LEGAL // COOKIES

COOKIE
POLICY.

LAST UPDATED: [DATE OF PUBLICATION]

What changed. Two things this policy previously got wrong, now corrected. First, the game writes to your browser's local storage to remember your Guardian callsign — a storage operation on your device, which belongs here even though it is not technically a cookie. Second, both this site and the game load their typefaces from Google Fonts, which means your browser contacts a third-party server. Neither point was described before.

1. Cookies and equivalent storage

European rules on storing information on a user's device — Art. 5(3) of the ePrivacy Directive, transposed in Italy at Art. 122 of the Data Protection Code — apply to cookies and to any equivalent technique, including localStorage. What matters is not the technology but whether the storage is strictly necessary for a service the user has expressly requested.

2. What this landing page uses

This page sets no cookies of its own. It embeds no analytics, no advertising pixel, no video player and no map. Nothing on this site profiles you or measures your behaviour.

It does make one third-party request: the typefaces Oswald and Share Tech Mono are loaded from Google Fonts, so that the site and the game share one visual identity. Loading a font causes your browser to connect to fonts.googleapis.com and fonts.gstatic.com, which necessarily discloses your IP address and browser details to Google. Google states that Fonts sets no cookies and does not use the data for advertising, but the connection itself is a transfer and is disclosed here for that reason.

If you would rather avoid it entirely, the fonts can be self-hosted: download the two families, serve them from this domain and remove the two <link> tags. The site degrades gracefully to system typefaces in the meantime. [Controller: decide and record which option is live.]

Because no cookies or equivalent non-essential storage are set by this page, no consent banner is shown on it. Fonts are loaded from a third party but store nothing on your device.

3. What the game stores on your device

Browser storage used by the game: key, contents, purpose and duration
Key	Contents	Purpose	Duration
`scudo.identity`	Your Guardian callsign and a random identifier generated on first visit	Keeps your identity between runs so scores stay attached to you	Until you clear browser storage
`scudo.db`	Your local scores and profile	Only used when no online leaderboard is configured, so the game works offline	Until you clear browser storage

Both entries exist to deliver a feature you request explicitly, by typing a callsign and pressing Play. Neither is used for profiling, advertising or measurement, and neither is read by any third party. No expiry is set by the browser: they persist until you remove them.

4. How to remove them

Clearing site data in your browser settings deletes both entries and, with them, your local identity. In Chrome and Edge: Settings → Privacy → Cookies and site data. In Firefox: Settings → Privacy & Security → Cookies and Site Data. In Safari: Preferences → Privacy → Manage Website Data. Private or incognito browsing discards them when the window closes.

Removing local storage does not erase scores already submitted to an online leaderboard: for those, see the rights section of the Privacy Policy.

5. External services

The game page card on this site is drawn locally: itch.io is not contacted when the page loads. Their embedded widget is fetched only if you click “load the itch.io widget here”, and the Play links only when you follow them. The game loads the same typefaces from Google Fonts described in section 2. The game itself is hosted on itch.io. Opening any external domain may involve technical processing by that provider under its own policies. Where the online leaderboard is enabled, the game also contacts the database provider named in the Privacy Policy in order to submit and read scores; that connection is initiated only after you have entered a callsign and finished a run.

6. If tracking is ever added

Should analytics, advertising, embedded video or any other non-essential technique be introduced later, this page must be updated and a compliant consent mechanism — with the ability to refuse and to withdraw — must be in place before those tools are loaded, not after.

7. References

Regulation (EU) 2016/679; Art. 122 of Italian Legislative Decree 196/2003 as amended; the Garante's guidelines on cookies and other tracking tools of 10 June 2021; and the European Data Protection Board's guidance on consent and on the technical scope of Art. 5(3) ePrivacy.

← BACK TO THE LANDING

COOKIEPOLICY.