Privacy
The short version
This site sets no cookies, runs no advertising, and does no profiling. There is nothing to accept and no banner to dismiss. The only personal data we ever hold is an email address, and only if you hand it to us by subscribing to the newsletter.
Who is responsible
The data controller is WantWonder, publisher of Headway and The Transit Office. You can reach us at hello@headwaygame.com for anything in this policy, including requests to see or delete your data.
What we collect, and why
Newsletter
If you subscribe, we store the email address you enter, plus the date of your confirmation. We use it for one thing: sending you occasional updates about Headway and this news desk.
- Legal basis: your consent (Art. 6(1)(a) GDPR).
- Confirmation: we use double opt-in — you get an email asking you to confirm, and nothing is sent until you do.
- Withdrawing: every email carries an unsubscribe link, and one click is enough. You can also write to us and we will remove you by hand.
- Retention: until you unsubscribe. We do not keep a “suppression list” of former subscribers beyond what is technically required to honour your unsubscribe.
- We never sell, rent or share the list.
Server logs
Like any website, ours is served by machines that record requests. Our hosting provider processes the usual technical data — IP address, timestamp, requested page, browser user agent — to deliver pages and to block abuse and attacks.
- Legal basis: our legitimate interest in keeping the site up and secure (Art. 6(1)(f) GDPR).
- Retention: short, and controlled by the provider; we do not build profiles from these logs and do not use them to identify individual readers.
Audience measurement
We measure traffic with Cloudflare Web Analytics, which is deliberately privacy-preserving: it sets no cookies, does not fingerprint your device, and does not track you across sites. We see aggregate numbers — how many people read a page, roughly where in the world, which link brought them — and never an individual reader.
- Legal basis: our legitimate interest in knowing whether anyone is reading (Art. 6(1)(f) GDPR).
Cookies
We do not use cookies — not for analytics, not for advertising, not for “preferences”. Because of that, this site does not show a cookie banner: there is no consent to collect. If that ever changes, this page changes first and a consent request will appear before any cookie is set.
Who else touches your data
We keep the list of processors as short as we can:
| Who | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery, security, audience measurement | United States |
| MailerLite (UAB “MailerLite”) | Newsletter delivery — only if you subscribe | European Union (Lithuania) |
Transfers outside the EU. Cloudflare is based in the United States. The transfer is covered by its certification under the EU–U.S. Data Privacy Framework and by the Standard Contractual Clauses in its data processing agreement. MailerLite is established in the EU, so newsletter data stays inside the Union.
Links to other sites
Every story links out to the original publisher. Once you follow that link you are on someone else’s site, under their privacy policy, not ours. We do not control what they do and we get nothing back from your visit.
Your rights
Under the GDPR you can ask us to: access the data we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time — that does not affect anything done before you withdrew.
Write to hello@headwaygame.com and we will answer within 30 days. If you think we have handled your data badly, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.
Changes
If this policy changes in a way that affects you, we will update the date below and, for anything material, say so in the newsletter.