Privacy Policy

1. Who we are and what this covers

ARCHEVIA is developed and published by BORMANSA (“we”, “us”, “our”). For the purposes of the EU/UK General Data Protection Regulation and the Turkish Personal Data Protection Law No. 6698 (KVKK), BORMANSA is the data controller for the processing described here.

This policy applies to the archevia.com website and to the ARCHEVIA game builds we distribute on Steam, the Apple App Store and Google Play. It does not apply to the storefronts themselves: Valve, Apple and Google each act as independent controllers for the data they collect when you browse or buy, and their own policies govern that.

It also does not apply to sites we link out to — a press outlet, a video platform, a social network. Once you follow a link you are on someone else's terms.

Data controller: BORMANSA. Contact for all privacy matters: info@bormansa.com.

2. What we collect, and why

The table below is the complete list. If a category is not in it, we do not process it.

We do not build profiles, we do not score or segment you, and no automated decision-making with legal effects takes place.

3. The announcement list

If you enter your email address on this site, it is sent to info@bormansa.com and used for one purpose: telling you about ARCHEVIA. Release dates, development logs, and invitations to closed tests. Nothing is sold, rented, swapped or handed to an advertising network — not now, not later.

Consent is the only basis for this, which means you can withdraw it whenever you like. Every message we send carries an unsubscribe link, and a one-line email to us has exactly the same effect. Withdrawing consent does not affect anything we sent before you withdrew it.

We do not use tracking pixels to measure whether you opened a message, and we do not rewrite the links inside it to log your clicks.

4. What we deliberately do not collect

Being explicit about the absences matters as much as listing the presences:

• No advertising identifiers — no IDFA on iOS, no Advertising ID on Android, no ad SDKs of any kind.
• No analytics you did not agree to. Google Analytics is fetched only after you accept it; if you decline, or simply never answer, the script is never loaded at all. There is no Meta pixel, no advertising SDK and no tag manager.
• No cross-site or cross-device tracking, and no data brokers.
• No location data, contacts, photos, microphone or camera access.
• No in-game telemetry that identifies you, and no gameplay data sent back to us.
• No account, no password and no payment card details — we never see or store a card number.
• No special-category data (health, beliefs, biometrics) and no attempt to infer any.

5. What is stored in your browser

This site sets no advertising cookies. It keeps a few small values in your own browser's local storage so it behaves the way you left it — your colour theme, your language, whether you have already seen the opening animation, the address you typed into the announcement form, and the answer you gave to the cookie banner.

Those values stay on your device. They contain no identifier, they are never transmitted to us, and clearing your browser data removes them completely.

If, and only if, you accept analytics, Google Analytics additionally sets two cookies of its own and sends the statistics described above to Google. Decline and neither cookie is ever written, because the script that would write them is never loaded.

The Cookie Policy lists every stored key, what it holds and how long it lasts — and lets you change your analytics answer on the spot.

6. If you play on Steam

Steam is operated by Valve Corporation. When you visit our store page, wishlist the game, buy it or play it, Valve processes your data as an independent controller under the Steam Subscriber Agreement and the Valve Privacy Policy. We have no access to your Steam account, your payment details or your library.

What we do receive from Valve is aggregate, anonymous and statistical: wishlist and sales totals, refund rates, review counts, and a breakdown by country and language. None of it identifies an individual player and none of it can be traced back to you.

If you post a review or write in our Steam forums, that content is public and hosted by Valve. Removing it is done through Steam, not through us.

7. If you play on the Apple App Store (iOS / iPadOS)

Apple processes your purchase, your Apple Account and your download history as an independent controller. We receive only App Store Connect's aggregate sales and territory reports, plus anonymous crash traces if you have opted in to share diagnostics with developers — Apple strips these of anything that identifies you before we ever see them.

The App Store privacy label for this app declares the following, which is the same list we publish here:

The app requests no permission for location, contacts, photos, microphone, camera, Bluetooth or local network.

8. If you play on Google Play (Android)

Google LLC processes your purchase, your Google Account and your download history as an independent controller. We receive only Play Console's aggregate reports and, where you have enabled sharing, anonymous crash and ANR traces from Android Vitals.

The Data safety section on our Play listing declares the following:

The app declares no dangerous runtime permissions and no advertising identifier permission.

9. Who else sees your data

Only the service providers we need to run the site and answer email, and only for that purpose. They act on our written instructions as processors under GDPR Art. 28, and they may not use your data for their own ends.

• Our web hosting and CDN provider, which serves the pages and keeps short-lived access logs.
• Our email provider, which delivers and stores the messages you send us and the announcements we send you.
• Typefaces are loaded from Google Fonts, which means your IP address reaches Google's servers when the page loads.
• Google Analytics, but only after you have accepted it. Google acts as our processor for it; GA4 does not store IP addresses, we have not enabled Google Signals or advertising personalisation, and the measurements are not shared with any advertising product.

Beyond that we disclose personal data only where the law compels us to, or to establish or defend a legal claim. We have never sold personal data and we will not.

10. International transfers

Our providers may store data outside your country, including in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses, or an adequacy decision, or the provider's Data Privacy Framework certification, so that the protection travels with the data.

Under KVKK, transfers abroad take place on the basis of your explicit consent or on one of the other grounds in Article 9, and the recipients undertake the safeguards that Article requires.

11. How long we keep things

Email addresses on the announcement list are kept until you unsubscribe or ask for deletion — no longer. Correspondence is kept for 24 months after the exchange ends, so that we can pick up a thread you return to. Server logs are deleted or aggregated within 30 days. Anything we are legally required to retain, such as invoices, is kept for the period the law sets and then removed.

12. Your rights (GDPR / UK GDPR)

If you are in the EEA, the United Kingdom or Switzerland, you have the right to:

• Know what we hold about you and get a copy of it (access).
• Have inaccurate data corrected (rectification).
• Have your data deleted (erasure).
• Have processing restricted while a dispute is resolved.
• Receive your data in a portable, machine-readable form.
• Object to processing that we base on legitimate interests.
• Withdraw consent at any time, without affecting what came before.
• Complain to your national supervisory authority.

Write to info@bormansa.com and we will answer within 30 days. We do not charge for this and we will not ask you to create an account to exercise a right.

13. Your rights under KVKK (Türkiye)

BORMANSA is the veri sorumlusu (data controller) within the meaning of Law No. 6698. Under Article 11 you may ask us whether your personal data is being processed, request information about it, learn its purpose and whether it is being used accordingly, learn the third parties it has been transferred to at home or abroad, request correction or deletion, request that the correction or deletion be notified to those third parties, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.

Requests are made in writing to info@bormansa.com and are answered within thirty days at the latest, free of charge unless the response requires a separate cost, in which case the tariff set by the Personal Data Protection Board applies.

14. Your rights in California and other US states

If you are a resident of California, Colorado, Connecticut, Virginia or another state with a comprehensive privacy law, you may request access to, correction of, or deletion of your personal information, and may appeal a decision we make about such a request.

We have not sold or shared personal information for cross-context behavioural advertising in the preceding twelve months, and we do not process it for targeted advertising or profiling. Because we do not sell or share, there is nothing to opt out of — but you may still exercise the access and deletion rights above, and we will not discriminate against you for doing so.

15. Children

This website is not directed at children and we do not knowingly collect personal data from anyone under 16 (or under 13 where local law sets that threshold). The announcement list is intended for adults.

If you believe a child has given us their email address, write to info@bormansa.com and we will delete it without asking for anything else.

16. How we protect what we hold

Every connection to this site is encrypted with TLS. Access to the mailbox and the announcement list is limited to the people at the studio who need it, and protected by multi-factor authentication. We keep the least data we can, for the shortest time we can, which is the most effective safeguard there is.

No system is perfect. If a breach occurs that is likely to put your rights at risk, we will notify the competent supervisory authority within 72 hours and tell you directly without undue delay.

17. Changes to this policy

As the game moves toward release this policy will change with it — a store page opens, a build ships, a provider is swapped. The date at the top of this page always reflects the current version.

If a change materially affects how we handle data you have already given us, we will say so on this page and, where you are on the announcement list, by email before the change takes effect.

18. Contact

Every privacy question, request or complaint goes to the same address: info@bormansa.com. Please say what you are asking for so we can deal with it quickly.

If you are in the EEA or the UK and you are not satisfied with our answer, you may complain to your national data protection authority. In Türkiye, that is the Kişisel Verileri Koruma Kurumu (KVKK).