Privacy Policy
This policy explains what personal data UTC+2 Studio collects, why we collect it, where it is kept and what you can ask us to do with it. It covers two different things: this website, which collects nothing and sets no cookies, and the game Double Alpha, whose online features do need an identifier and a stored result. Where a section below applies to only one of them, it says so. We keep collection to the minimum the game needs to work, and we do not sell or rent personal data to anyone.
Who we are
UTC+2 Studio is an independent game development studio, registered as a sole proprietorship in Kyiv, Ukraine. For the purposes of the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection", UTC+2 Studio is the data controller for the data described below.
You can reach us at [email protected] for anything in this policy, including requests about your data. If you need the registered legal name and details of the controller - for example to file a request with a supervisory authority - ask and we will provide them.
This website
utcplus2.com is a static site. It sets no cookies, runs no analytics, embeds no third-party scripts or trackers, and has no forms or accounts. Nothing you do here is profiled.
The site is served through Cloudflare, which processes connection data such as your IP address, browser user agent and the time of the request in order to deliver the page and to block attacks. This is standard network operation and we do not use that data to identify visitors.
Double Alpha
Double Alpha is distributed on Steam and signs you in with your Steam account. When you play online features, our server receives and stores:
- Your Steam ID - the numeric account identifier Steam gives us, used to recognise you across sessions.
- Your Steam profile name - shown next to your result on leaderboards.
- Run results - stage identifier, score, time, hit factor, hits by scoring zone, penalties and the timestamp of the run.
- Technical request data - IP address, request time and game version, written to server logs for security and abuse prevention.
We do not collect your email address, real name, postal address, phone number or payment details. Purchases are handled entirely by Valve; we never see your card or billing information. The game contains no advertising, no advertising SDKs and no third-party analytics or telemetry.
Steam itself is operated by Valve Corporation, which is a separate controller with its own terms. See the Steam Privacy Policy for what Valve collects when you buy, install or run a game.
Why we use it
The website
Nothing. Connection data handled by Cloudflare exists only to deliver the page and to block attacks; we do not read it, analyse it or build anything from it.
Double Alpha
- To run the competitive features. Leaderboards, the Daily Cup and your own history cannot exist without an identifier and a stored result.
- To keep results honest. Server-side scoring, rate limits and log review protect the leaderboard from tampering and automated submissions.
- To keep the service working. Diagnosing errors, measuring load and fixing bugs.
Under the GDPR our legal bases are performance of a contract (Article 6(1)(b)) for the online features you choose to use, and our legitimate interests (Article 6(1)(f)) in securing the service and preventing abuse. Playing offline requires no account and sends us nothing.
Who else sees it
We do not sell, rent or trade personal data, and we do not share it for advertising. Data is disclosed only to the service providers that operate our infrastructure, and only so that they can provide that service.
The website
- Cloudflare - DNS, TLS and protection against attacks. This is the only third party involved in serving the site.
Double Alpha
- Amazon Web Services - hosting for our application server and database.
- Cloudflare - TLS and attack protection in front of the game API.
- Valve Corporation - authentication, and Steam achievements where the game uses them.
We may also disclose data where the law requires it, for example in response to a valid legal request. This applies to both.
Where it is kept
The website
Static files delivered through Cloudflare's network. There is no database and no store of visitor data on our side.
Double Alpha
Our server and database are hosted on Amazon Web Services. Cloudflare operates a global edge network, so requests may be routed through servers in a number of countries, including outside Ukraine and the European Economic Area. Both providers offer Standard Contractual Clauses for such transfers, and we rely on those clauses where they apply.
Data is transmitted over HTTPS in both cases. Access to the database is restricted to the studio.
How long
The website
We keep nothing. Cloudflare's own security logs are retained under Cloudflare's terms, not ours.
Double Alpha
- Run results and leaderboard entries - kept while the online services operate, because a competitive record loses its meaning once it is deleted. Removed earlier on request.
- Server access logs - kept for up to 30 days, then deleted.
Either
Email correspondence is kept for up to 24 months, so that we can follow up on a support case.
Your rights
If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive a copy in a portable format. Ukrainian law gives comparable rights. We extend these rights to every player, wherever you are.
Write to [email protected] from an address you can be reached at, and tell us your Steam profile URL or Steam ID so that we can find your records. We answer within 30 days. There is no charge.
Erasing your data removes your entries from the leaderboards; this cannot be undone. If you believe we have handled your data improperly you can complain to a supervisory authority: in the EEA, the data protection authority of your country; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.
Children
Double Alpha is not directed at children. A Steam account is required to play, and Valve requires account holders to be at least 13 years old. We do not knowingly collect data from children below the age at which consent is valid in their country. If you believe a child has provided us with data, write to us and we will delete it.
Changes
We may update this policy as the game develops. The effective date at the top of the page always reflects the current version. If a change materially affects how we use your data, we will say so in the game's Steam news feed rather than change the page quietly.
Contact
UTC+2 Studio, Kyiv, Ukraine
[email protected]