We don't sell your data. We collect the minimum.
- No tracking cookies for advertising
- No data sold or rented to third parties
- Email only if you opt in — unsubscribe anytime
- Full GDPR rights: access, delete, correct, export
- Support requests stored max 2 years
- Game telemetry is anonymised and aggregate
Who We Are
Netrigo Game Studios ("Netrigo", "we", "us") is an independent game development studio based in the Republic of Türkiye. We develop and publish the video game Blood & Silence and operate the website at www.netrigogames.tr.
For the purposes of GDPR and KVKK, Netrigo Game Studios is the Data Controller of personal data collected through our website and direct communication channels. In-game personal data processing is primarily controlled by the distribution platform you use (Steam, Epic Games).
Data Protection Officer: dpo@netrigogames.tr
Privacy inquiries: legal@netrigogames.tr
Data We Collect
2.1 Website Visits
When you visit netrigogames.tr, our hosting infrastructure automatically logs:
| Data | Purpose | Retention |
|---|---|---|
| IP address (truncated) | Security, aggregate analytics | 30 days |
| User-Agent string | Compatibility diagnostics | 30 days |
| Pages visited, timestamps | Content analytics | 90 days (aggregated) |
| Referring URL | Marketing attribution | 90 days (aggregated) |
2.2 Voluntary Submissions
You may actively provide data through our forms — only the fields you complete are stored:
- Newsletter: email address
- Support tickets: name, email, message contents, any attachments you include
- Press inquiries: name, publication, email, topic
- Careers / collaboration: name, email, portfolio links, any CV/attachments you submit
2.3 Blood & Silence (In-Game)
Game-side personal data is processed by the platform on which you play (Steam, Epic Games Store). Netrigo receives only what is explicitly permitted and necessary: anonymised, aggregate crash reports and gameplay telemetry used to diagnose bugs and balance systems. We do not receive your name, account identifier, payment details, or IP address from these platforms.
Cookies & Tracking Technologies
We take a minimalist approach to client-side storage. The website does not use advertising, cross-site tracking, or profiling cookies. The only client-side storage we use:
| Name | Type | Purpose |
|---|---|---|
ngs-intro-seen | sessionStorage | Suppresses the intro animation after first view during a session. Expires when the tab closes. |
We load Google Fonts from fonts.googleapis.com. Google may log the IP address when your browser requests font files. We do not share any other data with Google via the website. If you do not wish to fetch external fonts, disable them in your browser; the site gracefully falls back to system fonts.
Legal Basis for Processing
Under GDPR Article 6 and KVKK Article 5, we only process personal data where we have a valid legal basis. Depending on the context, we rely on:
- Consent (Art. 6(1)(a)): when you subscribe to our newsletter or explicitly opt in to communications.
- Contract performance (Art. 6(1)(b)): when responding to a support ticket or a collaboration application.
- Legal obligation (Art. 6(1)(c)): when we must retain records for tax, accounting, or law-enforcement requests.
- Legitimate interests (Art. 6(1)(f)): for security logging, fraud prevention, and essential analytics necessary to operate the site. We perform a documented balancing test for each use case.
How We Use Your Data
Data is used strictly for the purposes described below — nothing more:
- Responding to support tickets, press inquiries, and collaboration applications
- Sending launch notifications only to newsletter subscribers who have opted in
- Aggregate website analytics (never tied to an individual identity)
- Crash diagnostics and gameplay balancing based on anonymised telemetry
- Security monitoring, fraud prevention, and abuse investigation
- Complying with lawful requests from competent authorities
Data Retention
We retain personal data only as long as strictly necessary for the purpose it was collected, or as required by applicable law. Default retention schedule:
| Category | Retention | Reason |
|---|---|---|
| Server access logs | 30 days | Security, debugging |
| Analytics events | 90 days (then aggregated) | Site performance |
| Newsletter subscriptions | Until you unsubscribe | Consent-based |
| Support correspondence | Up to 24 months | Follow-up, patterns |
| Collaboration applications | 12 months post-decision | Reconsideration window |
| Legal / accounting records | As required by Turkish law | Statutory obligation |
Your Rights
You have the following rights under GDPR (Articles 15–22) and KVKK (Article 11), exercisable free of charge:
Access
Request a copy of the personal data we hold about you, together with information about how we use it.
Rectification
Ask us to correct inaccurate or incomplete data without undue delay.
Erasure
Request deletion of your data where it is no longer necessary or consent is withdrawn.
Restriction
Temporarily halt processing while an objection or accuracy issue is assessed.
Portability
Receive your data in a structured, commonly used, machine-readable format (JSON).
Objection
Object to processing based on legitimate interests or direct marketing at any time.
Withdraw Consent
Withdraw previously given consent at any time, without affecting prior lawful processing.
Lodge a Complaint
File a complaint with your supervisory authority or Türkiye's KVKK Board if your rights are violated.
To exercise any of these rights, email dpo@netrigogames.tr. We will respond within 30 days of receiving your request and verifying your identity. Complex requests may be extended by an additional two months, with notice.
Third-Party Platforms & Processors
Where necessary, we rely on vetted third parties to operate specific components. Each provider acts under a Data Processing Agreement (DPA) where applicable:
| Provider | Role | Data Involved |
|---|---|---|
| Formspree | Form submission relay | Form fields you submit (email, message, etc.) |
| Google Fonts | Web font delivery | IP address (during font fetch) |
| Valve Corporation (Steam) | Game distribution | Governed by Steam's Privacy Policy |
| Epic Games, Inc. | Game distribution | Governed by Epic's Privacy Policy |
Each platform operates under its own privacy policy. Netrigo is not responsible for data processing carried out independently by these platforms.
International Data Transfers
Some of our processors are based outside Türkiye and the EU (primarily in the United States). Where data is transferred internationally, we rely on one or more of the following safeguards:
- European Commission adequacy decisions, where applicable
- Standard Contractual Clauses (SCCs) as adopted by the European Commission
- Explicit, informed consent for a specific transfer
- Data minimisation — transferring only what is strictly necessary
You can request copies of the safeguards in place by contacting our DPO.
Security & Breach Notification
We apply technical and organisational measures appropriate to the risk level of the data involved, including:
- HTTPS / TLS for all transport between browsers and our servers
- Strict Content Security Policy (CSP) and HTTP security headers
- Minimum-privilege access control for studio members handling data
- Encrypted backups with periodic integrity verification
- Log monitoring and anomaly detection
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware, and will notify affected individuals without undue delay where the risk is high, in accordance with GDPR Articles 33–34 and KVKK Article 12.
Children & Minors
Blood & Silence is rated Mature 17+. Our services are not directed to individuals under the age of 16 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from minors.
If you are a parent or guardian and believe a minor has submitted personal data to us, contact legal@netrigogames.tr. We will verify the request and delete the data without undue delay.
Changes to This Policy & Contact
We may update this Privacy Policy when our practices change or legal obligations require it. Material changes will be announced at least 14 days before taking effect via a site notice and (where we hold your email) a direct notification. The "Last Updated" date above always reflects the current version.
Continued use of our services after the effective date constitutes acceptance of the updated policy.
Legal & compliance: legal@netrigogames.tr
Data Protection Officer: dpo@netrigogames.tr
Security disclosures: security@netrigogames.tr
General support: support@netrigogames.tr