Privacy policy


Last updated: 11 October 2026

This privacy policy covers forgottencartridge.com and the game Sin And Serve, including its free Steam demo. Both are run by Forgotten Cartridge, a solo indie game studio. It explains what data may be collected through the website and the game, why it is used, and how you can contact us about it.

The data controller is Mohammad Alizadeh. Forgotten Cartridge is run by Mohammad Alizadeh, a sole trader registered in Poland.

We do not sell your personal data. We only collect and use the information needed to run this website, manage the newsletter, host files, provide the trailer, and find bugs and improve the game.

Newsletter

If you sign up for the newsletter, your email address is sent to Kit, our newsletter provider, and stored in Kit's systems. We use it to manage your subscription and send updates about Sin And Serve.

You give us consent when you sign up through the newsletter form. You can withdraw your consent and unsubscribe at any time using the unsubscribe link included in our emails.

Kit may keep information about unsubscribed subscribers in its systems, including historical email information, unless the subscriber is deleted. You can ask us to delete your information at any time.

Kit's privacy policy is available at:

https://kit.com/privacy

Hosting and Cloudflare

This website is hosted and delivered using Cloudflare. Cloudflare may process technical information about visitors and requests, such as IP addresses, browser and device information, requested URLs, and other technical information needed to provide and protect its services.

This also applies to files served through Cloudflare R2, such as press kit downloads.

Legal basis: legitimate interest. We need this to run and protect the site.

Cloudflare's privacy policy is available at:

https://www.cloudflare.com/privacypolicy/

Trailer video

The press kit may include a trailer hosted through YouTube. The video is loaded from YouTube when you choose to play it.

When the video is played, YouTube and Google may collect information about the playback and your device according to their own privacy policies.

Legal basis: consent. The video loads only when you choose to play it.

Google's privacy policy is available at:

https://policies.google.com/privacy

The game: analytics

Sin And Serve sends anonymous gameplay events to our own server. The server runs on Cloudflare (Workers and D1).

The data is: a random install ID made by the game, a session ID, the time, your OS version, platform, Unity version, game build, event names, and your country (from Cloudflare).

We do not collect your Steam ID, name, email or hardware ID. We do not store IP addresses.

We use this data to find bugs and improve the game. Legal basis: legitimate interest.

You can turn analytics off in the game settings.

We keep this data for 12 months. Then we delete it.

The game: GameAnalytics

The game also sends the same kind of anonymous gameplay data to GameAnalytics, an analytics service. GameAnalytics processes this data for us as our processor.

GameAnalytics' privacy policy is available at:

https://gameanalytics.com/trust/privacy-notice

The game: bug reports

A bug report is only sent when you press the report button in the game and confirm.

A report contains a screenshot, the game log, system info (OS, GPU, RAM, resolution), the game build, the current scene, your install ID, and an optional comment from you.

Usernames in file paths are removed before the report is sent.

Reports are stored in Cloudflare R2. Legal basis: consent.

We keep reports for 6 months. Then we delete them.

Steam

Sin And Serve is sold and played through Steam. Steam is run by Valve, which processes data under its own privacy policy.

Valve's privacy policy is available at:

https://store.steampowered.com/privacy_agreement/

International transfers

Cloudflare, Kit and Google may process data outside the EU.

They use safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your rights

Under applicable data protection law, including the GDPR, you may have the right to access your personal data, correct inaccurate information, request deletion, restrict certain processing, object to certain uses of your data, and request a copy of your data in a portable format.

Where processing is based on your consent, you can withdraw that consent at any time.

You may also have the right to complain to your local data protection authority.

The game has no accounts. For requests about game data, include your install ID. It is shown in the game's settings menu.

To exercise your rights or ask questions about your personal data, contact us at:

hello@forgottencartridge.com

Contact

For privacy questions or data requests, contact:

hello@forgottencartridge.com