Privacy policy

Playing our free games

You do not need to give BaaWolf your real name, postal address or payment details to play our free games. We do not maintain a separate BaaWolf player-account database, collect independent gameplay analytics or automatically receive crash reports from these games.

A game running through Steam can use your Steam account for the platform features it supports. Where a game supports multiplayer, information such as your platform identifier, display name, connection details and the game state needed for the shared session may be processed by Steam and exchanged with the host and other players. A display name or account identifier can still be personal information, even when it is not your real name.

We use information needed for a requested multiplayer feature to provide that feature as part of our agreement with you. Steam's own handling of your account and platform services is explained in Valve's privacy policy. Browser games on our website also follow the website-statistics choices below.

Steam purchases, DLC and refunds

If you buy downloadable content (DLC) or another BaaWolf product through Steam, Steam handles checkout, payment and your purchase history. We do not receive your card details or keep a separate customer purchase-history database. Steam may make sales and financial summaries available to us; these are different from your personal Steam purchase history.

Optional website statistics

If you allow statistics, we count page views, referring websites, browser-game starts and public download starts to understand what people use and improve the website and games. Referrers are recorded as website names, without their page paths or query strings. Page-view tracking sends the path you visit, without the query string or fragment.

To estimate daily visitors and players, our server combines your IP address and browser information into a salted identifier that changes each day. The visitor-statistics database does not store your raw IP address or browser information. The identifier is pseudonymous, rather than a guarantee of anonymity: it distinguishes a browser and connection within a day, but is not designed to follow you across days or other websites.

Daily identifiers are removed when the next day's first recorded event triggers cleanup. Daily totals are kept for up to one year. Statistics are stored privately on our hosting account, rather than sent to a third-party analytics service.

We rely on your consent for optional public visitor statistics. Declining them does not stop you browsing, playing a game or downloading a public release.

Your statistics choice

Choose Allow statistics or Decline statistics in the website notice. Until you allow them, optional statistics are off. Use Statistics settings at the foot of a page to change your mind or withdraw consent at any time. Withdrawing consent stops future optional statistics; it does not undo processing that was lawful before withdrawal.

We also respect Global Privacy Control and Do Not Track. Either signal switches off optional statistics, even if you previously allowed them. Reload after changing your browser setting. Without a saved Allow choice, optional statistics remain off.

Cookies and local storage

We do not set advertising cookies or store a visitor-tracking identifier in your browser. When you make a statistics choice, we use a first-party cookie called baawolf_statistics to remember only whether you allowed or declined, for up to six months. This preference cookie contains no unique identifier and is necessary to honour your choice. We do not use local storage for visitor statistics.

The private, owner-only administration area uses a session cookie called __Secure-baawolf_admin to support secure sign-in. It is restricted to /admin and is not used to track public visitors. Individual browser games may keep saves or settings on your device; local game storage is separate from our optional website statistics.

Hosting, fonts and other services

Our hosting provider, DreamHost, receives your IP address and request information to deliver and protect the website, whether or not you allow optional statistics. Hosting access and error logs are separate from our statistics database. DreamHost describes its access-log retention as up to seven days.

Hosting involves processing in the United States. DreamHost's data-processing terms describe its international-transfer safeguards, including standard contractual clauses and the UK transfer addendum. Contact us if you would like information about the safeguards relevant to your data.

Some pages load fonts from Google Fonts. Your browser connects to Google to fetch them, sending information such as your IP address and browser details. See Google Fonts' privacy information. This privacy page uses system fonts.

Links to services such as Steam, itch.io and GitHub take you to other websites with their own privacy and cookie policies.

When you contact us or test a build

If you email us, we receive your email address, message and anything you attach. We use these to answer you and investigate the issue you raise. Please leave passwords, payment details and unrelated personal information out of messages and bug reports. Our email provider processes correspondence so we can receive and reply to it.

We keep correspondence for as long as needed to handle the enquiry and any related follow-up or dispute, then delete it unless a legal obligation requires us to retain it. You can ask us to delete a conversation sooner.

If we give you a private test-build download link, its record can include a recipient label, the build, creation date, download-start count and first and last download times. The record remains until we delete it; deleting it revokes the link. This is separate from optional public visitor statistics, so we can manage access to private builds.

Security and our reasons for using information

Admin sign-in security records can include IP addresses. We keep at most 200 events, for no more than 90 days, with older records removed during routine cleanup. Private staging downloads are also recorded for build administration.

We rely on our legitimate interests in answering enquiries, managing test builds and keeping the website secure for these activities and necessary hosting logs. Where we must retain or disclose information to meet a legal requirement, we rely on that legal obligation. We use hosting and email providers to operate these services; we may also disclose information when legally required.

Your information, your rights

Depending on the law that applies and the circumstances, you can ask to access, correct or erase personal information we hold, restrict its use, or receive a portable copy. You can object to processing based on legitimate interests. You can also withdraw consent for optional statistics using Statistics settings.

Email mail@baawolf.com to exercise a right or raise a concern. We may need enough information to verify the request, but we will not collect extra identifying information simply to link you to aggregate statistics. For information held by Steam, use the privacy controls and contact details in Valve's policy.

You can complain to the UK's Information Commissioner's Office or, where applicable, your local data-protection authority.

Children and families

Our free games do not ask children to register a BaaWolf account or provide personal details. If you are a parent or guardian and believe a child has sent us personal information that should be removed, please contact us. Platform services such as Steam have their own age requirements and family settings.

Changes to this policy

We will update this page when our games or the way we handle information changes, and show the date above. If a new use of information needs your consent, we will ask before starting it.