Privacy Policy
Last updated: 13 September 2026
Nordlicht Games respects your privacy and is committed to protecting personal data processed through this website.
This Privacy Policy explains what personal data may be processed when you visit our website, subscribe to our newsletter or view embedded third-party content.
1. Data Controller
The controller responsible for the processing of personal data through this website is:
Kimmo Tanner, operating under the name Nordlicht Games
Germany
For privacy-related requests, please use the same Nordlicht Games contact email address already used on this website.
Nordlicht Games is currently in the process of establishing its legal company entity. This Privacy Policy will be updated with the relevant company information once the company has been formally established.
2. Website Hosting
Our website is a primarily static website hosted using Netlify.
When you access the website, technical information may automatically be processed by the hosting infrastructure in order to deliver the website securely and reliably.
This may include information such as:
- •IP address
- •date and time of access
- •requested pages or resources
- •browser and device information
- •operating system
- •technical request and security information
We do not use this information to create personal user profiles.
The processing of technical information required for the operation and security of the website is based on our legitimate interest in providing a secure and functional website in accordance with Article 6(1)(f) GDPR.
3. Newsletter
Visitors may voluntarily subscribe to the Nordlicht Games newsletter.
The newsletter may contain information about Nordlicht Games, Academies of War: The North Ignites, game development, releases, events and other related studio news.
For the newsletter, we process the email address provided by the subscriber and information required to document the subscription and consent process.
The processing and sending of the newsletter is based on your consent in accordance with Article 6(1)(a) GDPR.
You can withdraw your consent at any time by using the unsubscribe link included in our newsletter emails.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Brevo
We use Brevo to manage newsletter subscriptions and send newsletter emails.
When you subscribe to our newsletter, the information entered into the subscription form is transferred to and processed through Brevo for the purpose of managing the subscription and sending our newsletter.
Our newsletter subscription form includes GDPR-related consent information.
We also use a double opt-in process, where applicable. This means that after submitting your email address, you may be required to confirm your subscription through a confirmation email before receiving the newsletter.
Information relating to the subscription and confirmation process may be retained as evidence that valid consent was provided.
More information about Brevo's data protection practices is available in the Brevo Privacy Policy:
https://www.brevo.com/legal/privacypolicy/
5. Embedded YouTube Content
Our website includes video content embedded from YouTube using YouTube's Privacy-Enhanced Mode (youtube-nocookie.com), a service provided by Google.
According to YouTube, Privacy-Enhanced Mode limits the use of embedded video views for personalisation. However, when the embedded player is loaded or used, technical information may still be transmitted to Google/YouTube. This may include:
- •your IP address
- •browser and device information
- •information related to the video request
If you are logged into a Google or YouTube account, Google may be able to associate your interaction with the embedded content with your account.
Nordlicht Games does not control the independent processing of personal data carried out by Google or YouTube.
More information about Google's processing of personal data is available in the Google Privacy Policy:
https://policies.google.com/privacy
6. No User Accounts or Additional Data Collection
The Nordlicht Games website currently does not provide user accounts, online purchases, community profiles or other services requiring visitors to provide personal data.
Apart from the newsletter subscription functionality described above, we do not intentionally collect personal information directly through the website.
7. Data Sharing
We do not sell personal data.
Personal data may be processed by service providers where this is necessary for the operation of the website and newsletter.
Our relevant service providers currently include:
- •Netlify, for website hosting and infrastructure
- •Brevo, for newsletter management and email delivery
- •Google / YouTube, for embedded video content
Personal data may also be disclosed where required by law.
8. International Data Transfers
Some service providers may process data outside Germany or the European Economic Area.
Where required under applicable data protection law, such transfers must be based on appropriate legal safeguards, such as an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.
9. Data Retention
We retain personal data only for as long as necessary for the relevant purpose or as required by applicable law.
Newsletter subscriber information is generally retained while the subscription remains active.
After an unsubscribe request, we stop using the relevant email address for newsletter distribution. Limited information may be retained where necessary to document consent, withdrawal of consent or compliance with legal obligations.
10. Your Rights
Under the GDPR, depending on the circumstances, you may have the right to:
- •request access to your personal data
- •request correction of inaccurate personal data
- •request deletion of personal data
- •request restriction of processing
- •object to certain processing
- •receive personal data in a portable format
- •withdraw consent at any time where processing is based on consent
- •lodge a complaint with a competent data protection supervisory authority
For privacy-related requests, please use the Nordlicht Games contact email address provided on this website.
11. Supervisory Authority
You have the right to lodge a complaint with a competent data protection authority if you believe that your personal data has been processed unlawfully.
For activities based in Hessen, the relevant supervisory authority is generally:
Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Hessian Commissioner for Data Protection and Freedom of Information
Wiesbaden, Germany
12. Changes to this Privacy Policy
We may update this Privacy Policy if our website, services, service providers or legal obligations change.
The current version will be published on this website together with the date of the latest update.