Privacy Policy

This privacy policy applies to the information M2H B.V.(hereinafter referred to as “M2H” or “We”) collects about you when you register with us for our products, use the M2H websites, videogames, mobile applications, online store or other services (“Services”). “you” and “your” mean the user of our Services. In this policy, we want to be clear about the collection of your information.

If you do not agree to this Privacy Policy, please do not use the Services. Your continued use of the Services will signify your acceptance of these changes.

1. Collection of information

When using our Services some personal information about you is collected to provide a service you’ve requested or authorized: what information is collected depends on the product or service. Example of the information we collect:

Websites: Cookies and measurement M2H.nl sets no cookies of its own beyond the one Cloudflare security cookie described below, and uses no advertising or profiling trackers. We do not use Google Analytics.

To understand which pages are read we use Cloudflare Web Analytics. It works without cookies and without storing anything on your device, and it does not build a profile of you or follow you to other websites. We see aggregated figures only: which pages were viewed, which site referred a visit, and roughly which country it came from.

We also keep our own visitor statistics with Umami, open-source software running on our own server in the European Union. It sets no cookies and does not store your IP address: it counts page views, the page you came from, your country and browser type, and whether a button such as a store link or the newsletter form was used. Nothing in it identifies you, and nothing leaves our server.

Our websites are served through Cloudflare, which acts as a processor on our behalf and handles your IP address in order to deliver the pages and to protect the site against attacks and abuse. To tell browsers from bots Cloudflare sets one short-lived cookie, __cf_bm, which expires after thirty minutes and identifies nobody. It is the only cookie you will see from M2H.nl.

Newsletters and competitions
For subscribing to a newsletter or when entering a giveaway/competition we may ask you for your personal information (Email address, full name). In the case of physical prizes, we may also need your (shipping) address.

Our newsletter runs on Sendy, self-hosted on our own server, and the messages are delivered through Amazon Simple Email Service. Your address is stored by us and is never sold or passed on for anyone else’s marketing. Every message carries an unsubscribe link, and using it removes you immediately.

Spam protection on the subscribe form. The subscribe form is protected by Google reCAPTCHA. On pages that carry the form, Google receives your IP address and browser details once you interact with the form, and may set a cookie to tell people from bots. Google processes this in the United States under the EU-US Data Privacy Framework. We use it for nothing else.

NDA agreements
When we have a closed alpha/beta test of game, or any similar private activity, we may need you to sign a Non Disclosure Agreement contract. To make a legally binding contract possible, your full name and address will be required.

Games
Our games can transmit the following information:
Diagnostic information (Including, but not limited to: Performance, System information such as operating system, resolution, crash dumps, log files, connection information, driver versions), user identification (Including, but not limited to: A platform ID such as a Steam User ID, Computer Name, IP address) information on the usage of the Service(Including, but not limited to: Screenshots, Chat logs and behavior on the service)

Where that data goes: our own game backend (accounts, progress, diagnostics) runs on Google Cloud servers in the European Union, on infrastructure we operate ourselves. Multiplayer sessions are relayed through Photon Cloud (Exit Games GmbH, Germany), which handles your connection and, while you play, your player name and chat. Purchases in the mobile versions are made with the App Store or Google Play; the purchase itself is between you and that store, and we only receive what is needed to unlock the item.

2. Purpose of the Collection

The purpose of the collection is to ensure safety, to analyse usage, improve and provide our services and to intervene in abuses. For example: an IP address is used to be able to identify and ban users in case of abuse and your e-mail address is used for identification and when you forget your password.

3. Why we are allowed to hold it, and for how long

Under the GDPR every use of your data needs a lawful basis. These are ours:

Playing the games rests on the agreement between us: to let you play online we need to hold an identifier for you, which on a console or a store is the platform ID that platform gives us, and to keep a record of your progress.
Keeping the games working and fair rests on our legitimate interest. That is what the diagnostic data in section 1 is for: crash dumps and connection information to fix what is broken, and an IP address, chat logs and behaviour to act on cheating, abuse and harassment. We do not use any of it to profile or advertise to you.
Running the websites rests on the same legitimate interest in delivering the pages you asked for and keeping them available.
The newsletter rests on your consent. You gave it by subscribing and you can withdraw it at any time using the unsubscribe link in every message, or by mailing us. Withdrawing it does not affect anything that was sent before.
Purchases and support rest on the contract between us, and on the legal obligation to keep the financial records the Dutch tax authority requires.

How long we keep it:

Game accounts and progress are kept for as long as the game is online and the account is in use. Ask us and we will delete yours.
Crash dumps and diagnostic logs are kept only while they are useful for fixing the problem they describe, and are then rotated away.
Chat logs and abuse records are kept while a report or a ban is being handled, and long enough afterwards to enforce it.
Newsletter subscriptions are kept until you unsubscribe. There are two lists, game news and writing, each with its own subscription. Unsubscribing removes your address from that list.
Web server logs are kept for a short period for security and abuse handling, and are then rotated away.
Financial records are kept for seven years, because Dutch law requires it.

4. Where the platform ends and we begin

Our games are sold and played through Steam, the Epic Games Store, the PlayStation Store, the Microsoft Store and Xbox, the Nintendo eShop, the App Store and Google Play. Those companies decide for themselves what they collect about you: your account with them, your purchase, your friends list, your playtime, and anything else their own systems record. We are not in charge of that and this policy does not cover it, so read theirs as well.

What we get from them is limited: an identifier for your account on that platform, so the game knows who you are and can put you in a session with your friends on other platforms. What we do with that is what this policy describes.

5. Your rights

You can ask us to:

see the personal data we hold about you,
correct it if it is wrong,
delete it,
restrict what we do with it,
hand it over to you or to another provider in a common format,
stop using it where we rely on legitimate interest, and to withdraw consent where we rely on consent.

Mail [email protected] and we will answer within a month. We may ask you to confirm who you are first, so we do not hand your data to someone else.

If you think we are handling your data wrongly, you are entitled to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, and to do so in the EU country where you live.

M2H does not rent or sell your information to third parties for marketing or financial purposes. We can work with third parties to make your experience better, but our privacy policy doesn’t and can’t apply to those parties. We’re can not fully guarantee that other companies adhere to the same practices as us, so please be sure to read their policies and terms before sharing info with them.

7. Security

To protect your personal data, M2H takes appropriate technical and organizational measures. For example: our servers are automatically updated against security threats and different services/games run on our own servers. We also use encryption and hashing for certain info we collect.

While we do our best to secure your data please note that no server or data transmission is fully secure. We can not guarantee the security of the data transmitted. By using our Services you are acknowledging that you are possibly sending your personal info at own risk.

8. Children

Children under the age of sixteen should not register without the permission of a parent or guardian. By accepting this Privacy policy, you guarantee us that you are older than sixteen or that a parent/guardian gave you the permission to register.

8a. Where your data goes

Cloudflare (site delivery and analytics), Amazon Web Services (newsletter delivery) and Google (spam protection on the subscribe form, and video when you press play on a trailer) are companies based in the United States. Each is certified under the EU-US Data Privacy Framework, and our agreements with them include the EU standard contractual clauses. The newsletter list and the game servers themselves run in the European Union.

9. Contact Us

If you have any questions or concerns about this Privacy policy or its implementation, you may contact us: [email protected].

When you wish to adjust, correct, remove or hide your personal information, you may send us an e-mail: [email protected].

10. Changes of this privacy policy

We reserve the right to make changes in this Privacy Policy, so please check back from time to time to ensure you are aware of any changes. If there are significant changes in the way we collect or use your information, you’ll be notified prior to the implementation of the changes.

11. Miscellaneous

This Privacy Policy shall be governed by the laws of the Netherlands and submitted to the exclusive jurisdiction of the courts in the Netherlands.

M2H B.V.
The Netherlands
Chamber of Commerce: 66055210

Related links:
www.m2h.nl/privacy (this page)
www.m2h.nl/terms
www.m2h.nl/eula