Privacy Policy

1. Data Controller Identity

This Privacy Policy outlines how BritAbyssVault ("we", "our", or "us") collects, utilizes, stores, and safeguards personal data obtained from visitors ("you", "your", or "User") accessing britabyssvault.com.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018), the designated Data Controller is:

2. Principles of Data Processing

We handle all personal data in strict adherence to fundamental UK data protection principles. Data processed by BritAbyssVault is:

• Processed lawfully, fairly, and in a transparent manner.
• Collected exclusively for specified, explicit, and legitimate editorial and analytical purposes.
• Adequate, relevant, and strictly limited to what is necessary in relation to those purposes (data minimisation).
• Accurate and kept up to date where appropriate.
• Retained for no longer than is necessary.
• Processed securely using industry-standard technical measures against unauthorized processing, loss, or destruction.

3. Categories of Data We Collect

BritAbyssVault is designed with privacy-by-default architecture. We do not require account creation to access our directory. The information we may gather includes:

• Technical & Telemetry Data: When you connect to our Portal, server access logs record your IP address (anonymized at subnet level), user-agent string (browser family and operating system), device resolution, and requested URL timestamps to maintain server resilience.
• Communications Data: If you reach out to our team using our contact form, we collect your submitted name, email address, chosen subject topic, and message contents solely to address your communication.
• Client-Side Storage Data: Technical flags stored in your browser's localStorage (such as your cookie consent preferences and active category filters). These flags remain local to your browser and are never transmitted to marketing networks.

4. Lawful Bases for Processing

Under Article 6 of the UK GDPR, we process personal data under the following legal bases:

• Legitimate Interests: To monitor server health, prevent abusive robotic scraping, optimize WebGL rendering documentation, and defend against malicious cyber threats.
• Consent: Where you voluntarily submit an editorial message or choose to enable non-essential analytical cookies via our cookie consent controls.
• Legal Obligation: If required to comply with statutory legal disclosures or requests from law enforcement authorities under United Kingdom law.

5. Cookies and Web Technologies

BritAbyssVault uses minimal cookies and local storage tokens to preserve session integrity, record your consent status, and compute aggregated visitor metrics. We do not run intrusive behavioral tracking or third-party marketing beacons.

For detailed information regarding our specific cookie identifiers, retention lifespans, and how to manage your preferences, please consult our full Cookie Policy.

6. Outbound Links to Third-Party Games

Our directory features outbound links to external developer platforms and WebGL hosting environments. When you click a "Play Now" button, you leave britabyssvault.com and connect directly to the third-party provider's infrastructure.

BritAbyssVault does not share your contact details with these third parties. However, those external platforms maintain their own independent data practices and privacy policies, which we encourage you to review prior to initiating gameplay.

7. Data Retention Schedule

We retain personal data only for as long as strictly necessary to fulfill the operational purpose for which it was collected:

• Server access telemetry: Automatically rotated and permanently wiped every 30 days.
• Contact form correspondence: Stored securely for up to 12 months to facilitate follow-up communications, after which it is permanently purged.
• Local consent tokens: Persist in your browser storage until cleared manually or updated after 12 months.

8. Your Rights Under UK GDPR

As a data subject in the United Kingdom, you hold clear statutory rights regarding your personal information:

• Right to be Informed: Transparent knowledge of how your data is collected and used.
• Right of Access: The right to request a copy of the personal information we hold about you.
• Right to Rectification: The right to request the correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your information where no ongoing statutory requirement justifies its retention.
• Right to Restrict Processing: The right to request that we temporarily pause processing your data.
• Right to Object: The right to object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing relies on your consent, you may withdraw it at any time with immediate effect.

To exercise any of these rights, please contact our Cardiff desk at contact@britabyssvault.com. We respond to all verified requests within one calendar month at zero charge.

9. Supervisory Authority Complaints

If you consider that our processing of your personal data infringes UK data protection legislation, you have the right to lodge a complaint with the UK supervisory authority:

10. Policy Modifications

We may periodically amend this Privacy Policy to reflect technical adjustments or statutory guidance. Any modifications will be posted directly to this page with an updated timestamp.