Privacy Policy

1. Who we are

Sortilège is developed and published by Norcode Inc., a corporation registered in Ontario, Canada, operating under the trading name Maple Leaf Makers ("we", "us", "our"). Norcode Inc. is the data controller responsible for the information described in this policy.

This policy explains what information we handle when you visit sortilege.io or play Sortilège on any platform where we offer it (including Steam, itch.io, and Google Play).

2. Who this is for

Sortilège and this website are intended for people aged 16 and over. The game is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has provided us with information, contact us at privacy@norcode.com and we will delete it.

3. Information we handle

a. When you visit the website

Our web server keeps standard access logs to operate the site securely. These logs may include your IP address, the page requested, the date and time, your browser type (user agent), and the referring page. The site sets no cookies of its own, runs no analytics, and shows no advertising.

The home page embeds a game trailer from YouTube in privacy-enhanced mode (youtube-nocookie.com). YouTube does not place cookies for this embed unless you press play, at which point Google receives the request and its own terms apply. Some pages of the site may also load web fonts from Google Fonts; where that happens, Google receives your IP address in order to serve the font files. Our legal pages (this one and the Terms of Service) serve their fonts from our own server and make no third-party requests.

b. When you play online

Sortilège does not have its own account system. You do not register, and we do not collect your name or email. When you use online features (such as a friend lobby or matchmaking), we identify you using the account identifier provided by your platform, for example your Steam ID. To you this identifier is pseudonymous: it lets the match work without us knowing who you are off-platform.

To run online play and keep it fair and stable, our game servers process:

• your platform account identifier and chosen display name, as provided by the platform;
• your IP address, used to establish the connection, apply rate limits, and keep a short security audit log to detect and prevent abuse;
• lobby and match data needed to play, such as lobby codes, the dice and moves in a match, and the result;
• anything you choose to send us through the in-game feedback or bug-report tool, which may include a description and an optional screenshot of your game window at the time you submit it.

c. When you play offline

Your game settings and progress are saved on your own device, and, where the platform supports it, synced through the platform's cloud save (for example Steam Cloud). Achievements and similar progress are handled by the platform. We do not receive a separate copy of this data.

d. Purchases

If you buy the game or any in-game item, the purchase is handled entirely by the store (Steam, Google Play, or itch.io). We receive confirmation that a purchase occurred and aggregate sales figures. We never see or store your payment card details.

4. Why we use it and our legal bases

We use the information above only to provide and protect the game and site:

• to deliver the website and online multiplayer you request (in GDPR terms, performance of a contract or taking steps at your request);
• to keep the service secure, stable, and free of cheating and abuse, and to fix bugs you report (our legitimate interests in running a safe service);
• to meet legal obligations where they apply.

We do not use your information for advertising, profiling, or automated decisions that have legal effects on you, and we do not sell or share it for cross-context behavioural advertising.

5. Who we share it with

We do not sell your personal information. We share it only with the service providers needed to run the game and site, and only for that purpose:

• Platforms you choose to play on, who operate your account and any cloud saves, purchases, and achievements: Valve / Steam, Google (Play), and itch.io.
• Hosting for our website and game servers, provided by DigitalOcean, which stores the server logs described above on our behalf.
• Embedded content on the website, namely YouTube and Google Fonts, as described in section 3a.

We may also disclose information if required by law, or to protect our rights, users, or the security of the service.

6. International transfers

We are based in Canada, and our website and game servers are hosted in Canada (the Toronto region of our hosting provider). If you use the Service from the European Economic Area or the United Kingdom, your information is transferred to Canada for processing. The European Commission and the United Kingdom recognise Canada as providing an adequate level of protection for personal information handled by organisations subject to Canada's PIPEDA, and we rely on that adequacy basis for these transfers. Where any additional safeguards are required, we put them in place.

7. How long we keep it

Web and security audit logs are kept only as long as needed to operate and protect the service, typically a short rolling window, and are then deleted or anonymised. Feedback and bug reports are kept until the issue is resolved and for a reasonable period afterwards. Save data and purchase records are retained by the relevant platform under its own policy.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to data portability, and to withdraw consent. These rights come from laws such as Canada's PIPEDA, the EU and UK GDPR, and California's CCPA/CPRA. California residents have the right to know, delete, and correct, and to not be discriminated against for exercising those rights; we do not sell or share personal information, so there is nothing to opt out of.

To exercise any of these rights, email privacy@norcode.com. Because online play is tied to your platform identifier rather than a name or email, we may ask you for that identifier (for example your Steam ID) so we can locate the relevant data. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We use reasonable technical and organisational measures to protect the limited information we hold, including encrypted connections (HTTPS and secure WebSockets) for the website and online play. No method of transmission or storage is perfectly secure, but we work to keep our footprint small and our defences current.

10. Changes to this policy

We may update this policy as the game and its features evolve. When we make a material change, we will revise the effective date below and post the updated policy at this address. Continued use of the site or game after a change means you accept the updated policy.

11. Contact us

Questions, requests, or concerns about privacy:

Effective date: June 2, 2026.