Privacy notice

Red Meridian — hosted web version Last updated: 1 August 2026

The short version: there are no accounts, no advertising, no cookies and no tracking across sites, and nothing you do inside a battle is sent anywhere. One privacy-friendly audience measurement counts visits so the author knows whether anyone is playing. It stores no IP address and puts nothing on your device. Everything below is the detail.

1. Controller

Red Meridian, an individual developer in Finland publishing under that name. Contact: redmeridian.game@gmail.com. The processing described here is minimal and is not the activity of a business, so no data protection officer is appointed and none is required.

2. What is stored on your device

The game saves to your browser's local storage:

• the battle in progress (map seed, setup, and the list of commands played),
• your settings and service record.

This never leaves your device. It is not sent to any server, and the author cannot read it. It is stored because you asked the game to keep your progress, which is why it needs no consent banner. You can delete all of it at any time by clearing site data for https://redmeridian.web.app in your browser settings.

3. Audience measurement

The hosted version loads Umami, a cookie-less analytics service, from cloud.umami.is. It is there to answer one question — is anyone playing this — during an open test.

• What is recorded: that a page was loaded, the country it was loaded from, the referring site if any, and the browser, operating system, device type and screen size.
• How long the game was open. At one, five, fifteen, thirty and sixty minutes of play, and every half hour after that, the game reports that the milestone was reached — nothing else. Only time the game spends on screen counts: a tab left open in the background sends nothing, because the frame loop that counts the time does not run there.
• Nothing about what happens inside a battle is recorded: no map, no country, no result, no commands.
• Your IP address is not stored. It is used in passing to derive the country and a session identifier, and then discarded. The session identifier is a hash that is not written to your device and cannot be traced back to you.
• No cookies and no device storage. Nothing is placed on or read from your browser, which is why this needs no consent banner and why you are not asked to accept anything.
• No cross-site tracking, no profiles, no advertising, and the data is never sold or shared onward.
• Legal basis: legitimate interest, Article 6(1)(f) GDPR — knowing whether a published thing is being used.
• Processor: Umami Software, operating Umami Cloud on servers in the European Union.
• Retention: kept while the open test runs. The site and its measurement data are deleted from the account when the test ends.

The Steam Deck and standalone builds contain no measurement of any kind. The script is added only to the hosted build, and it is absent from the offline artifact by construction rather than by configuration.

4. What the hosting provider logs

The site is served by Firebase Hosting (Google Ireland Limited). Like any web server, it records technical request data — IP address, timestamp, requested path, user agent, response status — in its own logs.

• Purpose: delivering the site, diagnosing faults, and protecting against abuse.
• Legal basis: legitimate interest, Article 6(1)(f) GDPR — running a website securely.
• Retention and further processing: governed by Google's terms and privacy policy for Firebase Hosting.
• Transfers outside the EU/EEA: possible within Google's infrastructure, covered by the Standard Contractual Clauses in Google's data processing terms.

No advertising network, tag manager or other third-party script is loaded. Apart from the site's own files and the measurement script above, the game makes no network requests while you play.

5. Your rights

Under the GDPR you may request access to, correction of, or erasure of personal data concerning you, object to processing based on legitimate interest, and request restriction or portability. In practice the data described here is not linked to any identity, so a request may not be possible to fulfil if the data cannot be connected to you.

Requests: redmeridian.game@gmail.com.

You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in your own country.

6. Children

The game is not directed at children under 13, and no account or personal information is required to play it.

7. Changes

If the game gains accounts, online play, advertising, or measurement of what happens inside a battle, this notice is updated before that feature ships and the change is noted at https://redmeridian.web.app/privacy.