Privacy Protocols

Last Updated: 3 December 2025

Effective Date: 3 December 2025

1. Data Controller Identity

This terminal is operated by the developers of Field of Command.

Contact for Data Protection Queries: support@fieldofcommand.com

For any questions about how we handle your personal data, please contact us at the address above.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you sign up for our newsletter or accept analytics cookies, you provide explicit consent for us to process your data.
• Legitimate Interest: To improve our website and understand how visitors use our services.

3. Intelligence Collection

We only collect the following data when you voluntarily enlist:

• Email Address: Collected via our sign-up form for the Field Report newsletter. Stored in Cloudflare KV database.
• IP Address: Temporarily stored for rate limiting purposes (deleted after 1 hour).
• Analytics Cookies: Used only if you accept cookies. Google Analytics collects anonymized usage data (IP anonymization enabled).

Data We Do NOT Collect: We do not collect names, addresses, phone numbers, payment information, or any other personal identifiers beyond email addresses.

4. Purpose of Data Processing

We use your email address solely to:

• Send development updates and "Field Report" newsletters.
• Send invitations to Alpha/Beta playtests.
• Respond to your data protection requests.

We use analytics data to:

• Understand how visitors use our website.
• Improve user experience and website performance.
• Track which features are most popular.

We do not sell, rent, or trade your data to any third parties.

5. Data Retention

We retain your personal data for the following periods:

• Email Addresses: Until you unsubscribe or request deletion, whichever comes first.
• IP Addresses (Rate Limiting): Maximum 1 hour, then automatically deleted.
• Analytics Data: Google Analytics retains anonymized data for 14 months (configurable in GA4 settings).
• Cookie Consent Records: Stored locally in your browser until you clear browser data.

6. Third-Party Data Processors

We use the following trusted third-party services to process your data:

• Cloudflare Pages & KV: Hosts our website and stores newsletter email addresses. Data stored in EU/UK regions where possible. Cloudflare Privacy Policy
• Google Analytics 4: Analyzes site traffic with IP anonymization enabled. Google Privacy Policy

International Transfers: Cloudflare and Google may transfer data to the USA under Standard Contractual Clauses (SCCs) approved by the UK ICO. These transfers are protected by appropriate safeguards.

7. Cookies & Tracking Technologies

We use cookies only with your explicit consent. You can accept or reject cookies via our cookie banner.

Note: Analytics cookies are ONLY set if you click "CONFIRM" on the cookie banner.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restriction: Request we stop processing your data (but retain it).
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing).

How to Exercise Your Rights: Contact us at support@fieldofcommand.com. We will respond within 30 days.

Unsubscribe from Emails: Click the unsubscribe link in any newsletter email.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS Encryption: All data transmitted to/from our site is encrypted via TLS.
• Rate Limiting: Prevents automated attacks on our signup form (max 3 submissions per hour per IP).
• Email Validation: Ensures only valid email addresses are stored.
• Cloudflare Security: DDoS protection, WAF, and secure data storage.
• No Payment Data: We do not collect or store payment information.

10. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

The only automated processing is rate limiting (to prevent spam), which does not constitute automated decision-making under GDPR.

11. Children's Privacy

Our website is not directed at children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately for deletion.

12. Changes to This Policy

We may update this privacy policy from time to time. The "Last Updated" date at the top indicates when changes were made. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Your Right to Complain

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk/make-a-complaint/
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Contact Us

For any questions about this privacy policy or how we handle your data, please contact:

Email: support@fieldofcommand.com
Subject Line: "Data Protection Query - Field of Command"

We aim to respond to all queries within 30 days.