Privacy Policy
Last updated: August 31, 2026
This policy explains how Gullhall handles personal data when you use the game at
gullhall.no or as an installed app.
1. Data controller
The data controller for Gullhall is Ramtech AS,
company registration number 931 944 312, Haugesundsgata 33,
4014 Stavanger, Norway.
Privacy questions can be sent to
post@ramtechas.no.
2. Data we collect
- Account data: the email address and username you provide at sign-up.
- Game data: clan membership, progress, chat messages and similar content you create in the game.
- Technical data: device and log data (e.g. IP address, browser type, timestamps) processed automatically by our infrastructure for security and operation.
If you sign in with Google, we receive your name and email from your Google account to create the account.
3. Purpose and legal basis
- Creating and managing your account and providing the game (performance of a contract).
- Sending essential transactional emails: email verification, password reset, and clan-request notifications (performance of a contract / legitimate interest).
- Operation, security and abuse prevention (legitimate interest).
We do not send marketing emails.
4. Third parties we share with
- Google Firebase (Authentication, Firestore, Hosting, Cloud Functions, Cloud Messaging) – account management, storage and operation of the game.
- SendGrid (Twilio) – sending transactional email.
These providers process data on our behalf. Data may be transferred to countries outside the
EEA under standard data-protection safeguards.
5. How we protect your data
- Encrypted in transit: all traffic between the app and our servers uses
HTTPS/TLS. The site sends an HSTS header, so browsers refuse unencrypted connections.
- Encrypted at rest: data is stored with Google Firebase, which encrypts
data at rest.
- Restricted access: access to production data is limited to Ramtech AS.
No outside party holds an account with access to the database, and the
administrator account is protected with two-factor authentication.
- Passwords: we never store passwords. Sign-in is handled by Firebase
Authentication, and we have no access to your password.
- Server-side access rules: what each account may read and write is enforced
by rules on the server, not only in the app. These rules have their own automated tests.
- Logging: administrative actions are logged so misuse can be detected
and traced.
6. Cookies and local storage
We use necessary local storage (cookies / localStorage / IndexedDB) to keep you signed in and
remember choices such as language. We also use Google Ads conversion tracking to measure
advertising performance; it activates only when you arrive via an ad.
7. Retention and deletion
We keep your data for as long as you have an account. You can delete your account yourself at
any time inside the app (Profile → Delete account), which removes the account and associated
data. You may also request deletion by contacting us.
8. Your rights
You have the right to access, rectification, erasure, restriction and data portability, and to
withdraw consent. You may lodge a complaint with your local data protection authority (in
Norway: Datatilsynet). Contact us at
post@ramtechas.no to exercise your rights.
9. Children
Gullhall is not intended for children under 13. We do not knowingly collect data from children
under this age.
10. Changes
We may update this policy. Material changes will be announced in the app or on this page.
← Back to Gullhall