Privacy Policy for Null Vector Studios
Updated Aug 27th 2026
This Privacy Policy describes how Null Vector Studios Oy (“we”, “our”, “us”) collects, uses, and protects personal data in relation to our newsletter, the comments on our website, the game Astro Protocol, and associated playtests.
1. Data We Collect
Email address: provided voluntarily when you subscribe to our newsletter, sign up for a playtest, or leave a comment on our blog.
Subscription record: the date and time you subscribed and confirmed, the IP address you subscribed from, and which of our emails you have chosen to receive. This is kept as proof of your consent.
Comments: the nickname, email address and comment text you submit, together with the date and time, the IP address and the browser user agent the comment was sent from. The IP address and user agent are kept as spam and abuse protection.
We do not collect any other personal data.
2. How We Use the Data
To send you the newsletter you subscribed to: studio and game news, and — if you choose it — an email with the release notes when a game updates.
To send invitations and instructions for playtests.
To confirm that a comment really came from the address given, and to let us check comments before they are published.
We do not use your email address for unrelated marketing or sell it to third parties.
3. Comments
Leaving a comment requires no account and no password. You give a nickname and an email address, and we email you a link that confirms the comment is yours. Nothing is published until you follow that link and we have reviewed the comment.
Only your nickname and the text of your comment are ever shown publicly. Your email address is never displayed, never published, and is not used to send you anything other than the confirmation of your own comment — unless you also tick the newsletter box, in which case it is added to the mailing list described above and you can unsubscribe at any time.
Comments that are never confirmed are deleted automatically within a day. You can ask us to delete a published comment, or every comment you have ever left, at any time.
4. Cookies
If you confirm a comment, we store one cookie in your browser so that further comments from the same address do not each need a new confirmation email. It contains your nickname and email address, is signed so it cannot be altered, and expires after 30 days. It is used for nothing else. We do not use advertising or tracking cookies.
Our spam protection (Cloudflare Turnstile) also sets its own cookies when you use the comment form, in order to tell people apart from bots.
5. Service Providers
Our emails are delivered by Resend (resend.com), our website and its database are hosted on Railway (railway.app), and the comment form is protected against automated abuse by Cloudflare Turnstile (cloudflare.com). All of them process your data on our behalf and only for the purposes described here.
6. Legal Basis
Under the EU General Data Protection Regulation (GDPR), our legal basis for processing your email address is your consent, given when you subscribe to the newsletter, sign up for a playtest, or submit and confirm a comment. For the IP address and user agent stored with a comment, our legal basis is our legitimate interest in preventing spam and abuse.
7. Data Retention
We will retain your email address only as long as necessary for the purposes stated above, or until you unsubscribe or request deletion. If you unsubscribe, we keep your address on a suppression list so that we do not accidentally email you again; you can ask us to delete it entirely instead.
Published comments are kept for as long as the post they belong to, or until you ask us to remove them. Unconfirmed comments are deleted automatically within a day.
8. Your Rights
You have the right to:
Request access to your personal data.
Request correction or deletion of your data, including any comment you have left.
Withdraw your consent at any time — every email contains an unsubscribe link and a link to change which emails you receive.
Lodge a complaint with your local supervisory authority.
To exercise your rights, contact us at: support@nullvectorstudios.com.
9. Changes
We may update this Privacy Policy from time to time. The date at the top indicates the latest version.
10. Contact
Jaakko Ojalehto
Null Vector Studios Oy
Email: support@nullvectorstudios.com