Privacy Policy
This policy explains what personal data is processed when you visit cursedwings.com, contact us, or play Cursed Wings (the "game"), and what rights you have. It applies worldwide. It is written to meet the EU and UK General Data Protection Regulation (GDPR / UK GDPR) and to inform users in other regions as required by local law (see section 11).
1. Who is responsible
DIGITALDECKPhilipp Refeld
Harderweg 46
22549 Hamburg
Germany
Email: hallo@digitaldeck.de · Contact form
2. The short version
- No cookies, no tracking, no analytics, no ads – neither on this website nor in the game.
- No fonts, scripts or videos are loaded from third parties. Everything is served from our own server.
- We never sell or share personal data for advertising.
- Data is only processed where it is technically necessary: to deliver this website, to answer your messages, and for the game's optional online leaderboard.
3. Visiting this website
When you open a page, your browser sends technical data that our web server records in log files: IP address, date and time, requested page, referring page, browser and operating system (user agent), and status code. We need this to deliver the website and to keep it secure (detecting attacks and errors). Log files are deleted automatically after 7 days, unless a specific security incident requires keeping an entry longer.
The home page shows the current leaderboard ("Hall of Fame"). This is a request to our own server; it transmits no data about you beyond the technical log data above.
Legal basis (GDPR): Art. 6(1)(f) – our legitimate interest in providing a secure, working website.
4. Contacting us
If you write to us by email or use the contact form, we process the data you give us: your email address, optionally your name, the topic and your message. The form sends your message to our mailbox by email; it is not stored in a database.
To keep out spam we do not use Google reCAPTCHA or any other third-party service. Instead, your browser solves a small computing puzzle from our own server before the form can be sent (a "proof of work"); no cookies are set and nothing about you is analysed. Our server also limits how many messages one connection can send per hour and per day, using a one-way hash of the IP address. These counters are deleted after 30 days at the latest.
We use your data only to answer your request and delete the correspondence once it is settled, unless statutory retention periods (for example under German commercial or tax law) require us to keep it.
Legal basis: Art. 6(1)(b) GDPR where your request relates to the game you use, otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).
5. The game and its online leaderboard
Cursed Wings is a single-player game. Your save game, settings and unlocks are stored locally on your device (and with Valve if you use Steam Cloud). The game contains no tracking or analytics.
If your device is online, the game takes part in the online leaderboard and sends the following to our server:
| Data | Purpose | Storage |
|---|---|---|
| Random device ID (created by the game on first start; contains no hardware or personal data) | Linking your runs to one leaderboard entry | Stored only as a hash |
| Player name (chosen by you or, when started via Steam, your Steam display name) | Shown publicly on the leaderboard | Plain text |
| Run statistics (towers, enemies and bosses defeated, stage, game version, timestamps) | Calculating scores and preventing cheating | Plain text |
| IP address | Abuse protection (rate limiting, detecting manipulation) | Never stored in plain text; a salted hash is kept for 30 days |
Please do not use your real name or other personal information as a player name – it is visible to everyone.
Legal basis: Art. 6(1)(b) GDPR (providing the leaderboard as part of the game) and Art. 6(1)(f) GDPR (our legitimate interest in a fair leaderboard and a secure server).
Playing offline: the game is fully playable without an internet connection. No data is sent then, and you will not appear on the leaderboard.
6. Steam
If you buy or play Cursed Wings on Steam, the purchase, download, your Steam account, Steam achievements and Steam Cloud are handled by Valve Corporation under Valve's own privacy policy: store.steampowered.com/privacy_agreement. We do not receive your payment data. Links to Steam on this website are normal links; no data is sent to Valve until you click them.
7. Hosting and recipients
This website and the leaderboard server are hosted by netcup GmbH, Karlsruhe, Germany, on servers in Germany, under a data processing agreement pursuant to Art. 28 GDPR. Messages from the contact form are delivered by email to our mailbox at DIGITALDECK. We do not pass personal data to any other third parties unless we are legally required to (for example by a court order).
8. International transfers
We process your data in Germany (European Union). If you visit the website or play from outside the EU, your data is transferred to and processed in the EU, which offers a high level of data protection. We do not transfer personal data to countries outside the EU/EEA.
9. How long we keep data
- Web server logs: 7 days.
- Hashed IP values (leaderboard and contact form spam protection): 30 days.
- Leaderboard entries (player name, scores, run statistics): as long as the game is offered online, or until you ask us to delete them. Past seasons may be archived and remain visible as part of the game's history.
- Messages to us: until your request is settled, unless legal retention periods apply.
10. Your rights
Under the GDPR you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can also lodge a complaint with a data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information or the authority where you live.
To use your rights, email hallo@digitaldeck.de or use the contact form (topic "Privacy request"). For leaderboard data, please tell us your player name and roughly when you played so we can find your entry. We answer within one month and do not charge for requests.
11. Information for users in other regions
United States (including California under the CCPA/CPRA and other state privacy laws): We do not sell personal information and do not share it for cross-context behavioural advertising, and we have not done so in the past 12 months. We do not use sensitive personal information. The categories we collect are listed in sections 3 to 5: identifiers (IP address, random device ID, email address), internet activity (server logs) and game statistics. You have the right to know, delete and correct your personal information, and you will not be discriminated against for using these rights. You can make requests through the contact options above, also through an authorised agent.
Canada (PIPEDA): We collect personal information only for the purposes described here and with your consent where required. You can access and correct your information and withdraw consent by contacting us.
Brazil (LGPD): The legal bases correspond to Art. 7 V (performance of a contract) and IX (legitimate interest) LGPD. You can exercise your rights under Art. 18 LGPD through the contact options above.
United Kingdom and Switzerland: The rights described in section 10 apply accordingly under the UK GDPR and the Swiss Federal Act on Data Protection (FADP).
12. Children
The website and game do not ask for age, and we do not knowingly collect personal data from children under 13 (or the minimum age in your country). The leaderboard only requires a nickname. If you believe a child has given us personal data, please contact us and we will delete it.
13. Security
All connections to our server are encrypted (HTTPS/TLS). IP addresses are stored only as salted hashes, and access to the server is restricted to the operator.
14. Changes
We will update this policy when we add features or services, for example when the game is released on Steam. The date at the top shows the current version.