Privacy

Who we are

XPFIRST Oy is responsible for your data. Business ID 3322984-8, VAT FI33229848, Kasarmikatu 10 B 13, 00140 Helsinki, Finland. Contact: XPFIRST@protonmail.com

What we collect

When you send a pitch, we get what you enter in the form, including your email and your game design document. Cloudflare, our website host, receives your IP address and basic browser data when you visit the site or send the form, to deliver the site and keep it secure.

Why

We use your pitch to review your game and to contact you about it. This is a step you ask for before a possible agreement with us. If you pitch for a studio, it is our legitimate interest in reviewing business pitches. Running the site safely is also our legitimate interest.

Who sees it

Cloudflare hosts the site. Google Fonts delivers our fonts and receives your IP address. Resend delivers your pitch to our Proton Mail mailbox. Only XPFIRST employees read it. We do not sell your data or use it for marketing.

Outside the EU

Cloudflare, Resend and Google are US companies. Cloudflare's and Resend's standard terms include the EU standard contractual clauses for these transfers. Proton is a Swiss company, and the EU recognises Switzerland as protecting data adequately.

How long we keep it

We delete pitches from our mailbox within 3 months. If we start working with you, we keep what we need for that work. Resend, which delivers pitches, deletes its copy automatically after 30 days. Cloudflare keeps technical data from visits under its own privacy policy.

Cookies

We use no cookies.

Your rights

You can ask us to show, correct or delete your data, to limit or stop its use, or to give you a copy. Email XPFIRST@protonmail.com. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

Good to know

You do not have to send us anything, but we cannot review a pitch without the required fields. We make no automated decisions about your pitch.

Last updated 2026-09-25