highland_games_website/app/legal/privacy/page.tsx

import type { Metadata } from "next";
import Link from "next/link";

export const metadata: Metadata = {
  title: "Privacy Policy",
  description: "How Highland Games Studio handles your personal data.",
  robots: { index: true, follow: true },
};

export default function PrivacyPage() {
  return (
    <div className="pt-32 pb-24 px-6 lg:px-10">
      <div className="max-w-3xl mx-auto">
        <p className="font-display text-sm tracking-[0.3em] text-accent mb-4">
          — LEGAL
        </p>
        <h1 className="font-display text-5xl sm:text-6xl tracking-wider leading-[0.95] mb-6">
          PRIVACY POLICY
        </h1>
        <p className="text-sm tracking-widest text-foreground-muted uppercase mb-12">
          Last updated: May 2026
        </p>

        <div className="space-y-10 text-foreground-muted leading-relaxed">
          <section>
            <p>
              Highland Games Studio respects your privacy. This page explains
              what data we collect, why, and how you can exercise your rights
              under the General Data Protection Regulation (GDPR).
            </p>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              DATA CONTROLLER
            </h2>
            <p>
              The data controller for this website is{" "}
              <strong>Mathew Simon</strong>, operating under the project name
              Highland Games Studio. Contact:{" "}
              <a
                href="mailto:hello@highlandgamesstudio.com"
                className="text-accent hover:text-foreground transition-colors"
              >
                hello@highlandgamesstudio.com
              </a>
              .
            </p>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              DATA WE COLLECT
            </h2>
            <p>
              We only collect data that is strictly necessary to operate this
              site:
            </p>
            <ul className="mt-3 space-y-2 list-disc pl-6">
              <li>
                <strong>Newsletter</strong>: if you sign up, we store your email
                address with the sole purpose of sending you devblog updates.
              </li>
              <li>
                <strong>Contact</strong>: when you email us, we receive the
                contents of your message and your email address.
              </li>
              <li>
                <strong>Server logs</strong>: our hosting provider may keep
                technical logs (IP address, user agent, requested URL) for
                security and debugging.
              </li>
            </ul>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              COOKIES & TRACKING
            </h2>
            <p>
              This website does not use advertising or third-party tracking
              cookies. No analytics tool is currently installed.
            </p>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              LEGAL BASIS & RETENTION
            </h2>
            <ul className="mt-3 space-y-2 list-disc pl-6">
              <li>
                Newsletter: based on your <strong>consent</strong>. Stored until
                you unsubscribe.
              </li>
              <li>
                Contact emails: based on our <strong>legitimate interest</strong>
                {" "}in answering you. Kept for up to 3 years after our last
                exchange.
              </li>
              <li>
                Server logs: kept for a maximum of 12 months by our hosting
                provider.
              </li>
            </ul>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              YOUR RIGHTS
            </h2>
            <p>
              Under the GDPR, you can request access, rectification, deletion,
              restriction, or portability of your personal data, and object to
              its processing. To exercise these rights, email us at{" "}
              <a
                href="mailto:hello@highlandgamesstudio.com"
                className="text-accent hover:text-foreground transition-colors"
              >
                hello@highlandgamesstudio.com
              </a>
              .
            </p>
            <p className="mt-3">
              You also have the right to lodge a complaint with the CNIL
              (Commission Nationale de l&apos;Informatique et des Libertés),
              the French data protection authority.{" "}
              <a
                href="https://www.cnil.fr"
                target="_blank"
                rel="noopener noreferrer"
                className="text-accent hover:text-foreground transition-colors"
              >
                cnil.fr
              </a>
            </p>
          </section>

          <section>
            <h2 className="font-display text-2xl tracking-wider text-foreground mb-3">
              THIRD PARTIES
            </h2>
            <p>
              We do not sell or rent your data. The site is hosted by{" "}
              <strong>Hetzner Online GmbH</strong> (Germany), which acts as a
              data processor and is bound by appropriate agreements. Server
              data stays within the European Union.
            </p>
          </section>

          <p className="pt-8 border-t border-border text-sm">
            See also our{" "}
            <Link
              href="/legal/notice"
              className="text-accent hover:text-foreground transition-colors"
            >
              Legal Notice
            </Link>
            .
          </p>
        </div>
      </div>
    </div>
  );
}