Legal · Last updated 6 October 2026

Privacy Notice

How Witsteen handles personal information when you visit heroesandforsaken.com, sign up for email updates or contact us.

Who is responsible

Witsteen B.V., the studio behind Heroes and Forsaken, is responsible for the personal information described in this notice. Address: 2300 Turnhout, province of Antwerp, Belgium. Belgian enterprise number (KBO/BCE) 1025.657.709. Privacy contact: games@witsteen.com.

This notice covers the Heroes and Forsaken website. It does not cover the game itself, game accounts or online services, store accounts on Steam or the Epic Games Store, or social platforms. The game will have its own privacy notice before any account or online service opens.

What this website does not do

This website has no accounts, payments, comments, analytics, advertising trackers or embedded social media. Its only form is the optional email sign-up described below. It does not set cookies or store anything in your browser, and it loads all of its fonts, images and scripts from its own server.

Information processed when you visit

Like every website, our hosting provider receives technical information when your browser requests a page: your IP address, browser and device type, the page requested, the time of the request and any errors. The website is hosted on Cloudflare Pages, and every visit is delivered through Cloudflare's network.

We use this information only to deliver the website and keep it secure, for example to detect abuse or fix errors. The legal basis is our legitimate interest in running a working, secure website (GDPR article 6(1)(f)). We keep these technical records only as long as needed for those purposes.

Email updates

If you sign up for email updates, we receive your email address, the consent wording you agreed to, when you signed up, the address of the page you signed up on (including any campaign tags in it) and your browser's user agent string. We use this to send you Heroes and Forsaken news, playtests, launches and offers, and to keep a record of your consent. The legal basis is your consent (GDPR article 6(1)(a)).

Before we send the first email, we will ask you to confirm your address. Every email will include an unsubscribe link, and you can also withdraw your consent at any time by emailing games@witsteen.com.

We keep your sign-up until you unsubscribe or withdraw your consent. After that we delete it, except for your email address on a do-not-contact list, which we keep so that we do not email you again.

Sign-ups are sent through Google Apps Script and stored in a Google Sheet, so Google stores this information for us. Nothing is sent to Google until you press Sign up.

Information you send us

If you email us, we receive your message, your email address and anything you include, and we use it to reply. The legal basis is our legitimate interest in answering you (article 6(1)(f)) or, for a privacy request, our legal obligation to handle it (article 6(1)(c)). Please send only what we need. Do not email passwords, payment card details or identity documents unless we ask for something specific and explain why.

Our email is provided by Namecheap (Private Email). We keep correspondence for as long as needed to handle your message and any follow-up, and privacy requests for as long as needed to show how we handled them.

Who receives information

Our hosting and delivery provider (Cloudflare) and email provider (Namecheap) process information on our behalf under their data processing terms. We do not sell personal information or share it for advertising.

These providers may process information outside the European Economic Area. Where they do, the transfer is covered by safeguards in their data processing terms, such as the European Commission's Standard Contractual Clauses. Contact us for more information about these safeguards.

If you sign up for email updates, Google stores your sign-up for us (see Email updates) and may process it outside the European Economic Area.

Links to Steam, the Epic Games Store, YouTube, X and Instagram take you to independent services. Their own privacy notices apply when you use them.

Children

This website does not ask for your age. The game will set out its own age and eligibility rules before accounts open.

Automated decisions

We do not make decisions about you by automated means that have legal or similarly significant effects. Our hosting provider may automatically block abusive traffic to protect the website.

Your rights

Under the GDPR you may have the right to access, correct, erase or restrict your personal information, to object to processing based on legitimate interests, to receive a portable copy, and to withdraw consent where processing relies on it. You can also complain to a data protection authority, such as the Belgian Data Protection Authority or the authority where you live. See Privacy Rights for how to make a request.

Changes

We will update this notice when the website's processing changes and show the new date at the top. Questions: games@witsteen.com.