Privacy Policy

1. Identification of Data Controller

Deadweight Worm Digital Media (“we”, “us”, or “our”), located at Central Square, 29 Wellington Street, Leeds, LS1 4DL, United Kingdom, acts as the designated Data Controller for all personal data processed via deadweightworm.com in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We place privacy, data minimization, and transparency at the foundation of our software review publication. We do not demand account registration, financial credentials, or identity documents to browse our game directory.

2. Categories of Information Processed

Depending on how you interact with our Platform, we may process the following types of information:

• Technical & Telemetry Data: When connecting to our servers, standard web server logs capture IP addresses (anonymized at subnet level where feasible), browser type and build version, operating system identifier, referring URL headers, and timestamps.
• Voluntary Communication Data: When utilizing our editorial dispatch form, you voluntarily submit your name, electronic mail address, subject category, and dispatch text message.
• Local Client Preferences: We store non-identifying interface preferences and consent tokens locally within your client browser (via LocalStorage and technical session cookies) to remember cookie banner choices and layout preferences.

3. Lawful Bases for Processing (Article 6 UK GDPR)

We collect and process your information strictly under substantiated lawful grounds:

• Legitimate Interests (Article 6(1)(f)): Analyzing aggregate platform health, preventing distributed denial-of-service (DDoS) events, upholding infrastructure stability, and responding to inquiries sent via our contact form.
• Consent (Article 6(1)(a)): Deploying optional analytical cookies or telemetry scripts intended to gauge directory engagement, which you are free to accept, decline, or withdraw at any juncture.
• Legal Obligation (Article 6(1)(c)): Maintaining audit logging necessary to comply with United Kingdom regulatory reporting obligations.

4. Analytical & Storage Technologies

We employ client-side storage mechanisms and strictly necessary cookies to ensure seamless navigation across our platform. Detailed disclosures on cookie categories, session durations, and opt-out controls are documented within our dedicated Cookie Policy.

5. Data Retention Schedules

We retain personal information only for the duration necessary to satisfy the objectives for which it was acquired:

• Server Access Logs: Automatically purged on a rolling 30-day schedule;
• Editorial Communications: Retained for up to twelve (12) months following resolution to facilitate ongoing support or developer dialogues;
• Cookie Preferences: Stored locally within your browser client until cleared by the user or up to a maximum duration of 180 days.

6. Information Sharing & Third-Party Disclosures

We strictly uphold an anti-brokerage policy: we do not trade, rent, monetize, or disclose your personal details to commercial data brokers, advertising aggregators, or external marketing entities.

Information is shared solely with vetted technical hosting infrastructure providers who operate under contractual data processing agreements that mandate full compliance with UK GDPR standards.

7. Your Statutory Rights as a Data Subject

Under the Data Protection Act 2018 and UK GDPR, you hold significant statutory rights concerning your personal information:

• Right of Access: Request a copy of the personal records we maintain regarding your interactions;
• Right to Rectification: Request correction of inaccurate, obsolete, or incomplete records;
• Right to Erasure (“Right to be Forgotten”): Request the permanent removal of your data where no overriding legal retention obligation persists;
• Right to Restrict Processing: Request the restriction of active processing under defined dispute scenarios;
• Right to Object: Object at any time to data processing carried out under our legitimate interests;
• Right to Data Portability: Request transmission of your submitted details in a structured, machine-readable format.

8. Security Safeguards

We implement modern enterprise-grade security protocols, including TLS 1.3 cryptographic transit encryption, strict Content Security Policies (CSP), continuous vulnerability mitigation, and access restriction protocols on all database and web servers.

9. Complaints & Supervisory Oversight

If you believe your data privacy rights have been infringed, you maintain the right to register a formal complaint with the United Kingdom supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113 • Website: ico.org.uk

10. Privacy Officer Contact Details

To exercise your data protection rights or discuss our privacy mechanisms, please address our appointed Privacy Officer:

• Office: Data Protection Lead, Deadweight Worm Digital Media
• Postal Address: Central Square, 29 Wellington Street, Leeds, LS1 4DL, United Kingdom
• Direct Line: +44 7822 012345
• Privacy Desk: contact@deadweightworm.com