1. Subject of this policy
This policy applies to:
- the game EVICTIO on Steam,
- email support for EVICTIO, and
- this website.
Steam accounts, purchases, payments, refunds and Steam Achievements are operated by Valve. Valve’s Privacy Policy and Steam Subscriber Agreement apply in addition to this document. We are not the controller of your Steam account.
2. Data we do not process
EVICTIO does not include:
- a user account, registration or login operated by us,
- online multiplayer or servers operated by us,
- advertising, tracking pixels or marketing profiling,
- third-party analytics or crash-reporting tools (such as game-analytics SDKs),
- precise geolocation, or
- automated decision-making including profiling within the meaning of Article 22 GDPR.
We do not sell personal data.
3. Local game data and Steam Cloud
Save files and settings are stored locally on the player’s device. We do not receive that data unless the player chooses to attach it to a support message.
EVICTIO may use Steam Cloud. If enabled, save data may also be stored on Valve’s servers and synchronised between the player’s Steam-connected devices. Valve is the controller for that storage. Steam Cloud can be managed in the player’s Steam settings.
4. Steam features
EVICTIO uses the Steamworks SDK for features provided by Steam, in particular:
- launching and authenticating the game through Steam,
- checking ownership of the product,
- unlocking Steam Achievements when in-game goals are completed, and
- optional Steam Cloud save synchronisation.
Those features are provided on Valve’s infrastructure and are linked to the player’s Steam account. Valve may process an account identifier, playtime, progress, achievement status and, if Steam Cloud is enabled, save files. Visibility of achievements on a Steam profile is governed by the player’s Steam privacy settings.
Playing EVICTIO does not cause Valve to send us an email address or legal name.
5. Support communications
If a player contacts us by email, we process the information contained in that message. This may include an email address, a name if provided, the content of the request, and any screenshots, logs or save files that were attached.
This data is used only to handle the request. It is not used for advertising.
Providing support information is voluntary. The game can be played without contacting us.
6. This website
This website is hosted on GitHub Pages (GitHub, Inc.). Retrieval of the pages creates ordinary server logs required to deliver the site, which may include IP address, time of access, requested file and browser user agent.
We do not place first-party cookies on this website and we do not use Google Analytics or comparable analytics or advertising tools on this website.
7. Purposes and legal bases
Personal data is processed for the following purposes and on the following legal bases under Article 6 GDPR:
- Providing the game through Steam, including Steam Achievements and Steam Cloud: Article 6(1)(b) GDPR, insofar as processing is necessary to deliver the product obtained on Steam; otherwise Article 6(1)(f) GDPR. The legitimate interest is the proper operation of advertised Steam features.
- Responding to support requests: Article 6(1)(b) GDPR where the request relates to the purchased game, and Article 6(1)(f) GDPR. The legitimate interest is the handling of player enquiries.
- Operating this website: Article 6(1)(f) GDPR. The legitimate interest is making this legally required information publicly available.
Where processing is based on Article 6(1)(f) GDPR, the player may object as described in section 11.
8. Recipients
Depending on the interaction, the following categories of recipients may be involved:
- Valve / Steam, as independent controller of the Steam account and Steamworks services,
- GitHub, Inc., as host of this website,
- the email service used to receive support mail (currently Google, because support mail is handled via Gmail).
Personal data is not transferred to other third parties for their own marketing purposes.
9. Transfers outside the EEA
Valve and GitHub are based in the United States. Support email infrastructure may also involve processing outside the European Economic Area. Such transfers are carried out on the basis of an adequacy decision, the EU-US Data Privacy Framework where the recipient is certified, and/or Standard Contractual Clauses pursuant to Articles 44 et seq. GDPR.
10. Retention
- Local save data remains on the player’s device until the player deletes it or uninstalls the game.
- Steam account data, Steam Cloud saves and Steam Achievements are retained by Valve according to Valve’s policies.
- Support emails are kept for as long as needed to handle the request and thereafter for up to 12 months, unless a longer period is necessary to establish, exercise or defend legal claims or to comply with a statutory obligation.
- Website logs are retained according to GitHub’s operating practices.
11. Rights of data subjects
Where the GDPR applies, players have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on Article 6(1)(f) GDPR. These rights may be limited where statutory exceptions apply.
Requests concerning data held by us should be sent to bd.interactive.studios@gmail.com with the subject line “Privacy – EVICTIO”.
Requests concerning a Steam account, Steam Cloud, purchases, refunds or the visibility of Steam Achievements must be directed to Valve / Steam Support. We cannot delete a Steam account.
Players also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of their habitual residence, place of work, or of an alleged infringement. In Baden-Württemberg, Germany, that authority is the State Commissioner for Data Protection and Freedom of Information (LfDI Baden-Württemberg): www.baden-wuerttemberg.datenschutz.de.
12. Third-party content and generative AI
EVICTIO incorporates third-party assets licensed from Fab and comparable marketplaces. Ownership of those assets remains with the respective authors or rights holders. EVICTIO credits those authors in the in-game credits. Where an asset is offered under a Creative Commons Attribution licence, that credit is required by the licence. Where an asset is offered under Fab’s Standard Licence, public credit is not required by Fab; it is provided in the credits nevertheless.
This does not involve processing players’ personal data.
Some shipped graphics and voice lines were created with generative AI tools and then selected or edited for use in EVICTIO. That material is game content. It is not used to process a player’s personal data or to profile players. The corresponding disclosure is also made in Steamworks, as required by Steam.
13. Children
EVICTIO is a horror game and is not directed at children. The applicable minimum age is the age rating displayed on the Steam store page. We do not knowingly request personal data from children. If we learn that a child has sent us personal data, we will delete it.
14. Security
Support correspondence is accessed only as needed to respond. This website and ordinary email are not specialised high-security environments. Players should not send passwords, payment data or identity documents. Payments for EVICTIO are processed exclusively by Steam.
15. Changes to this policy
This policy will be updated if the way EVICTIO processes data changes. The current version is the version published at this URL.
Date of this version: 1 October 2026.
16. Controller
The controller for the processing described in this policy, other than processing carried out by Valve on Steam, is:
Dominik Brun, BD Interactive Studios
Bleichenweg 15, 78467 Konstanz, Germany
bd.interactive.studios@gmail.com
Further provider details required under German law are set out in the Legal Notice.
No data protection officer has been appointed.