Privacy policy

Last updated 30 September 2026

This policy explains what personal data Shepherd Rock collects when you visit this website or play Fort the Win, why, and what you can do about it. The short version: we collect as little as we can, we don't sell it, and we don't use advertising or tracking cookies.

Who we are

Shepherd Rock, a sole proprietorship ("we", "us") is the controller of the personal data described here. You can reach us about anything in this policy at contact@shepherdrock.com. Our business details are on the legal notice.

This website

You can read this website without an account, and it sets no cookies. We don't use analytics, advertising or social media trackers, and our fonts are served from our own site rather than a third-party font service.

The site is hosted by Cloudflare. Like any web host, Cloudflare necessarily processes technical data when you visit, such as your IP address, browser type and the pages you request, so that it can deliver the pages and protect the site from abuse. This data is kept only briefly in Cloudflare's logs. You can read Cloudflare's privacy policy.

If you follow a link from this site to Steam, the Epic Games Store or another website, that site's own privacy policy applies.

Fort the Win

Fort the Win is sold and run through PC stores such as Steam (operated by Valve) and the Epic Games Store (operated by Epic Games). Your account, payments and friends list are handled by the store, under its own privacy policy:

• Steam privacy policy
• Epic Games privacy policy

We never see your payment details. Stores give us sales and usage reports that are mostly aggregated, and the game may use store features that involve your store account ID and display name, such as achievements, cloud saves and friends. That information is processed by the store to provide those features to you.

Your save games and settings are stored on your own computer, and in the store's cloud save service if you have it turned on. The game does not currently send personal data to our own servers. If that changes, for example to add crash reports, analytics or online play, we will update this policy first and tell you in the game where the law requires it.

When you contact us

If you email us, for example with a support question, a bug report or a press request, we use your email address and whatever you tell us to reply and help you. We keep that correspondence for as long as we need it to deal with your message and any follow-up, and then delete it.

Our legal basis

Where data protection laws such as the GDPR or UK GDPR apply, we rely on:

• contract, to provide the game and the support you ask for;
• legitimate interests, to run, secure and improve this website and the game, and to answer messages you send us;
• legal obligation, where we must keep records, for example for tax.

Who we share data with

We don't sell or rent personal data. We only share it with service providers who help us run the studio, such as our web host (Cloudflare), our email provider and the stores that sell the game, and only as far as they need it to do that. We may also disclose data if the law requires us to.

We are based in the United States, and our service providers may process data in the United States and other countries. Where data about people in the UK or the European Economic Area is transferred, it is protected by the safeguards the law requires, such as the European Commission's standard contractual clauses.

How long we keep it

We keep personal data only for as long as we need it for the purposes above, then delete it. Records we must keep by law, such as financial records, are kept for the period the law sets.

Your rights

Depending on where you live, you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct or delete it;
• object to or ask us to restrict how we use it;
• receive it in a portable format;
• withdraw consent, where we rely on consent.

To use any of these rights, email contact@shepherdrock.com. We will answer within one month. We don't sell personal data or use it for targeted advertising, so there is nothing to opt out of there. You also have the right to complain to your local data protection authority.

Data held by Steam or Epic about your store account is controlled by them, so requests about it are best made to them directly.

California residents

If you live in California, you can ask what personal information we have collected about you and ask us to delete it, using the email address above. We don't sell or share personal information for cross-context behavioural advertising, and we won't treat you differently for making a request.

Because this website doesn't track visitors across sites or over time, it works the same way whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.

Children

This website and our games are not designed to collect personal data from children, and we don't knowingly collect personal data from anyone under 13, or under the minimum age set by the law where they live. Each store sets its own minimum age for accounts. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We will update this page if the way we handle data changes, and change the date at the top. Significant changes will also be announced on the Fort the Win dev log.

Questions? Email contact@shepherdrock.com.