Privacy statement
What we do with your data when you fill in a form or email us, and what we deliberately do not do.
1. Who is responsible for your data
KISSIT B.V.
Dutch Chamber of Commerce (KvK) number: 73795836
E-mail: info@sdshunter.com
KISSIT B.V. is the controller within the meaning of the General Data Protection Regulation (GDPR) for the data processed through sdshunter.com. We have no data protection officer; privacy questions can be sent to the e-mail address above.
2. Our starting point
We ask for as little data as possible, we do not keep it longer than necessary, and we never sell it. You can read this entire site without leaving anything about yourself behind except the technical data any website inevitably receives.
3. What we process, what for, and on what legal basis
3.1 Contact and feedback form
| Data | Your name, your e-mail address, the subject you select and the text of your message |
|---|---|
| Purpose | To answer your question and to read and assess player feedback |
| Legal basis | Our legitimate interest in being able to answer messages (Article 6(1)(f) GDPR); for a question preceding an agreement: Article 6(1)(b) GDPR |
| Retention | 24 months after the last correspondence, after which we delete the message |
3.2 Business enquiry form
| Data | Company name, contact person's name, e-mail address, telephone number if given, the topics you tick and the print run you want |
|---|---|
| Purpose | To assess your enquiry, make a proposal and stay in touch about it |
| Legal basis | Performance of or steps prior to a contract (Article 6(1)(b) GDPR) and our legitimate interest in business communication (point (f)) |
| Retention | 24 months after the last contact, or longer if a business relationship arises |
3.3 E-mail
If you e-mail us directly, we process your e-mail address and the content of your message in order to reply. Legal basis: legitimate interest. We keep correspondence for 24 months, unless it forms part of records we are required to keep longer.
3.4 Technical data and spam protection
| Data | IP address, time, page requested, response code, browser type; for forms, additionally a temporary counter per IP address (maximum five submissions per hour) and the time between opening and submitting the form |
|---|---|
| Purpose | Displaying the site, diagnosing faults, preventing misuse and spam |
| Legal basis | Our legitimate interest in a working and secure website (Article 6(1)(f) GDPR) |
| Retention | Log files: usually no longer than a few weeks at our hosting provider. The spam counter: one hour |
3.5 Visit statistics
| Data | Your IP address, the pages you request, the time, your browser type and screen size, and the page you came from |
|---|---|
| What for | To see which pages are read and how visitors find the site |
| Legal basis | Our legitimate interest in understanding how our own site is used (article 6(1)(f) GDPR) |
| Retention | Six months for the individual visit records; after that only summarised reports remain, such as visits per month |
For this we use Matomo, analytics software that runs on our own server. The data stays in our own database: it does not go to Google or to any other analytics company, and it is not used to follow you across other websites. No cookies are set for it either — see the Cookie policy.
If you would rather not be counted, let us know at the address at the bottom of this statement and we will exclude your visits from the statistics.
3.6 Orders (not yet active)
Once we sell the game through this site or through a crowdfunding campaign, we will also process your name, address, e-mail address and details of your order and payment. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and, for the financial records, a legal obligation (point (c)) with a retention period of seven years. We will update this statement when that happens.
3.7 What we do not do
We have no newsletter, we use no tracking cookies, we do not combine your data with data from other sources, and we do not carry out profiling or automated decision-making with legal effects.
4. Where your data ends up
What you submit through a form ends up in two places:
- as an e-mail in our mailbox;
- as a private message in the website's database, so that a submission is not lost if something goes wrong with the e-mail. Those messages are only visible after logging in to the site's admin area.
We also engage the following parties as processors or recipients:
- our hosting provider, which runs the website and the database and keeps the server log files;
- our e-mail and delivery service, which delivers the messages;
- an accountant or bookkeeping firm, solely for invoicing data, once sales take place.
The visit statistics from 3.5 are deliberately absent from this list: that software runs on our own server, so no other party is involved.
We conclude data processing agreements with our processors. We do not provide data to anyone else unless we are legally obliged to.
5. Transfers outside the European Economic Area
We choose parties that process data within the EEA, and at present there is no structural transfer at all to a country outside it. Until September 2026 the site's typeface was fetched from Google, a US company; that file now sits on our own server, which removed that transfer. Our visit statistics likewise run on our own server.
Should that ever change, we will name the party and the legal basis here and update this statement.
6. Security
The site runs over a secure connection (HTTPS). Forms are protected with a nonce, a hidden anti-bot field, a minimum completion time and a limit on the number of submissions per hour. Access to the admin area and to stored messages is limited to the people who need it for their work.
If you suspect a leak or a vulnerability, please report it to info@sdshunter.com. We handle such reports carefully and respond as quickly as we can.
7. Your rights
You have the right to:
- request access to the data we hold about you;
- have that data corrected or completed;
- have it erased;
- have processing restricted;
- object to processing based on our legitimate interest;
- receive or have transferred your data in a common format, in so far as we process it on the basis of consent or a contract;
- withdraw consent you have given, without affecting the lawfulness of processing before that.
Send your request to info@sdshunter.com. We respond within one month. To be sure the request comes from you, we may ask for additional information — but we will never ask for a copy of your identity document.
If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own EU country. We would appreciate it if you told us first, so we can put it right.
8. Children
The game is intended for ages 14 and up, but this website is aimed at adults: parents, teachers, players and business customers. We do not knowingly ask for data from children under 16 and we do not invite children to sign up for anything.
If you believe your child has left data with us without your permission — for example through the contact form — e-mail info@sdshunter.com and we will delete it.
9. Changes to this statement
We may amend this privacy statement, for example if we start using a new service or begin selling the game. The version number and the date of the last change are always shown at the top. We will flag significant changes clearly on the site.
10. Contact
KISSIT B.V. — info@sdshunter.com — KvK 73795836
Version 1.1 — last updated 26 September 2026