What we keep.
Why we keep it.

Scope and controller

Bannermarch is responsible for the processing described in this notice. The current public service includes bannermarch.com, its waitlist, and the playable public alpha at play.bannermarch.com.

This notice does not govern unofficial communities or third-party sites that merely discuss Bannermarch.

Information we collect

Website and waitlist

• Email address, subscription status, consent record, submission time, and signup source.
• Limited technical information used to deliver and secure the site, such as IP address, browser and device information, request time, requested path, security signals, and diagnostic identifiers.
• Cloudflare Turnstile results used to distinguish legitimate submissions from abuse.

Public alpha

• Account email, password-derived credential data, session records, and account security events. Bannermarch does not need to store your plain-text password.
• House identity, game orders, holdings, resources, workers, buildings, transfers, campaigns, occupations, reports, notification settings, and other persistent world records.
• Device, browser, performance, error, request, connection, anti-abuse, and economy-integrity signals needed to run and protect a competitive service.
• Feedback, conduct reports, and support information you voluntarily provide.

How we use information

We use information to:

• Confirm and manage the waitlist and send development updates or playtest invitations you requested.
• Provide, synchronize, secure, troubleshoot, and improve the website and public alpha.
• Authenticate accounts, restore sessions, recover service state, and attribute consequential actions.
• Operate multiplayer systems, support, moderation, fairness review, and anti-abuse protections.
• Investigate errors, incidents, suspected compromise, cheating, connected-account abuse, and economy manipulation.
• Comply with legal obligations, enforce terms, and protect people, rights, evidence, and the service.

Where applicable, processing may rely on your consent, performance of a service you requested, legitimate interests in operating and protecting Bannermarch, or compliance with law. Marketing consent can be withdrawn without losing unrelated service access.

Service providers and sharing

Cloudflare hosts and protects the website and processes network and security information, including Turnstile data. Brevo stores the development mailing list, manages double opt-in, and delivers confirmation and update messages.

Information may also be shared with vendors that provide infrastructure, monitoring, support, security, or professional services when they are engaged for those purposes; with authorities or other parties when legally required or reasonably necessary to protect people, rights, evidence, or the service; or as part of a business reorganization subject to appropriate safeguards.

Bannermarch does not sell personal information and does not use the current site for third-party targeted advertising. We do not publish private safety reports or disclose them to the reported House as a public accusation.

International processing

Cloud services may process information in countries other than your own. Where required, appropriate contractual or legal transfer safeguards will be used.

Retention

• Waitlist: until you unsubscribe, ask for deletion, or the list is closed. An unsubscribed address may remain on a suppression list so the choice is honored.
• Account and gameplay: for the life of the alpha account and a reasonable period afterward for restoration, integrity, disputes, and deletion processing.
• Security, moderation, and economy records: as long as reasonably necessary for investigation, appeal, repeat-abuse prevention, fairness, legal obligations, and documented retention policy.
• Operational logs: for a limited period appropriate to reliability, security, and incident investigation.

Information may be retained longer when required by law, needed to resolve a dispute, or necessary to preserve evidence. Data is deleted or de-identified when it is no longer needed for a legitimate purpose.

Your choices and rights

Every development email includes an unsubscribe link. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a data-protection authority.

Send requests to privacy@bannermarch.com from the email connected to the request where possible. Bannermarch may verify your identity and may retain information that must be kept for security, legal obligations, suppression, evidence, or the rights of others.

Children

Bannermarch is a general-audience strategy game and is not directed to children under 13. Do not join the waitlist or submit personal information if you are under 13.

You must be at least 16 to join the waitlist on your own. If you are younger than 16 but at least 13, a parent or legal guardian must authorize participation where local law permits. If Bannermarch learns that information was collected from a child contrary to these rules, it will take reasonable steps to delete or otherwise lawfully address it.

A parent or guardian with a concern may contact privacy@bannermarch.com.

Security

Bannermarch uses administrative, technical, and organizational measures intended to protect information, including encrypted transport, limited-access secrets, password-derived credentials, revocable sessions, server-side authority checks, request identifiers, bot controls, and separated game-state services.

No service can promise absolute security. Do not send passwords, raw session cookies, or authentication tokens by email. Suspected vulnerabilities should follow the private path on the Support page.

Changes and contact

This notice will change as account recovery, moderation operations, billing, or additional service providers are introduced. Material changes will update the effective date and may be announced in Development Dispatches or by email when appropriate.

For questions or privacy requests, email privacy@bannermarch.com. General account and technical support belongs at support@bannermarch.com.