Privacy
The short version: this site sets no tracking cookies, loads nothing from anybody else, counts visits without identifying anyone, keeps a waitlist address only to tell you about Thaldrun, and records play statistics only for invited testers who say yes.
Last updated 8 October 2026.
Who is responsible
The controller of the personal data described here is LINX & partneři, s.r.o., IČO 25678329, Kostelec nad Černými lesy, Czech Republic (“we”). Write to privacy@thaldrun.com about anything on this page — including every request listed under Your rights. We have not appointed a data protection officer; we are not required to.
Visiting the website
To deliver a page, our hosting provider Cloudflare necessarily processes your IP address and the technical details your browser sends (such as its user agent). This is required to show you the site and to protect it from attacks (legitimate interest, GDPR art. 6(1)(f)).
We count visits without cookies and without storing anything on your device. For each page view we add one to a daily counter for that page, the referring website’s domain (or a campaign tag in the link), your country as Cloudflare determines it from the IP address, and the device class (desktop, mobile or tablet). To count unique visitors we compute a one-way hash of your IP address, your user agent and a random value that changes every day. The random value and all hashes of a day are deleted within 48 hours; afterwards only the number of visitors remains. We never store IP addresses. The purpose is to understand how many people are interested in Thaldrun (legitimate interest, art. 6(1)(f)); you can object at any time, see Your rights.
The waitlist
If you leave your email on the front page, we store the address, the time you agreed, the exact wording you agreed to, and — if you confirm by email — the time of confirmation. We use it only to write to you about Thaldrun: playtests and the release, a few emails at most. The legal basis is your consent (art. 6(1)(a) GDPR, and § 7(2) of Czech act 480/2004 Coll. for the emails themselves).
You can withdraw at any time: every email has a one-click unsubscribe link, and this page removes an address at once. Unsubscribing deletes the address; we do not keep it on a suppression list. An address that is never confirmed is deleted after 7 days. A confirmed address is kept until you unsubscribe, and at most 3 years after you signed up — after that we would have to ask you again.
The closed test
The game itself is available only to people we invite, who sign in with their email address and a password. If you are one of them:
- Your account. We keep your email address, the name or nickname we know you by (possibly a short note), when your access was created and whether it is still valid, and your password — only as a salted hash that cannot be turned back into the password. We use your address to sign you in and to email you the link that sets your password, or resets it when you ask. This is what taking part in the closed test needs (art. 6(1)(b) GDPR).
- Sign-in cookie. Signing in sets one cookie,
__Host-thaldrun_play, that keeps you signed in for 30 days. It is strictly necessary for the service you asked for, so it needs no consent (Czech act 127/2005 § 89(3)). - Access log. Each time you sign in or open the game we log the time, which version of the game you opened, your country and your device class, browser and operating system family (for example “desktop, Firefox, Windows”). This lets us notice an account that is shared or abused (legitimate interest, art. 6(1)(f)). It is deleted after 180 days.
- Play statistics — only if you choose them. When you first set your password you choose whether the game sends us statistics. If you agree, it reports how long you play (time with the game visible and in use), the game version, your screen size and browser language, which screens you visit, the characters you create (race, class, mode), the levels and areas you reach, how runs end, frame rate, and technical error reports. Nothing of what you type, no saves and no precise location. The legal basis is your consent (art. 6(1)(a) GDPR and Czech act 127/2005 § 89(3)). You can change your choice, or delete everything already collected, at any time on your test page. Statistics are deleted after 365 days.
- Your saved games are stored only in your browser on your device (local storage). They are never sent to us, and clearing the site’s data in your browser deletes them. If you are allowed to play older versions of the game, each of them keeps its own separate saves there too.
When the closed test ends for you, or 365 days after your last visit at the latest, we delete your account and everything linked to it.
Writing to us
If you email us, we use your message and address to answer you (legitimate interest, art. 6(1)(f)) and keep them as long as the conversation needs, normally no longer than a year. Mail to our addresses is forwarded by Cloudflare Email Routing to a mailbox provided by Google (Gmail).
Cookies and storage on your device
| Name | Who gets it | Purpose | Lifetime |
|---|---|---|---|
__Host-thaldrun_play | Invited testers | Keeps you signed in to the closed test (strictly necessary) | 30 days |
__Host-thaldrun_admin | The developer only | Admin sign-in (strictly necessary) | 12 hours |
| Game storage | Invited testers | Your saves, settings and progress, kept in your browser | Until you clear it |
There are no analytics, advertising or social-media cookies, and no third-party scripts, fonts or images.
Who else processes the data
We do not sell, rent or share personal data. The only service provider involved is Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA), which hosts the site, stores the database and delivers our emails as our processor under its Data Processing Addendum. Our database is restricted to Cloudflare’s data centres in the European Union. Requests to the site are served by the Cloudflare data centre nearest to you, which may be outside the EU; such transfers rely on Cloudflare’s certification under the EU–US Data Privacy Framework and on the EU Standard Contractual Clauses in its Data Processing Addendum. For emails you send us, see Writing to us.
How long we keep what
| Data | Kept for |
|---|---|
| Visitor hashes and the daily random value | Under 48 hours |
| Visit counts (no personal data) | Indefinitely |
| Unconfirmed waitlist address | 7 days |
| Confirmed waitlist address | Until you unsubscribe, at most 3 years |
| Tester account (email, password hash) | Until the test ends for you, at most 365 days after your last visit |
| Access log | 180 days |
| Play statistics | 365 days, or until you delete them |
Your rights
You have the right to access the data we hold about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest. Where we rely on consent you can withdraw it at any time; this does not affect what was done before. Write to privacy@thaldrun.com; we answer within one month. We may ask you to confirm that the request comes from you — for example by writing from the address in question.
You also have the right to complain to a supervisory authority — in the Czech Republic the Úřad pro ochranu osobních údajů (Pplk. Sochora 27, 170 00 Praha 7), or the authority where you live or work.
Everything else
We make no automated decisions about you and build no profiles. The waitlist and the closed test are for people aged 16 or over. Providing any of this data is voluntary; without it you simply cannot join the waitlist or the test. If this page changes in substance we will update the date at the top, and tell waitlist subscribers and testers if the change affects them.