Privacy policy

Contact

Mortal Ascent is an independently operated music and game project. Contact berg@mortalascent.com about personal data or this notice.

Data and purposes

• Site delivery and security: IP address, request/browser details and operational logs for delivering the site and preventing abuse. Basis: legitimate interests, Article 6(1)(f) GDPR.
• Games: your chosen nickname, progress, position, chat and scores provide the features you use. Nicknames, nearby activity and chat are visible to other participants; published scores include player nicknames. Basis: providing the requested service, Article 6(1)(b).
• Google sign-in: your Google identifier and verified email recognize your session and authorize operator access where applicable. They are not your public game identity. Basis: providing the sign-in you request, Article 6(1)(b).
• Email updates: Kit processes your email, subscription status and confirmation/unsubscribe records. Subscribing requests music and project news; every marketing email must provide an unsubscribe option. Basis: consent, Article 6(1)(a).
• Embedded players: SoundCloud, Bandcamp and YouTube receive your IP address and browser information when their players load, and may use cookies or similar storage. Players load with the relevant page or music controls, without a separate permission prompt. Their privacy policies below explain their processing.
• Visitor analytics: Vercel Web Analytics measures page views, referrals, device/browser information and approximate location to understand site use. Basis: legitimate interests in improving the site, Article 6(1)(f), where personal data is processed.
• Privacy requests: correspondence and proportionate verification information let us handle your request. Basis: legal obligations, Article 6(1)(c).

We use Vercel Web Analytics for aggregate visitor statistics. Vercel describes request-based visitor hashes, no third-party analytics cookies, and visitor sessions discarded after 24 hours. See Vercel’s analytics privacy information. We do not add Google account details or chat content to analytics events, sell personal data, or run advertising profiles.

Storage and retention

First-party storage retains your nickname, game progress and settings until you clear it. Sign-in cookies last up to eight hours; the solo-score browser cookie lasts up to one year. Sign-in protection is short-lived. Fonts are hosted locally.

Live game sessions expire after at most one hour under the current configuration, with a one-minute reconnection window. Chat is delivered live without a permanent message-history database; other visitors may keep copies. Scoreboards hold up to 1,000 entries per category. Published results remain until displaced, removed following a verified request, or the leaderboard is retired.

Kit retains subscription records while you subscribe and may retain limited suppression/consent evidence after unsubscribe. Provider logs, backups, aggregate analytics reports and request correspondence have separate retention periods based on service configuration, security needs and applicable legal obligations. Contact us for details relevant to your records.

Providers

Vercel provides hosting and analytics; Upstash Redis supports shared game data and content; Kit handles email subscriptions; Google provides sign-in. Embedded players and external artwork hosts receive information needed to deliver their content. External payment platforms handle purchases; this site does not collect card details.

Providers may process data outside the EEA. Relevant processing terms and transfer safeguards depend on the configured service; contact us for the applicable arrangements. Provider policies: Vercel, Upstash, Kit, Google/YouTube, SoundCloud, Bandcamp.

Your rights

Email berg@mortalascent.com to request access, correction, erasure, restriction or portability, or to object to processing based on legitimate interests. These rights depend on their applicable legal conditions. You may withdraw consent at any time without affecting earlier lawful processing; you may object to direct marketing at any time.

We normally respond within one month, without charge. If a permitted extension is needed, we explain it within that month. We may ask for proportionate information to verify a request. You may complain to the authority where you live, work or believe a breach occurred: European authority directory.