Privacy Policy

How we collect, use, and protect your data

LAST UPDATED

April 11, 2026

Interpretation & Definitions

Words with capitalised initial letters carry the meanings defined below. Definitions apply equally to singular and plural forms.

• Company / Nasty Rodent — the game art outsourcing studio operating under the name Nasty Rodent, accessible at nastyrodent.com.

• Website — nastyrodent.com and all pages hosted under that domain.
• Service — the Website and any professional services we provide.
• Personal Data — any information that relates to an identified or identifiable individual.
• Usage Data — data collected automatically when you visit the Website (e.g., IP address, browser type, pages viewed, time spent).
• Cookies — small files placed on your device that store browsing information and preferences.
• You — the individual accessing the Website, or the company or legal entity on whose behalf that individual is acting.
• Service Provider — any third party that processes data on our behalf to facilitate or improve our Service.

Our Website and services are intended for business clients and professional use, and are not directed at individual consumers.

Data We Collect

Nasty Rodent acts as a Data Controller for personal data collected via the Website.

If you are located in the European Economic Area (EEA), your data is processed in accordance with GDPR.

2.1  PERSONAL DATA

When you contact us, submit a project brief, or use our contact form, we may collect:

• Full name
• Email address
• Company name and position
• Project details and files you choose to share
• Any other information you voluntarily provide

2.2  USAGE DATA

We automatically collect certain technical data when you visit the Website, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited, time on page, and referral URLs
• Device type and operating system
• Session duration and clickstream data

2.3  COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar technologies to operate the Website and understand visitor behavior. For full details, see our Cookie Policy.

How We Use Your Data

We use the information we collect for the following purposes:

PURPOSE	LEGAL BASIS
Responding to project inquiries and quotes	Legitimate interest / Pre-contractual steps
Delivering agreed game art services	Contract performance
Improving Website performance and content	Legitimate interest
Analyzing traffic patterns via analytics	Legitimate interest / Consent (where required)
Sending project updates and communications	Contract performance / Consent
Complying with legal obligations	Legal obligation

We do not use your data for automated decision-making or profiling that produces significant legal effects on you.

We may use AI-assisted tools to support internal processes. Where applicable, the use of AI in project production is subject to prior client agreement and may be defined in contractual terms.

Analytics & Third-Party Services

We may use the following third-party services to analyse Website usage. These providers may collect Usage Data through cookies placed on your device:

• Google Analytics — used to analyse visitor behaviour and improve our Website. This service may collect Usage Data, including IP address and device information, via cookies. Data may be processed and transferred outside the European Economic Area (EEA) under appropriate safeguards, such as standard contractual clauses. Where applicable, IP anonymization is enabled. Data processed in accordance with Google’s Privacy Policy. You can opt out via the Google Analytics opt-out browser add-on.
• Google Tag Manager — for managing tracking scripts.
• Meta Pixel (Facebook) — we may use for performance tracking of advertising campaigns. Governed by Meta’s Data Policy.

These providers act as data processors on our behalf and are contractually bound to protect your data.

Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

• Service Providers: Trusted vendors who assist us in operating the Website. Permitted to use your data only to perform services on our behalf.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• Legal requirements: When required by applicable law, regulation, or valid legal process.
• Protection of rights: To enforce our agreements or protect the rights, property, or safety of the Company, our clients, or others.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law:

• Contact and inquiry data: retained for up to 3 years from last contact, unless an active client relationship exists.
• Active client project data: retained for the duration of the contract and up to 5 years thereafter for legal and accounting purposes.
• Analytics data: typically retained in aggregate form; individual session data is subject to the retention policies of the respective analytics provider.

When data is no longer required, it is securely deleted or anonymised.

Your Rights

Depending on your location and applicable law, including under the General Data Protection Regulation (GDPR) where applicable, you may have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to restriction — ask us to limit how we use your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at business@nastyrodent.com. We will respond within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission via HTTPS
• Access controls limiting data to authorised personnel only
• Regular review of our data collection and storage practices

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Children’s Privacy

Our Website and services are intended for business professionals and are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at business@nastyrodent.com and we will delete it promptly.

International Data Transfers

Nasty Rodent is registered in Estonia and operates internationally and primarily serves international game studios and developers. Your data may be processed by our service providers in various countries. Where data is transferred, we ensure appropriate safeguards are in place in accordance with applicable data protection law (e.g., standard contractual clauses or adequacy decisions).

Third-Party Links

The Website may contain links to third-party websites, such as ArtStation, LinkedIn, and Facebook. This Privacy Policy applies solely to our Website. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their practices.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the ‘Last updated’ date at the top of this document. We encourage you to review this policy periodically.

Contact Us

• Company: Company / Nasty Rodent — Nasty Rodent OÜ (registry code 17075077), a private limited company registered in Estonia, operating internationally.
• Email: business@nastyrodent.com
• Website: nastyrodent.com
• Working hours: Monday–Friday, 9:00 am – 7:00 pm