Privacy Policy

Last updated: 02/11/2026

This page explains in practical terms what data SRADRAVEN uses to operate the website, accounts, Playtest Lab, forum and technical security measures. The current website code does not show advertising systems or advertising cookies.

Controller and contact

The data controller is SRADRAVEN, Milano. Privacy requests: privacy@sradraven.com.

Accounts and registration

When you create an account, the site processes the data required for registration and sign-in, including username, email, a hashed password, account role/status, Privacy and Terms acceptance timestamps, registration date and last login. Security functions may store technical identifiers derived from the IP address; passwords are not stored in plain text.

Email is used for account functions such as address verification, access recovery, service-related messages and other communications only where requested through the relevant settings.

Playtest Lab and feedback

The Playtest Lab is restricted to authorized accounts. The site may record approval status, access to test builds, project/build information, technical playtest events and feedback you submit voluntarily. Private builds remain separate from the public demo.

Forum and user content

Threads, replies, reports and community feedback are stored to provide and moderate the service. Usernames and content may be visible to other people where a section is public. The official BITS OVERLOAD discussion is publicly readable; replying requires an approved account.

If an account is deleted, the forum database is configured so the author can be detached from previously published content. You can contact SRADRAVEN to request removal of specific personal content where appropriate.

Cookies and session

The site uses technical cookies required for sessions and authentication. It also uses the sradraven_lang cookie to remember the selected language. Session cookies are configured with HttpOnly/SameSite protections and Secure over HTTPS. The current code does not show third-party advertising cookies.

First-party analytics

SRADRAVEN uses first-party analytics hosted on the same website. Measurements may include viewed pages, traffic source/referrer and UTM parameters, device, browser and operating system, language, active time, scroll depth, interaction events, performance and errors. Session identifiers are pseudonymous and rotate; an analytics session is treated as new after about 30 minutes of inactivity. No fingerprinting is introduced to identify real people.

To improve data quality, traffic may be classified as human, bot/crawler/scanner, internal/administrative or not yet classified. Classification uses technical signals such as known user agents, JavaScript presence and strongly mechanical navigation patterns; an “Other” browser is not automatically treated as a bot. Raw data remains available for internal audit while headline KPIs exclude bots and administrative traffic by default.

Anonymous visitors use pseudonymous identifiers for counting; authenticated users may have the account ID linked to metrics needed for internal functions and analysis. Where the browser sends Global Privacy Control and the related website setting is enabled, the analytics code is designed not to track the request.

Technical and security logs

To protect accounts and infrastructure, the site may record security events and technical data such as visited path, user agent, device/browser, traffic source, hashed or masked IP information and activity relevant to abuse prevention. The currently declared ordinary technical-security retention setting is 30 days, subject to longer retention where needed for incidents, disputes or applicable obligations.

The current code integrates ipwho.is solely for technical security geolocation when that feature is enabled. In that case the IP address to be located is sent to the provider, without the username, visited path or account data. Results may include country, region, city and network/ISP information for security and diagnostics.

Hosting and external services

The site is hosted by Aruba S.p.A.. External links, including future game-distribution pages, are subject to the privacy policies of those services when you choose to visit them. This policy does not claim trackers or advertising platforms that are not present in the current code.

Purposes and legal grounds

Data is processed to provide requested functions, operate accounts and access, run playtests and community features, answer feedback/requests, maintain security, prevent abuse and understand the site's technical/aggregate performance. For EU users, depending on the context, processing may rely on performance of the requested service, legitimate interests in security and technical improvement, consent where specifically requested, and applicable legal obligations.

Retention

Account data is kept while the account remains active or for as long as needed for requests, security and applicable obligations. Technical logs are deleted or aggregated according to their retention rules. Detailed analytics data is periodically cleaned; aggregate statistics may be kept longer because they are not intended to reconstruct one person's browsing history.

Your rights

Where applicable, you may request access, correction, deletion, restriction or objection, and where provided by law data portability or withdrawal of consent. Contact privacy@sradraven.com with enough information to identify the account or request. You may also contact the competent supervisory authority.

Updates

This notice may be updated when website functions, processed data or technical services change. The date above identifies the latest published revision.