Privacy policy

Last updated: 4 October 2026

This policy explains what happens to your data when you visit firstfallgame.com, the website of the game Firstfall. It covers this website only, not the game.

In short

• To show you a page, our server receives your IP address and the page you asked for. It does not keep logs of your visits.
• Everything on the website, including its fonts, comes from our own server.
• Google Analytics runs only if you press Accept in the banner. If you decline, nothing is sent to Google.
• You can change your choice at any time with "Cookie settings" at the bottom of every page.

Who is responsible

The controller responsible for processing personal data on this website (Article 4 (7) GDPR) is:

We are not required to appoint a data protection officer.

Delivering the website

The website runs on a server operated by Headpat. When you open a page, your browser sends our server:

• your IP address;
• the date and time of the request;
• the address of the page or file you asked for;
• the page you came from (the "referrer"), if your browser sends it;
• your browser, operating system and language (the "user agent").

Our server needs this to send the page back to you. The legal basis is Article 6 (1) (f) GDPR: our legitimate interest in delivering the website to you securely. Our web server does not write access logs, so this information is used only while your request is answered and is not stored afterwards. The connection is encrypted (HTTPS).

Fonts

The fonts Fredoka and Nunito are served from our own server. Your browser does not contact Google Fonts or any other font service.

Your consent choice

When you press Accept or Decline, we store your choice in your browser's local storage under the name firstfall-consent: whether you accepted or declined analytics, and when. It stays on your device and is not sent to us. Storing it needs no consent, because it is strictly necessary to remember your decision (Section 25 (2) No. 2 TDDDG). If you delete your browser's data for this website, the banner asks you again.

Google Analytics (only with your consent)

If you agree, we use Google Analytics to count visits and to see which pages people look at, so we can tell how many people are interested in Firstfall and improve the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

It runs only after you press Accept. Before that, and after you decline, the website does not load Google Analytics, and your browser does not contact Google.

What is processed

• the pages you view and when;
• the website you came from;
• your approximate location (country, region and city), derived from your IP address;
• your type of device, operating system, browser, screen size and language;
• how you use the pages, such as scrolling and clicks on links;
• a random identifier stored in cookies, so that a returning browser can be recognised.

Google Analytics 4 does not log or store IP addresses: it uses your IP address only to work out your approximate location and then discards it.

Cookies

Both cookies are set on firstfallgame.com and are deleted when you decline through "Cookie settings".

How we have set it up

• Google signals and all advertising features are switched off. The website tells Google that advertising storage and the use of your data for advertising are denied.
• Data linked to the cookie identifier is deleted after 2 months. Reports that are added up and hold no identifiers may be kept longer.
• We have accepted Google's data processing terms, so Google processes the data on our behalf and on our instructions (Article 28 GDPR).

Transfer outside the EU

Google may process the data on servers of Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR).

Legal basis and withdrawing consent

The legal basis is your consent (Article 6 (1) (a) GDPR and Section 25 (1) TDDDG). You can withdraw it at any time: choose "Cookie settings" at the bottom of any page, then Decline. The page then reloads without Google Analytics and the cookies are deleted. Withdrawing does not affect the processing that took place before.

More about how Google handles data: Google's privacy policy and Safeguarding your data in Google Analytics.

Your rights

You have the right to:

• get access to the personal data we hold about you (Article 15 GDPR);
• have incorrect data corrected (Article 16 GDPR);
• have your data deleted (Article 17 GDPR);
• have its processing restricted (Article 18 GDPR);
• receive your data in a common, machine-readable format (Article 20 GDPR);
• object to processing based on our legitimate interests (Article 21 GDPR);
• withdraw your consent at any time, with effect for the future (Article 7 (3) GDPR).

To use these rights, write to contact@headpat.space. Google Analytics shows us only random identifiers, not names. To find your data there, we need the identifier from your _ga cookie.

You also have the right to complain to a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, www.lfd.niedersachsen.de.

No obligation, no automated decisions

You do not have to give us any data. The website works fully without your consent. We make no automated decisions about you and do no profiling (Article 22 GDPR).

Changes

We update this policy when the website changes. The current version is always on this page.