Privacy

Brave By Day ("we", "us", "our") is an independent games studio based in Malmö, Sweden. This page explains what personal data we collect on this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller is Brave By Day, Malmö, Sweden. If you have any question about your data, or want to exercise any of the rights listed below, email johanna@bravebyday.com. We will respond within one month.

What we collect and why

We do not collect any personal data through this site directly. The site has no signup form, no analytics, and no advertising trackers. The two ways your data is nonetheless touched are covered below: standard server logs, and third-party services embedded on the page.

Server logs

Our hosting provider (Cloudflare) keeps standard access logs (IP address, request path, timestamp, user agent) for security and debugging. We do not add our own analytics or tracking. Cloudflare's own processing is described in Cloudflare's privacy policy.

• Legal basis: our legitimate interest in operating and securing the site (GDPR Article 6(1)(f)).

Local storage

The site stores one preference in your browser's local storage: whether you have turned on Eco mode. This never leaves your device. Clearing your browser storage removes it.

Third-party services embedded on this site

The following third parties receive a request from your browser when you load this site:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com): we load our typefaces from Google's font CDN, which means Google sees your IP address on page load. We plan to self-host these fonts to remove this dependency.
• Digital Beacon (digitalbeacon.co): a small script in the footer that measures and displays the estimated energy cost of loading the page.
• Substack (bravebyday.substack.com): our newsletter is hosted on Substack (Substack Inc., New York, USA). The "Subscribe on Substack" button links out in a new tab; any email address you give them is collected by Substack under their own privacy policy and Data Processing Addendum. No Substack script or tracker is loaded on our pages.

We do not use any analytics, advertising trackers, or cookies.

Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict processing.
• Data portability: receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time (this does not affect processing carried out before the withdrawal).
• Complain to a supervisory authority. Because we are established in Sweden, our lead authority is the Integritetsskyddsmyndigheten (IMY). You can also lodge a complaint with the supervisory authority in your own EU or EEA country of residence, work, or where you believe the issue occurred. The EDPB keeps a directory of national authorities.

To exercise any of these, email johanna@bravebyday.com.

Updates

We will update this page if anything material changes about how we handle your data. The date at the top of the page always reflects the last update.