Privacy Policy

Last updated: 10/02/2026

Turnip28 respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, and how we handle it, in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

Turnip28 is an independent tabletop wargame project.

Data controller:
Turnip28
Contact email: turnip28vegbox@gmail.com
Website: turnip28.com

If you have any questions about this policy or your personal data, you can contact us using the details above.

2. What personal data we collect

We only collect personal data when it is necessary and relevant. This may include:

  • Contact information
    Such as your name and email address, if you:

    • Subscribe to a newsletter

    • Contact us via email or a contact form

    • Participate in events, playtests, or community activities

  • Technical data
    Such as:

    • IP address

    • Browser type and version

    • Device and operating system

    • Pages visited and time spent on the site

This data is collected through standard website analytics or cookies.

3. How we use your data

We use your data only for legitimate purposes, including:

  • To respond to messages or inquiries

  • To send newsletters or project updates (only if you opted in)

  • To improve the website and understand how it is used

  • To manage events, playtests, or community participation

We do not sell your data or use it for automated decision-making or profiling.

4. Cookies

The Turnip28 website may use cookies to:

  • Ensure the website functions correctly

  • Gather anonymous analytics data

You can control or disable cookies through your browser settings. Disabling cookies may affect how the website functions.

If required, a cookie banner or consent tool will be used.

5. Third-party services

We may use trusted third-party services, such as:

  • Website hosting providers

  • Email newsletter services

  • Analytics tools (e.g. privacy-friendly analytics)

These providers only process data on our behalf and are required to comply with GDPR.

We do not embed tracking-heavy advertising platforms.

6. How long we keep your data

We only keep personal data for as long as necessary:

  • Email correspondence: as long as needed to respond

  • Newsletter subscriptions: until you unsubscribe

  • Event-related data: deleted after the event unless consent is given

You can request deletion at any time.

7. Your rights (GDPR)

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request data portability

To exercise these rights, contact us via the email address above.

You also have the right to lodge a complaint with your local data protection authority.

8. Data security

We take reasonable technical and organisational measures to protect your data against loss, misuse, or unauthorised access.
However, no method of transmission over the internet is 100% secure.

9. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.