from the makers of Bellchain
Docs
Deutsch English
Play

Privacy

In short: Undermine Squad needs no account, sets no cookies, shows no ads and loads nothing from third-party servers. This English text is a translation for convenience; the German version is legally binding.

1. Controller

Bjoern Blomquist, c/o JL Consulting Group GmbH #1797, Zürcherstrasse 84, 8852 Altendorf, Switzerland. Email: hello@bellchain.app

2. The essentials

  • No accounts, no sign-in, no cookies, no third-party analytics, no ads.
  • Website, docs and game load fonts, images, music and scripts only from our own server.
  • Your progress, crew and settings are stored only in your browser.
  • We count visits and game events ourselves, on our own server, without cookies and without storing IP addresses.
  • Only if you donate do you go to Stripe.

3. Visiting the website, docs and game

When you visit, your browser sends technically necessary data to our server: IP address, date and time, the requested address, your preferred language and the browser type. We use it only to deliver the pages and to send you to the German or English version based on your language setting.

Visit counter. To see how many people use the website, docs and game and where they come from, we run our own counter on our own server (hosting: see section 6). It works without cookies and without a script in your browser and passes nothing on to third parties. For page views of the website and docs, our web server hands the counter one line per page viewed (not for images, fonts, music or scripts) with time, address, language, browser type, the page you came from, and your IP address only truncated (IPv4 without the last byte, IPv6 only the first 48 bits), never with cookies. The lines are not written to a file. From the truncated IP address and the browser type the counter forms a hash with a key that changes every day, so the same person counts only once a day; from it it derives country, browser, device type and origin. It does not store the truncated IP address or the browser type. The per-visitor details are kept until the end of the day, afterwards only daily totals without personal reference, which we keep for up to 400 days; the hash cannot be linked back after the day ends. We recognise programs such as search engines and do not count them as visitors. If your browser sends “Global Privacy Control” or “Do Not Track”, we do not count the page view at all.

Game events. The game reports anonymous events to our counter (stats.undermine-squad.com): that the game was opened, which scenario you start, whether a round was won, lost or ended and how long it took, your language, whether you use the modern or classic key layout, and whether you clicked “Donate”. This happens as an image request without cookies and without an identifier: there is no user ID, nothing is stored in your browser, and progress, crew and names are not sent. The rules above apply here too: only a truncated IP address on receipt, a daily hash, no disclosure. With “Global Privacy Control” or “Do Not Track” the game reports nothing.

Access to the figures. Only we see the evaluation, after signing in with a code that we send by email to an authorised address. For sending we use the email service Lettermint (Netherlands, servers in the EU). The evaluation sets a cookie, but only in our own browser after signing in; visitors get none.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to deliver the pages securely and to see how many people use them and what they enjoy, without recognising anyone. The connection is encrypted via HTTPS.

4. Storage in your browser

The game stores your crew (names, ranks, experience), settings (language, controls, volume) and tutorial progress in your browser’s local storage. This data never leaves your browser. You delete it by clearing the site data of undermine-squad.com in your browser. The docs remember the light or dark theme there. No consent is required because this storage is only needed for the function you asked for.

5. Donations via Stripe

The “Donate” button takes you to a Stripe payment page (Stripe Payments Europe, Ltd., Dublin, Ireland). Only there do you enter the amount and payment details, which Stripe processes under its privacy policy (stripe.com/privacy). Stripe gives us the amount, time, and name and email address if you provide them, but never your card number. We use these details only for accounting and keep them as long as the law requires. The legal basis is Art. 6(1)(b) and (c) GDPR.

6. Hosting

Our server is located in a data centre in Frankfurt am Main, Germany, operated by Vultr (The Constant Company, LLC, West Palm Beach, USA) on our behalf (Art. 28 GDPR, Art. 9 FADP). As Vultr is a US company, access from the USA cannot be ruled out; transfers are based on the EU Commission’s standard contractual clauses, and Vultr is certified under the EU-U.S. Data Privacy Framework.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to us at the address above. You can also lodge a complaint with a data protection authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

As of November 2026