This notice explains what personal data we collect through this website, why we collect it and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
This is an English translation provided for convenience. In case of discrepancy, the Italian version prevails.
Data Controller
Enrico Ascari
Novi di Modena (MO), Italy
VAT number 04038940369
Email: info@timetoevil.com
No Data Protection Officer (DPO) has been appointed, as the legal conditions requiring one do not apply. For any matter concerning personal data you can write directly to the email address above.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | Sending updates about the video game It's Time to Evil (news, new versions, content) | Consent — Art. 6(1)(a) GDPR | Until consent is withdrawn or deletion is requested |
| Date and time of sign-up, source of the request, browser type (user agent) | Demonstrating when and how consent was given, as required by Art. 7(1) GDPR | Legal obligation / consent | Together with the subscription |
| Hashed IP address | Limiting the number of sign-ups from the same source and preventing automated submissions | Legitimate interest — Art. 6(1)(f) GDPR (protecting the service from abuse) | 1 hour, then the counter resets |
| Server technical logs (IP address, page requested, date and time) | Operation and security of the website | Legitimate interest — Art. 6(1)(f) GDPR | According to the hosting provider's retention (Google Firebase) |
| Anonymous visit count: which site or app the visit comes from (or the code in the link), phone or computer, operating system, browser language and time zone, time on the page, how far it is scrolled, sections read and buttons clicked | Understanding, in aggregate, where visitors come from and which parts of the site are read | Legitimate interest — Art. 6(1)(f) GDPR | Up to 24 months |
The visit count uses no cookies, stores nothing on your device and does not record your IP address: each visit is a separate record, with no identifier linking it to other visits or to you. The data is stored on Google Firebase (Cloud Firestore, in the European Union).
Your IP address is not stored in clear text alongside your subscription: we keep only a non-reversible hash, used solely for the anti-abuse counter.
Providing your email is optional. You can browse every part of this website without subscribing. If you choose not to subscribe, the only consequence is that you will not receive updates.
This website uses no cookies, neither first-party nor third-party. We use no profiling, advertising or people-tracking tools, and there are no social buttons communicating with other servers. Visits are counted anonymously with our own system, without cookies and without storing anything on your device (see section 2).
The site stores a single item in your browser's local storage:
As these are purely technical preferences that you requested and that serve no tracking purpose, prior consent is not required (Art. 122 of the Italian Privacy Code, implementing the ePrivacy Directive). That is why you see no consent banner: there is nothing to consent to.
The website's fonts are hosted on our own servers: no request is made to Google Fonts or to any other external service while you browse.
Your data is never sold, traded or disclosed to third parties for commercial purposes. It is processed exclusively by providers acting as data processors on our behalf:
The servers hosting the subscriber list are located in the United States of America (region us-central1 of Google Cloud infrastructure). The transfer takes place on the basis of the European Commission's adequacy decision of 10 July 2023 concerning the EU–US Data Privacy Framework, to which Google LLC adheres, supplemented by the Standard Contractual Clauses adopted by the European Commission.
At any time you may exercise the rights set out in Articles 15-22 GDPR:
To exercise any right, or to unsubscribe, simply write to info@timetoevil.com. We reply within one month of the request, as required by Art. 12(3) GDPR.
If you believe the processing of your data infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of the Member State where you reside.
We do not carry out profiling or automated decision-making producing legal or similarly significant effects concerning you.
The updates service is not intended for children under 14. If you are a parent or guardian and believe a child has given us their email address, please write to us and we will delete it.
If this notice changes, we will publish the new version on this page and update the version number and date at the top. We encourage you to review it from time to time.