Privacy policy

Last updated: 8 November 2026

Scope

This privacy policy explains how we process personal data on the website sunsfall.com, when you email us and on our Facebook page.
The Sunsfall game (play.sunsfall.com) is not open yet. Before it opens, we will extend this policy to cover game accounts and gameplay.

Norbert Góbor, sole proprietor (Góbor Norbert e.v.), Vasvári Pál u. 36, 6900 Makó, Hungary. Data protection: [email protected]; general contact: [email protected]. Further details are in the imprint.
We have not appointed a data protection officer because we are not required to.

This website is hosted by Cloudflare (Cloudflare Pages), which also delivers it through its network and protects it against attacks. With every page request, your browser sends technical data to Cloudflare: your IP address, the date and time, the page requested, the referring page, and information about your browser, operating system and language settings. Cloudflare processes these data on our behalf to deliver the website securely.
We do not keep our own access logs for this website. In the Cloudflare dashboard we see aggregated statistics (for example the number of requests and visitors' countries) and security events, which can include the IP address of a blocked request.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure, stable and fast website.
Fonts are served from our own website; no data is sent to font providers. What is stored on your device is explained on the analytics information page.

When you email us, we process your email address, your message and any other data it contains in order to answer you.
Emails to our addresses are received by Cloudflare's email routing service and forwarded to our mailbox at Google (Gmail). For users in the EEA, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google provides the mailbox under its own terms of service and privacy policy, not under a data processing agreement with us, and may also process the data in the USA.
Legal basis: Art. 6(1)(f) GDPR (answering your message); Art. 6(1)(c) GDPR where we have to answer a request to exercise your data protection rights.
We delete correspondence when it is no longer needed, at the latest 2 years after your matter has been dealt with, unless we need it for longer to establish, exercise or defend legal claims.

We run a page on Facebook (facebook.com/sunsfall). In the EU, Facebook is operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta processes the data of page visitors under its own responsibility; see Meta's privacy policy at facebook.com/privacy/policy.
This website only links to the page. It does not embed Facebook content, plugins or pixels, so your browser sends no data to Meta unless you follow the link.
For the page statistics (Page Insights), we and Meta are joint controllers (Art. 26 GDPR). In its Page Insights Controller Addendum (facebook.com/legal/terms/page_controller_addendum), Meta has taken on primary responsibility for this processing and handles requests about it; from it we only receive aggregated statistics.
We see comments and messages that you send us on Facebook, together with your profile name. We use them to answer you and delete messages when they are no longer needed, at the latest 2 years after your matter has been dealt with.
Our legal basis for the page and for answering messages is Art. 6(1)(f) GDPR. Our legitimate interest is presenting Sunsfall on social media and talking to people who are interested in it.

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA: hosting and delivery of the website, DNS and email routing. Processor under Cloudflare's data processing addendum.
Google Ireland Limited: our mailbox for incoming emails (Gmail), under Google's own terms (see above).
Meta Platforms Ireland Limited: our Facebook page (see above).
We do not sell personal data and do not share it for advertising.

Cloudflare is a US company, and Google and Meta have US parent companies, so data may also be processed in the USA. The European Commission has decided that the USA ensures an adequate level of protection for companies certified under the EU-US Data Privacy Framework (Art. 45 GDPR); Cloudflare, Google LLC and Meta Platforms, Inc. are certified under it.
In addition, our contract with Cloudflare includes the EU standard contractual clauses (Art. 46(2)(c) GDPR), on which we would rely if the adequacy decision ceased to apply.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and you can withdraw your consent at any time with effect for the future (Art. 7(3)).
To exercise your rights, write to [email protected].
You can lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work or where the alleged infringement took place. The authority responsible for us is the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH), Falk Miksa utca 9–11, 1055 Budapest, Hungary; postal address: 1363 Budapest, Pf. 9; [email protected]; www.naih.hu.
You also have the right to an effective judicial remedy before a court (Art. 79 GDPR). In Hungary, the regional courts (törvényszék) decide such cases; you can also bring the case before the regional court for your place of residence.

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then stop the processing unless we can demonstrate compelling legitimate grounds for it that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. To object, write to [email protected].

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR), and we do not create profiles.

We update this policy when our processing changes, in particular before the game opens. The date at the top shows which version is current.