© 2026 Head Wind Studio. Enshrined and all associated logos, illustrations, images, names, creatures, races, locations, items, spells and characters, are the creation and property of HeadWind Studios.
Privacy Policy
1. Who we are
This Privacy Policy explains how HeadWind Studio (“HeadWind Studio”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website, sign up to our mailing list, back one of our crowdfunding campaigns, or otherwise interact with us.
Enshrined and Enshrined: Red of Tooth and Claw are products of HeadWind Studio. All rights reserved.
All personal data captured through our website, mailing list, crowdfunding campaigns, and any other channel described in this policy is stored and used by HeadWind Studio, the proprietary owner of Enshrined, Enshrined: Red of Tooth and Claw, and all other Enshrined-branded products. HeadWind Studio acts as the data controller and is responsible for how your personal data is processed, stored, and protected in accordance with this policy and applicable law.
Data Controller:
HeadWind Studio
750 Colbourne St, Lumsden, SK S0G 3C0, Canada
Email: info@enshrined.ca
EU Representative (Article 27 GDPR): [To be appointed — required for non-EU controllers who offer goods/services to individuals in the EU. Insert name, address, and email once designated.]
If you are in the EU/EEA or the UK, you can contact our EU Representative for any matter relating to your personal data.
2. Scope of this policy
This policy applies to personal data we process about:
- Visitors to our website and landing pages
- Subscribers to our mailing list and newsletters
- Backers and supporters of our Kickstarter, BackerKit, and Gamefound campaigns
- People who contact us by email, social media, or contact forms
- Retail, distribution, and business partners
It covers our processing under the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable Canadian privacy law (PIPEDA).
3. What personal data we collect
We collect only what we need. Depending on how you interact with us, this may include:
Category | Examples | Source |
Identity data | First and last name | You, directly |
Contact data | Email address, country of residence | You, directly |
Marketing preferences | Email opt-in status, campaign interests, language preference | You, directly |
Transaction data | Pledge amount, reward tier, shipping address (for crowdfunding backers) | Kickstarter / BackerKit / Gamefound |
Technical data | IP address (truncated for analytics), browser type, device type, operating system, referring URL | Automatically, via cookies |
Usage data | Pages visited, time on page, clicks, scroll depth | Automatically, via analytics cookies (only with consent) |
Communications data | Messages you send us and our replies | You, directly |
We do not have any way of verifying the age of individuals who share their personal data with us, and we do not knowingly collect data from children under the age of 16. If we discover, or are made aware, that an individual under the age of 16 has provided us with personal data, we will delete that data promptly. If you are a parent or guardian and believe a child under 16 has provided us with personal data, please contact us at info@enshrined.ca and we will delete it.
We do not collect special-category data (health, religion, political views, etc.).
4. Why we use your data and our legal basis
Under GDPR, we must have a lawful basis for every processing activity. Here is what we do and why:
Purpose | Legal basis (GDPR Art. 6) |
Operate and secure the website | Legitimate interests — running a functional, safe website |
Respond to your enquiries | Legitimate interests, or performance of a contract if you are a partner/backer |
Send you our newsletter and campaign updates | Your consent (opt-in) |
Fulfil crowdfunding rewards and ship physical products | Performance of a contract |
Measure website performance (analytics) | Your consent (via cookie banner) |
Comply with legal, tax, and accounting obligations | Legal obligation |
Defend against legal claims | Legitimate interests |
You can withdraw consent at any time (see Section 9). Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Cookies and tracking
We use cookies and similar technologies. Non-essential cookies fire only after you give consent through our cookie banner. See our full Cookie Policy below for details.
6. Who we share your data with
We do not sell your personal data. We share it only with:
- Service providers who process data on our behalf under a written data processing agreement:
- Google (Google Analytics) — website analytics, only with your consent
- Email service provider — to send newsletters and campaign updates
- Kickstarter, BackerKit, Gamefound — to run crowdfunding campaigns and fulfil rewards
- Hosting and IT providers — to run the website
- Professional advisers — lawyers, accountants, auditors, where necessary
- Public authorities — where we are legally required to disclose (e.g. tax authorities, courts)
- Successors — in the event of a merger, acquisition, or sale of assets, subject to equivalent protections
7. International data transfers
HeadWind Studio is based in Canada. If you are in the EU/EEA or the UK, your personal data will be transferred to Canada and may be processed by service providers in the United States or other third countries.
Legal safeguards we rely on:
- Adequacy decision — the European Commission has recognised Canada (commercial organisations subject to PIPEDA) as providing an adequate level of protection for most transfers.
- Standard Contractual Clauses (SCCs) — for transfers to service providers in countries without an adequacy decision (e.g. certain US-based tools), we use the European Commission’s SCCs together with supplementary technical measures.
- Data Privacy Framework — where applicable, for transfers to certified US recipients.
You can request a copy of the safeguards in place by emailing info@enshrined.ca.
8. How long we keep your data
We keep personal data only as long as needed for the purposes above:
Data | Retention period |
Newsletter subscribers | Until you unsubscribe, plus 30 days for suppression list |
Contact form enquiries | 24 months after last contact |
Crowdfunding backer data | 7 years (tax and accounting obligations) |
Analytics data | 14 months (Google Analytics default), truncated IP |
Consent logs | 3 years after consent withdrawn or expired |
Marketing preferences | Until changed or account deleted |
After these periods, data is deleted or fully anonymised.
9. Your rights
If you are in the EU/EEA or the UK, you have the following rights under GDPR:
- Access — get a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — request deletion where legally permitted
- Restriction — limit how we process your data
- Objection — object to processing based on legitimate interests or direct marketing
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, without affecting prior lawful processing
- Lodge a complaint — with your national supervisory authority (find yours at edpb.europa.eu)
To exercise any right, email info@enshrined.ca. We will respond within one month. Exercising your rights is free unless the request is manifestly unfounded or excessive.
Users in Canada have equivalent rights under PIPEDA; users in Quebec have additional rights under Law 25.
10. How we protect your data
We use appropriate technical and organisational measures, including:
- HTTPS/TLS encryption in transit
- Access controls and least-privilege permissions for staff
- Contractual protections with all processors (DPAs)
- Regular review of security practices
- Prompt breach notification to authorities and affected individuals where required (within 72 hours under GDPR Art. 33)
No system is 100% secure, but we work continuously to protect your data.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced on our website and, where appropriate, by email. The “Last updated” date at the top shows the current version.
12. Contact us
Privacy questions or requests:
Email: info@enshrined.ca
Post: HeadWind Studio, 750 Colbourne St, Lumsden, SK S0G 3C0, Canada
EU Representative: [To be appointed]
Cookie Policy
Last updated: 2 July 2026
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They help sites work, remember your preferences, and (where allowed) measure how the site is used. We also use similar technologies such as pixels, local storage, and SDKs — this policy covers all of them, collectively referred to as “cookies”.
2. Your choices
When you first visit our website, a cookie banner asks whether you consent to non-essential cookies. You can:
- Accept All — all cookie categories are enabled
- Reject All — only strictly necessary cookies are used
- Customise Settings — choose category by category
You can change your preferences at any time via the Cookie Settings link in our website footer. Withdrawing consent is as easy as giving it.
Strictly necessary cookies do not require consent because they are essential for the website to function (Article 5(3) ePrivacy Directive).
3. Cookie categories we use
3.1 Strictly necessary (always active)
Required for the website to function — page loading, security, and remembering your cookie choices.
Cookie | Provider | Purpose | Duration |
session_id | HeadWind Studio (first-party) | Maintains your session on the site | Session |
cookie_consent | HeadWind Studio (first-party) | Stores your cookie preferences | 12 months |
csrf_token | HeadWind Studio (first-party) | Security — prevents cross-site request forgery | Session |
3.2 Analytics & performance (consent required)
Help us understand how visitors use the site so we can improve it. IP addresses are truncated (“IP anonymisation”) before storage.
Cookie | Provider | Purpose | Duration |
_ga | Google Analytics (Google LLC / Google Ireland Ltd) | Distinguishes unique users | 2 years |
_ga_<container-id> | Google Analytics | Persists session state | 2 years |
_gid | Google Analytics | Distinguishes users (24h window) | 24 hours |
International transfer: Google may process data in the United States. We rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. We have enabled IP anonymisation and disabled data sharing with Google advertising products.
Opt out any time: via our Cookie Settings link, or by installing the Google Analytics Opt-out Browser Add-on.
4. Do Not Track
Our website respects the Global Privacy Control (GPC) signal where available: if your browser sends a GPC signal, we treat it as a request to reject non-essential cookies.
5. How to control cookies in your browser
You can also manage cookies directly in your browser settings:
Blocking all cookies may prevent some parts of the site from working.
6. Changes to this Cookie Policy
If we add, remove, or change the cookies we use, we will update this policy and re-prompt for consent where the change is material. We review the policy at least once every 12 months.
7. Contact
Questions about cookies? Email info@enshrined.ca.
Privacy Policy
1. Who we are
This Privacy Policy explains how HeadWind Studio (“HeadWind Studio”, “we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website, sign up to our mailing list, back one of our crowdfunding campaigns, or otherwise interact with us.
Enshrined and Enshrined: Red of Tooth and Claw are products of HeadWind Studio. All rights reserved.
All personal data captured through our website, mailing list, crowdfunding campaigns, and any other channel described in this policy is stored and used by HeadWind Studio, the proprietary owner of Enshrined, Enshrined: Red of Tooth and Claw, and all other Enshrined-branded products. HeadWind Studio acts as the data controller and is responsible for how your personal data is processed, stored, and protected in accordance with this policy and applicable law.
Data Controller:
HeadWind Studio
750 Colbourne St, Lumsden, SK S0G 3C0, Canada
Email: info@enshrined.ca
EU Representative (Article 27 GDPR): [To be appointed — required for non-EU controllers who offer goods/services to individuals in the EU. Insert name, address, and email once designated.]
If you are in the EU/EEA or the UK, you can contact our EU Representative for any matter relating to your personal data.
2. Scope of this policy
This policy applies to personal data we process about:
- Visitors to our website and landing pages
- Subscribers to our mailing list and newsletters
- Backers and supporters of our Kickstarter, BackerKit, and Gamefound campaigns
- People who contact us by email, social media, or contact forms
- Retail, distribution, and business partners
It covers our processing under the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable Canadian privacy law (PIPEDA).
3. What personal data we collect
We collect only what we need. Depending on how you interact with us, this may include:
Category | Examples | Source |
Identity data | First and last name | You, directly |
Contact data | Email address, country of residence | You, directly |
Marketing preferences | Email opt-in status, campaign interests, language preference | You, directly |
Transaction data | Pledge amount, reward tier, shipping address (for crowdfunding backers) | Kickstarter / BackerKit / Gamefound |
Technical data | IP address (truncated for analytics), browser type, device type, operating system, referring URL | Automatically, via cookies |
Usage data | Pages visited, time on page, clicks, scroll depth | Automatically, via analytics cookies (only with consent) |
Communications data | Messages you send us and our replies | You, directly |
We do not have any way of verifying the age of individuals who share their personal data with us, and we do not knowingly collect data from children under the age of 16. If we discover, or are made aware, that an individual under the age of 16 has provided us with personal data, we will delete that data promptly. If you are a parent or guardian and believe a child under 16 has provided us with personal data, please contact us at info@enshrined.ca and we will delete it.
We do not collect special-category data (health, religion, political views, etc.).
4. Why we use your data and our legal basis
Under GDPR, we must have a lawful basis for every processing activity. Here is what we do and why:
Purpose | Legal basis (GDPR Art. 6) |
Operate and secure the website | Legitimate interests — running a functional, safe website |
Respond to your enquiries | Legitimate interests, or performance of a contract if you are a partner/backer |
Send you our newsletter and campaign updates | Your consent (opt-in) |
Fulfil crowdfunding rewards and ship physical products | Performance of a contract |
Measure website performance (analytics) | Your consent (via cookie banner) |
Comply with legal, tax, and accounting obligations | Legal obligation |
Defend against legal claims | Legitimate interests |
You can withdraw consent at any time (see Section 9). Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Cookies and tracking
We use cookies and similar technologies. Non-essential cookies fire only after you give consent through our cookie banner. See our full Cookie Policy below for details.
6. Who we share your data with
We do not sell your personal data. We share it only with:
- Service providers who process data on our behalf under a written data processing agreement:
- Google (Google Analytics) — website analytics, only with your consent
- Email service provider — to send newsletters and campaign updates
- Kickstarter, BackerKit, Gamefound — to run crowdfunding campaigns and fulfil rewards
- Hosting and IT providers — to run the website
- Professional advisers — lawyers, accountants, auditors, where necessary
- Public authorities — where we are legally required to disclose (e.g. tax authorities, courts)
- Successors — in the event of a merger, acquisition, or sale of assets, subject to equivalent protections
7. International data transfers
HeadWind Studio is based in Canada. If you are in the EU/EEA or the UK, your personal data will be transferred to Canada and may be processed by service providers in the United States or other third countries.
Legal safeguards we rely on:
- Adequacy decision — the European Commission has recognised Canada (commercial organisations subject to PIPEDA) as providing an adequate level of protection for most transfers.
- Standard Contractual Clauses (SCCs) — for transfers to service providers in countries without an adequacy decision (e.g. certain US-based tools), we use the European Commission’s SCCs together with supplementary technical measures.
- Data Privacy Framework — where applicable, for transfers to certified US recipients.
You can request a copy of the safeguards in place by emailing info@enshrined.ca.
8. How long we keep your data
We keep personal data only as long as needed for the purposes above:
Data | Retention period |
Newsletter subscribers | Until you unsubscribe, plus 30 days for suppression list |
Contact form enquiries | 24 months after last contact |
Crowdfunding backer data | 7 years (tax and accounting obligations) |
Analytics data | 14 months (Google Analytics default), truncated IP |
Consent logs | 3 years after consent withdrawn or expired |
Marketing preferences | Until changed or account deleted |
After these periods, data is deleted or fully anonymised.
9. Your rights
If you are in the EU/EEA or the UK, you have the following rights under GDPR:
- Access — get a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — request deletion where legally permitted
- Restriction — limit how we process your data
- Objection — object to processing based on legitimate interests or direct marketing
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, without affecting prior lawful processing
- Lodge a complaint — with your national supervisory authority (find yours at edpb.europa.eu)
To exercise any right, email info@enshrined.ca. We will respond within one month. Exercising your rights is free unless the request is manifestly unfounded or excessive.
Users in Canada have equivalent rights under PIPEDA; users in Quebec have additional rights under Law 25.
10. How we protect your data
We use appropriate technical and organisational measures, including:
- HTTPS/TLS encryption in transit
- Access controls and least-privilege permissions for staff
- Contractual protections with all processors (DPAs)
- Regular review of security practices
- Prompt breach notification to authorities and affected individuals where required (within 72 hours under GDPR Art. 33)
No system is 100% secure, but we work continuously to protect your data.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced on our website and, where appropriate, by email. The “Last updated” date at the top shows the current version.
12. Contact us
Privacy questions or requests:
Email: info@enshrined.ca
Post: HeadWind Studio, 750 Colbourne St, Lumsden, SK S0G 3C0, Canada
EU Representative: [To be appointed]
Cookie Policy
Last updated: 2 July 2026
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They help sites work, remember your preferences, and (where allowed) measure how the site is used. We also use similar technologies such as pixels, local storage, and SDKs — this policy covers all of them, collectively referred to as “cookies”.
2. Your choices
When you first visit our website, a cookie banner asks whether you consent to non-essential cookies. You can:
- Accept All — all cookie categories are enabled
- Reject All — only strictly necessary cookies are used
- Customise Settings — choose category by category
You can change your preferences at any time via the Cookie Settings link in our website footer. Withdrawing consent is as easy as giving it.
Strictly necessary cookies do not require consent because they are essential for the website to function (Article 5(3) ePrivacy Directive).
3. Cookie categories we use
3.1 Strictly necessary (always active)
Required for the website to function — page loading, security, and remembering your cookie choices.
Cookie | Provider | Purpose | Duration |
session_id | HeadWind Studio (first-party) | Maintains your session on the site | Session |
cookie_consent | HeadWind Studio (first-party) | Stores your cookie preferences | 12 months |
csrf_token | HeadWind Studio (first-party) | Security — prevents cross-site request forgery | Session |
3.2 Analytics & performance (consent required)
Help us understand how visitors use the site so we can improve it. IP addresses are truncated (“IP anonymisation”) before storage.
Cookie | Provider | Purpose | Duration |
_ga | Google Analytics (Google LLC / Google Ireland Ltd) | Distinguishes unique users | 2 years |
_ga_<container-id> | Google Analytics | Persists session state | 2 years |
_gid | Google Analytics | Distinguishes users (24h window) | 24 hours |
International transfer: Google may process data in the United States. We rely on the EU-US Data Privacy Framework and Standard Contractual Clauses. We have enabled IP anonymisation and disabled data sharing with Google advertising products.
Opt out any time: via our Cookie Settings link, or by installing the Google Analytics Opt-out Browser Add-on.
4. Do Not Track
Our website respects the Global Privacy Control (GPC) signal where available: if your browser sends a GPC signal, we treat it as a request to reject non-essential cookies.
5. How to control cookies in your browser
You can also manage cookies directly in your browser settings:
Blocking all cookies may prevent some parts of the site from working.
6. Changes to this Cookie Policy
If we add, remove, or change the cookies we use, we will update this policy and re-prompt for consent where the change is material. We review the policy at least once every 12 months.
7. Contact
Questions about cookies? Email info@enshrined.ca.
© 2026 Head Wind Studio. Enshrined and all associated logos, illustrations, images, names, creatures, races, locations, items, spells and characters, are the creation and property of HeadWind Studios. All rights reserved. All other trademarks, logos and copyrights are property of their respective owners.