← Back to HeadAhead

Privacy Policy

Last updated: April 20, 2026

1. Overview

HeadAhead ("the game", "we") is a free-to-play browser game operated by David, based in Germany. This privacy policy explains what data we collect, why, and how we handle it. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

2. Data controller

3. What data we collect

Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) in cookieless mode to understand how players use the game. This means:

• No cookies are set on your device
• No consent banner is required or shown
• No personally identifiable information is collected
• IP addresses are anonymized by Google before processing

GA4 in cookieless mode collects aggregated, anonymous data such as page views, general geographic region (country level), device type, and in-game events (e.g., matches started). This data is used solely to improve the game experience.

Game state

When you play online, the game stores a unique connection identity in your browser's local storage. This is used to maintain your session during matches and enable reconnection. It is not linked to any personal information and is never shared with third parties.

No account data

HeadAhead does not currently require an account. No email addresses, passwords, names, or other personal information are collected through the game.

4. How we use your data

The anonymous analytics data we collect is used exclusively to:

• Understand which features players use
• Identify and fix bugs
• Guide development priorities
• Monitor game performance

5. Data sharing

We do not sell, trade, or share your data with any third parties, except:

• Google Analytics - processes anonymized analytics data on our behalf. Google's privacy policy applies to their processing: policies.google.com/privacy
• Cloudflare - hosts the game's frontend and may process standard web server logs (IP addresses, request metadata) as part of CDN delivery. Cloudflare's privacy policy: cloudflare.com/privacypolicy
• SpacetimeDB - provides the multiplayer backend. Connection data is processed to enable real-time gameplay.

6. Your rights (GDPR)

As we do not collect personally identifiable information, most GDPR data subject rights (access, rectification, erasure, portability) do not apply in practice - there is no personal data to access or delete. However, you have the right to:

• Object to processing - You can disable Google Analytics by using a browser extension such as Google Analytics Opt-out
• Lodge a complaint - You may contact the relevant data protection authority. For Germany, this is the Landesbeauftragte für Datenschutz Niedersachsen
• Contact us - If you have any questions or concerns, email headahead@nantiadigital.com

7. Data retention

Google Analytics data is retained for 14 months (Google's default for GA4) and then automatically deleted. Game session data (match state, bullet positions, etc.) is deleted as soon as a match ends - it is not stored long-term.

8. Children's privacy

HeadAhead is not directed at children under 16. We do not knowingly collect personal data from children. Since no personal data is collected from any user, this is enforced by design.

9. Changes to this policy

If we make significant changes to this privacy policy, we will update the "Last updated" date at the top. If we begin collecting personal data in the future (e.g., through an account system), this policy will be updated accordingly and appropriate consent mechanisms will be implemented.