Legal
Privacy notice
What we collect, why we collect it, and the rights you have over it.
Last updated: 15 September 2026
This notice explains how Guubra Games ("we") handles personal data collected through guubragames.com. We are the data controller for that data.
Who we are
| Controller | Guubra Games VOF, trading as Guubra Games |
|---|---|
| Registered in | the Netherlands (KvK 42155061) |
| Contact | info@guubragames.com |
What we collect
Newsletter signup
When you subscribe we collect your email address, and the date and time you subscribed. That is the only thing the form asks for.
- Why: to send you the design diary, art and card reveals, and launch news.
- Legal basis: your consent (GDPR Article 6(1)(a)). You give it by submitting the form and can withdraw it at any time.
- How long: until you unsubscribe. We do not delete addresses automatically after a period of inactivity, and every email carries a one-click unsubscribe link.
- Processor: EmailOctopus stores the list and delivers the emails on our behalf, under a data processing agreement. See the EmailOctopus privacy policy.
Bot protection on the form
Our newsletter provider protects the signup form with Google reCAPTCHA. When you load a page containing the form, Google receives your IP address and technical signals about the browser session so it can tell people from bots. This is necessary to keep the list usable (GDPR Article 6(1)(f), legitimate interests). We see only whether a submission passed the check. See Google's privacy policy; if you would rather not load it, email us and we will add you by hand.
The class quiz
The quiz at /choose-your-fighter/ runs entirely in your browser. Your answers and your result are not sent to us and are not stored on our servers.
Server logs
Our host, Netlify, processes standard technical data needed to serve the site - including IP address, browser type and requested page. This is necessary to deliver and secure the site (GDPR Article 6(1)(f), legitimate interests). These logs are kept by Netlify under their own retention schedule; we do not read them, export them or use them for anything else. See the Netlify privacy policy.
What we do not do
- We do not sell or rent your personal data.
- We do not use it for advertising or profiling.
- We do not ask for more than we need - the newsletter form takes an email address and nothing else.
Who your data is shared with
Only with the service providers needed to run the site: our host (Netlify) and our newsletter provider (EmailOctopus). Both act as processors under contract, and neither may use your data for their own purposes.
EmailOctopus is based in the United Kingdom, which the European Commission has recognised as providing an adequate level of data protection. Netlify is US-based, and transfers outside the EEA are covered by the safeguards set out in their data processing terms. Both providers publish their own privacy policies: EmailOctopus and Netlify.
Your rights
Under the GDPR you can ask us to:
- Access the personal data we hold about you
- Correct it if it is wrong
- Delete it ("right to be forgotten")
- Restrict or object to how we use it
- Receive a copy in a portable format
- Withdraw consent at any time - every newsletter has a one-click unsubscribe link
Email info@guubragames.com and we will respond within one month. If you are unhappy with our answer you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Children
This site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has subscribed, email us and we will remove it.
Changes
If we change this notice we will update the date at the top. Material changes to the newsletter will be announced in the newsletter itself.