policy covers the Velarod promotional website: visiting the site, contacting us and the planned early-access list and newsletter. It does not replace the privacy terms for the game itself.

Controller and contact

ERROR 404 sp. z o.o.
ul. Janusza Korczaka 1H, 55-100 Trzebnica, Polska
KRS: 0000830336 · NIP: 9151815408

For personal data requests, consent or leaving the list, email [email protected].

1. Data we use

To limit form abuse, we use an IP hash keyed with a secret and date; raw IPs are not stored in the registration database. Counters are removed on the next request after their time window expires; the longest window is 24 hours. When you visit, the server may record your IP address, request time, page address, browser and device information, and errors. This supports delivery of the site, troubleshooting and protection against abuse.

If you contact us, we process your email address, message and information you choose to provide. You do not need to send sensitive information or identity documents.

2. Early access and the newsletter

When enabled, the form stores your email, language, early-access choice, consent scope, version and time in the controller’s private SQL database. When registration is unavailable, the fields are disabled. Automated newsletters and an external mailing platform have not been activated.

Once registration opens, we will use your email and chosen language to send a pre-alpha invitation during the Civilization stage. A separate, optional consent will cover the newsletter: development updates, game material and promotional news about Velarod. Declining the newsletter will not affect pre-alpha access.

Neither consent will be preselected. We will record the consent scope, time and the version of the information shown at signup. Before registration opens, we will update this policy with the selected service and any transfers outside the EEA.

3. Purposes and legal bases

Delivering and securing the site, responding to correspondence and establishing, exercising or defending claims rely on our legitimate interests under Article 6(1)(f) GDPR. Those interests are a secure site, answering enquiries and protecting our rights.

After registration opens, invitations and the optional newsletter will rely on their respective consents under Article 6(1)(a) GDPR. Providing an email will be voluntary, but necessary to receive messages. You can visit the site without signing up.

4. Retention

Technical data is retained as necessary for security and troubleshooting. Incident-related records may be retained until the incident and related claims are resolved. Correspondence is kept while handling an enquiry and then only as necessary to protect claims, until the relevant limitation period expires.

Once registration opens, early-access data will be used until the invitation is sent, consent is withdrawn earlier or the list closes. Newsletter data will be used until withdrawal or closure of the newsletter. Limited evidence of consent and withdrawal may be retained where necessary to protect claims, until the relevant limitation period expires.

5. Recipients

Authorised people acting for the controller and hosting or email service providers may access data as needed to deliver their services. We may disclose data to competent authorities where required by law.

No external newsletter service has been activated. Before connecting one, we will specify recipients and, if a transfer outside the European Economic Area is involved, its basis and safeguards.

6. Your rights and withdrawing consent

Subject to GDPR conditions, you can request access, correction, erasure or restriction. Where applicable, you can request portability and object to processing based on legitimate interests. You may object to direct marketing at any time.

You can withdraw consent at any time by emailing [email protected]. Once the newsletter launches, you can also use its unsubscribe link. Withdrawal does not affect the lawfulness of earlier processing. Leaving the newsletter does not remove you from early access; you can leave each list separately.

You can complain to the Polish Personal Data Protection Office (uodo.gov.pl) or another competent EU supervisory authority. We do not profile you or make decisions about you based solely on automated processing.

7. Cookies and browser storage

We do not use advertising or analytics cookies. The enabled form uses the necessary session cookie “velarod_signup” to protect submissions from forgery. It contains no email address, is scoped to the form and expires at the end of the browser session. The protection token is valid for 30 minutes. Images and fonts are served from this website.

After you select a language, we save only that preference in browser storage: localStorage, key “velarod-language”. It is not a cookie. It remains on your device until you clear the site data. It is not used for advertising or profiling.

You can remove the preference using the button under Cookies in the footer or by clearing site data in your browser. The site will still work. If we introduce tools requiring consent, they will not run before the appropriate user choice.

8. Policy changes

The current version and date are published here. Before opening registration or adding tools, we will update the information to reflect how the services actually operate.

← Back to Velarod