Legal

Privacy Policy

This site has no accounts and no advertising. It sets no cookies of its own. If you use the contact form, we process the details you submit so the team can respond.

Last updated 4 September 2026 · The binding version of this document is the English one. This translation is provided for convenience and has no legal effect.

Controller

Techplay Co., Ltd., Phuket, Thailand (Needs inputregistered address, company registration number), is the controller for the processing described here. Contact: info@alchemessgame.com.

EU representative under Article 27 GDPR: Needs inputEU representative, or written confirmation that none is required. Data protection contact: Needs inputnamed contact, or confirm the general address above is used.

The short version

  • We set no cookies and use no local storage.
  • We run no advertising, no ad networks and no cross-site tracking.
  • The only thing you can sign up for is the newsletter, and it stores your email address and nothing else.
  • The contact form sends the details you enter to the team's email inbox.
  • We never sell or share personal data for marketing.
  • One third party can set cookies, and only if you press play on the trailer. See the Cookie Policy.

What is processed, and why

Delivering the page

The site is hosted on Cloudflare Pages. To send you a page, Cloudflare processes your IP address, the request, your approximate location and your browser's user agent, and keeps short-lived logs to serve traffic and defend against attacks.

Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in operating and securing the site. Processor: Cloudflare, Inc. Retention: short, per Cloudflare's own retention for edge logs.

Audience measurement

We use Cloudflare Web Analytics to count page views and measure loading performance. It is cookieless, uses no client-side state, does not fingerprint the device and does not follow you to other sites. What we see is aggregate: how many people read a page, roughly where from, and how quickly it loaded.

Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in understanding whether the site works. Because nothing is stored on or read from your device, this needs no consent banner under the ePrivacy rules.

We also count events on our own pages: which call to action was clicked, whether a newsletter sign-up succeeded, how far down a page people read. These are counters with dimensions — the event, the page, the language, the device class, and the country Cloudflare reports for the request. They are sent to an endpoint on this domain and stored in Cloudflare's Workers Analytics Engine.

There is no cookie, no local storage, no identifier and no IP address in any of it, so two visits by the same person cannot be told apart. If your browser sends Global Privacy Control or Do Not Track, none of it runs at all. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in knowing which parts of the site work.

The trailer

The trailer is not loaded until you press play. When you do, the video is requested from youtube-nocookie.com and Google Ireland Limited / Google LLC receives your IP address and may store information on your device. At that point Google is an independent controller and its privacy policy applies.

Legal basis: your consent, given by pressing play (Art. 6(1)(a) GDPR).

Links to Steam and the Epic Games Store carry campaign parameters (utm_source, utm_medium, utm_campaign) that tell the store which part of this site sent you. We see only the aggregate report the store gives us — never an individual person. Once you arrive, Valve or Epic is the controller.

Writing to us

If you email us or use the contact form, we process your email address, optional name, selected topic, subject, message and form language. The form runs on Cloudflare, checks a Turnstile token to limit automated abuse, and forwards the message through Cloudflare Email Service to the team's Google Gmail inbox. It does not add the message to a separate website database, and the form code does not log the submitted contact details.

We hold your message and address for as long as it takes to deal with it, and to keep a record of what was agreed. Legal basis: legitimate interests, or steps before a contract if you are asking about one.

The newsletter

If you sign up for the newsletter we store your email address, the language of the page you signed up from and which part of the site the form was on, together with the date. We do not store your name, your IP address or anything you did on the site.

Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to us, and every email we ever send will carry an unsubscribe link. We use the address to tell you about Alchemess and nothing else, and we never pass it to anyone for their own marketing.

What we do not do

No profiling, no automated decision-making with legal effect, no advertising cookies, no data brokers, no sale of personal data. We do not knowingly collect anything from children.

International transfers

We are in Thailand, and our processors operate globally. Where personal data leaves the EEA or the UK, the transfer relies on the European Commission's Standard Contractual Clauses and the UK Addendum, as implemented in our processors' terms.

Your rights

Under the GDPR, the UK GDPR and Thailand's PDPA you can ask for access to your personal data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. Write to info@alchemessgame.com and we will answer within one month.

You can also complain to a supervisory authority: your local data protection authority in the EU, the ICO in the UK, or the PDPC in Thailand.

Because the site has no accounts, we usually hold nothing that identifies you. If you make a request and we cannot connect any data to you, we will say so rather than ask you for identification we do not otherwise need.

Changes

If this policy changes we will update the date at the top. Material changes will be called out on the page.