1. Who we are
The data controller is Bald Bosses Games (“we”, “us”), based in Greece and operating the website at baldbossesgame.com (and related prelaunch domains).
Privacy requests: hello@baldbossesgame.com
2. What this site does
This is a prelaunch marketing site for our card game Bald Bosses. We use it to:
- Notify interested people when our Kickstarter campaign launches
- Offer an optional $1 refundable reservation (and related early-backer perks)
- Host an optional “Office Archetype” quiz for engagement
- Understand site traffic with analytics so we can improve the funnel
3. Personal data we collect
Email signup (launch list)
When you submit an email on this site, we collect your email address and basic technical metadata tied to the signup (for example, timestamp and which form you used). We use this to send Kickstarter launch notifications and related prelaunch updates you signed up for.
$1 reservation (Stripe)
If you reserve, payment is processed by Stripe. Depending on what you enter at checkout, Stripe may process your email, payment details, and billing information. We do not store your full card number on our servers. We may receive confirmation details (such as your email and payment status) needed to fulfill the reservation and early-backer offer.
Office Archetype quiz
Quiz answers (and optional preferences such as character sex / boss pick) are sent to our server only to calculate and return your result. We do not require an email to take the quiz, and we do not store quiz answers linked to your identity for marketing.
Analytics and device data
We use Google Analytics 4 (GA4) to measure visits, page views, and funnel events (for example, email signup or reservation clicks). This may include online identifiers such as a client ID, approximate location derived from IP, device/browser information, and pages viewed.
Local storage on your device
We store a small amount of data in your browser for site function — for example theme preference (localStorage key theme) and short-lived funnel/session helpers (such as remembering an email you just entered so the next page can prefill it).
This stays on your device unless you clear site data.
4. Why we process your data (purposes & legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Send launch notifications and prelaunch email updates you requested | Consent (Art. 6(1)(a)); you can withdraw anytime via unsubscribe or by emailing us |
| Process and administer the $1 reservation / refundable hold | Contract / steps at your request (Art. 6(1)(b)) |
| Run the quiz and return your result | Legitimate interests (Art. 6(1)(f)) — providing the interactive feature you chose to use |
| Understand and improve site performance and conversion (GA4) | Legitimate interests (Art. 6(1)(f)); where required by ePrivacy rules we will rely on consent for non-essential cookies/trackers |
| Respond to support or privacy requests | Legitimate interests and/or legal obligation |
Submitting your email on the signup forms is how you consent to join the launch list. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
5. Who we share data with
We use trusted service providers (“processors”) who only process data on our instructions:
- Email service provider — currently MailerLite, to store your email and send the messages you signed up for. Mailchimp (Intuit) may still be used as a fallback processor.
- Stripe — payment processing for reservations
- Google — Google Analytics 4
- Hosting / infrastructure — for example Render and/or Netlify, which host this site and API
We do not sell your personal data. We may disclose information if required by law or to protect our rights, users, or the security of the service.
6. International transfers
Our launch list is stored with MailerLite (EU). Some other providers (notably Google and Stripe, and Mailchimp if that fallback processor is in use) may process data in the United States or other countries outside the EEA/UK. Where that happens, we rely on appropriate safeguards offered by those providers (such as Standard Contractual Clauses and, where applicable, their participation in frameworks like the EU–US Data Privacy Framework), plus their GDPR-oriented terms as processors.
7. How long we keep data
- Launch list email: until you unsubscribe or ask us to delete it, or until we close the prelaunch list after the campaign no longer needs it (we aim not to keep inactive marketing contacts indefinitely).
- Reservation / payment records: as needed for fulfillment, refunds, accounting, and legal retention duties.
- Quiz request data: processed to generate a result; not retained as a marketing profile tied to you.
- Analytics: retained according to our GA4 property settings (typically aggregated reporting over months, not forever as raw identifiable marketing lists).
8. Your rights (GDPR)
If you are in the EEA/UK (or otherwise covered by GDPR-equivalent rules), you can ask us to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data (“right to be forgotten”), subject to legal limits
- Restrict or object to certain processing
- Receive a copy of data you provided in a portable format (where applicable)
- Withdraw consent for email marketing at any time
Email hello@baldbossesgame.com with the subject “Privacy request”. You also have the right to lodge a complaint with your local supervisory authority. In Greece, that is the Hellenic Data Protection Authority (HDPA).
9. Cookies and similar technologies
We use strictly necessary storage for basic site function (theme, short-lived funnel helpers) and analytics technologies via Google Analytics. Browser settings can block or clear cookies and site data. Blocking analytics may not stop the site from working, but it can reduce how well we understand traffic.
If we add a consent banner or additional advertising trackers later, we will update this policy and the on-site controls accordingly.
10. Children
The game is marketed for ages 14+. This site is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child provided an email, contact us and we will delete it.
11. Security
We use HTTPS and limit access to systems that handle personal data. No method of transmission or storage is 100% secure; please use a unique password on any account you create with our providers (Stripe, Kickstarter, etc.).
12. Changes
We may update this Privacy Policy when our practices, providers, or legal requirements change. The “Last updated” date at the top will change when we do. Significant changes affecting the launch list will also be reflected here (for example, switching email providers).
13. Contact
Bald Bosses Games
hello@baldbossesgame.com
This page is provided for transparency about our prelaunch site. It is not formal legal advice. If you need advice for your own situation, consult a qualified professional.