Privacy Policy

This Privacy Policy applies to the Bifrost marketing website at bifrostgaming.com. It covers what data we collect when you browse the website, view product information pages (Bifrost, Frostbite, Loki, Admin Console), check the system status page, or use the contact features.

This policy does not cover the Bifrost platform itself (the server management control panel, Frostbite stats portal, or Loki companion app). Those services have their own data handling practices which are covered separately when you create an account and use the platform.

Shrapnelworks ("we", "us", "our") operates the Bifrost website. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our site, in compliance with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

By using our website, you agree to the collection and use of information as described in this policy. We will not use or share your information with anyone except as described here.

We collect the following types of data:

• Cookie preference — Your acceptance or rejection of non-essential cookies, stored locally in your browser via localStorage.
• Analytics data — We use Google Analytics 4 (GA4) to collect anonymised usage data including pages visited, navigation events, referral source, and general device/browser information. This data is only collected after you explicitly accept cookies via our consent banner. If you decline cookies, no analytics data is collected or sent.
• Contact interaction events — When you use the "Contact Us" feature, we track anonymised events (modal opened, category selected, email copied) via GA4 to understand how visitors engage with our contact options. No personal information such as your name or email address is collected through this feature — the contact modal simply reveals our email addresses for you to copy.
• System status requests — The System Status page makes requests to our API to display service health information. These requests are transient and contain no personal data.

We do not collect your name, email address, or any personal contact information through this website. The contact feature displays our email addresses for you to reach out to us directly from your own email client.

Under the GDPR, we process your data based on the following legal grounds:

• Consent (Article 6(1)(a)) — Google Analytics 4 cookies and event tracking are only activated after you explicitly accept cookies via our consent banner. GA4 operates in consent mode and will not store cookies or send identifiable data until you consent.
• Legitimate interest (Article 6(1)(f)) — Storing your cookie preference in localStorage is necessary to respect your choice across visits. This is classified as an essential/strictly-necessary function that does not require consent under GDPR.

When you have accepted cookies, the following events are sent to Google Analytics 4:

None of these events contain personal data. They help us understand which pages and features are most useful to visitors.

• Cookie preference — Stored in your browser indefinitely until you clear your browser data or reset it via the preference manager above.
• Analytics data — Google Analytics 4 retains data for 14 months by default. After this period, user-level and event-level data is automatically deleted from Google's servers. Aggregated reports are retained indefinitely.

As a resident of the EU or UK, you have the following rights regarding your personal data:

• Right of access — Request a copy of the data we hold about you.
• Right to rectification — Request correction of inaccurate data.
• Right to erasure — Request deletion of your personal data.
• Right to restrict processing — Request that we limit how we use your data.
• Right to data portability — Request your data in a machine-readable format.
• Right to object — Object to our processing of your data.
• Right to withdraw consent — You can withdraw your cookie consent at any time using the preference manager at the top of this page. Declining or resetting cookies immediately revokes GA4's permission to store cookies or collect identifiable data.

You also have the right to lodge a complaint with your local data protection supervisory authority (e.g. the ICO in the UK or your national authority in the EU).

We use the following third-party service on this website:

• Google Analytics 4 (Google LLC) — Provides anonymised website analytics. Data is processed by Google in accordance with their Privacy Policy. GA4 data may be stored on servers in the United States. Google is certified under the EU–US Data Privacy Framework. GA4 only activates after you accept cookies on this site.

This website also contains links to external services (e.g. Discord). If you follow these links, you will be subject to the privacy policies of those services. We have no control over and assume no responsibility for their content or practices.

We do not sell, trade, or otherwise transfer your personal data to any other third parties.

Analytics data processed by Google may be transferred to and stored on servers located outside the European Economic Area (EEA), including the United States. Google relies on the EU–US Data Privacy Framework and Standard Contractual Clauses to ensure adequate protection for this data. This transfer only occurs when you have accepted cookies.

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

The data controller responsible for your personal data is:

If you have any questions about this policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us using the button above.