Privacy Policy
Privacy Policy
How this fan site handles information. Last updated 25 October 2026.
1. Introduction
This privacy policy explains how the independent fan website over the hill handles information when you read the pages or use the contact form. The site discusses a driving and exploration game. It is not operated by the game's developers or publishers, and it does not present itself as their privacy notice.
The site is a set of static pages. Its scripts run in your browser. They do not create an account, and they do not upload form entries to a server controlled by this fan site. Please read this policy together with the cookie policy and the terms.
2. Information We Collect
The site can handle two kinds of information: details you type into a form, and technical information that arises because a page was loaded. It does not ask for payment details, government identity numbers, precise location, or a copy of an identity document. Please do not put those into a message.
3. Information Provided Voluntarily
If you submit the form on the contact page or the guides page, the browser stores the fields you filled in. Those fields are your name, email address, topic, subject, and message. The short forms on the home page and the about page do not store that list. They only carry the name, email, and topic to the contact page in the address bar so you can finish the message.
You choose whether to submit. A name and email are required on the saving forms so the local copy is identifiable to you on that device. The site does not verify that the email address is deliverable, because it does not send mail.
4. Automatically Collected Information
The fan site's own scripts do not run analytics and do not record a server-side log that this policy can describe. Your browser will still send ordinary connection data, such as an IP address and a user-agent string, to whatever host serves the files. This policy does not name a hosting company, because none is identified on the site. The host's own practices are separate.
5. Cookies and Similar Technologies
The scripts shipped with this site do not set cookies. After you submit a saving form, they write to the browser's local storage under the key oth-notes. That storage can hold up to twenty recent messages. It is not a cookie, but it is stored on your device and can be read by anyone using the same browser profile. The cookie policy describes this in more detail, including the request for font files.
6. How We Use Information
Information you type is used only to show you the saved copy on the contact page and the guides page, and to prefill the contact page when you arrive from a short form. It is not used to build a marketing list, to score a lead, or to contact you. The site has no mailbox published for that purpose.
Font files are requested so the pages can display the typefaces used in the layout. That request is a presentation function, not a profile of your interest in the game.
7. Legal Bases for Processing, where applicable
If a data-protection law such as the EU or UK GDPR applies to you, the practical bases are these. Storing a form entry in your browser is a step you initiate so the page can show you what you wrote. Loading the pages, including font files, is necessary to present the site you asked to view. This fan site does not rely on a consent banner for optional advertising or analytics cookies, because it does not set those cookies.
This section is an explanation of the site's actual behavior. It is not a claim that a particular regulator has reviewed the pages.
8. Third-Party Services
Pages request typefaces from Google Fonts at fonts.googleapis.com. When your browser makes that request, Google receives connection data and may process it under Google's own terms. This fan site does not control that processing and does not receive a report of it.
The site does not embed a game store, an advertising network, a comment platform, a social feed, or a payment processor.
9. Analytics and Advertising
This website does not use an analytics product and does not use an advertising tag. There is no campaign measurement pixel in the pages described by this policy. If a browser extension or a network outside this site adds one, that addition is not part of the fan site.
10. Data Sharing
The fan site's scripts do not share form entries with the game's developers, with publishers, or with other visitors. They do not post your message on a public board. A font request is a disclosure of connection data from your browser to Google, as described above. A host that delivers the HTML files may process connection data under its own arrangement with whoever publishes the files. This site cannot list that host.
11. Data Retention
Saved messages remain in local storage until you press Remove saved messages, until you clear the site's storage in the browser, or until the list is trimmed to the twenty most recent entries because a newer one was saved. The site does not keep a second copy on a server. A name or topic that appears in the address bar after a short form is part of that page address until you leave or edit it. It is not written into oth-notes until you submit a saving form.
12. Data Security
Local storage is not encrypted by this site. It is protected only to the extent your device and browser profile are protected. Do not use the form on a shared computer if you do not want the next person to read the copy. Do not include secrets in the message. Because the scripts do not transmit the form, they also cannot offer a delivery receipt or a remote deletion guarantee.
13. User Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or restrict personal information, or to object to certain processing. For the copies this site actually holds, those rights are exercised on the device: read the list on the contact or guides page, and delete it with the button or with your browser's site-data controls. You can also write to the fan site at Hayes, Uxbridge, UB11 1FW, United Kingdom, call +44 20 3997 1391, or email [email protected]. Those channels can receive a privacy question about this website. They are not a route to the game's developers. The local copy on a device can still be deleted only on that device.
If a host or Google holds connection data, you would need to use that organization's process. This policy does not invent a contact desk for them.
14. International Data Transfers
If you load a font from Google, that request may be processed outside your country. The fan site does not operate its own international transfer of form entries, because the entries stay in the browser. The host that serves the static files may be in another country. That location is not stated on the site, so this policy does not name one.
15. Children's Privacy
The fan site is a general informational site about a game. It is not directed at children, and it does not knowingly ask children to submit personal information. The form is not a registration for a children's service. If a child uses the form, the entry remains in that browser only. A parent who can access the browser can remove it with the button on the page.
16. External Links
The pages link among themselves and request fonts from Google. They do not link to a game store. If a future page adds an external link, that site's privacy practices will be its own. A link is not an endorsement and is not a statement that the destination is an official partner.
17. Changes to This Policy
If the site begins to send form data, set cookies, or use analytics, this policy has to change first so it stays accurate. The date at the top of the page is the date of this version. Continuing to read the site after an update means you are reading the policy that is published then. The site will not silently describe a practice it does not have.
18. Contact Information
The fan site can be reached at Hayes, Uxbridge, UB11 1FW, United Kingdom, by phone on +44 20 3997 1391, and by email at [email protected]. No company registration number is published. The contact form stores a copy in your browser and should open a draft to that email address. The website itself does not transmit the form. If you send the draft, your email provider delivers it. A question sent there is a question for this fan site, not for the developers or publishers of over the hill.
For the status of the project, read the about page. This is an independent fan website dedicated to over the hill. It is not affiliated with, endorsed by, or officially connected to the game's developers or publishers.
19. The email draft in more detail
When you submit the form on the contact page or the guides page, two things happen in the browser. First, the fields are written to local storage under the key oth-notes, trimmed to twenty entries. Second, the page asks your browser to open a mailto link addressed to [email protected], with the subject and the body filled from the form. The website script does not upload the message to a server of its own. Delivery happens only if you send the draft from your email application. Your email provider, and the mailbox that receives the message, then process the content under their own terms. This fan site does not receive a delivery receipt through the page.
If you do not send the draft, you have not emailed the fan site, even though the browser still holds a copy. If you send the draft, the local copy is not automatically deleted. Remove it yourself if you do not want it to remain on the device. A phone call to +44 20 3997 1391 and a letter to Hayes, Uxbridge, UB11 1FW, United Kingdom, are separate channels. They are not recorded in oth-notes unless you also typed them into a form.
20. What the correspondence address is for
The address, the phone number, and the email address are published so you can contact the operator of this fan website. They are the right place for a question about these pages, about a saved message, about a font request, or about a correction to the text. They are the wrong place if you want them to act as the developer, the publisher, or a store. Staff names are not published. A company registration number is not published. Do not invent one from the postcode. UB11 1FW identifies the correspondence location in Hayes, Uxbridge. It does not identify a game studio.
Visitors sometimes treat a postcode as a full legal identity. It is not. The published record is the fan-site name over the hill, the place Hayes, Uxbridge, UB11 1FW, United Kingdom, the phone +44 20 3997 1391, and the email [email protected]. If a directory, a map pin, or a search snippet adds a star rating, a company number, or the words official partner, that addition did not come from this policy. Trust the page. The independent-status notice is part of the same record and is not cancelled by the existence of a telephone number.
21. Rights of visitors in the United Kingdom and similar regimes
If UK GDPR or a similar law applies, you may have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object, and the right not to be subject to a decision based solely on automated processing. This fan site does not run automated decision-making and does not build a marketing profile. The personal data it can actually hold after you choose to make contact is the email you send, the letter you post, and the call you make. The copy in your browser is under your control.
To exercise a right about a message you already sent, email [email protected] or write to the Hayes address and say which right you are using and which message you mean. To exercise a right about the local copy, delete it on the device. You may also complain to the Information Commissioner's Office in the United Kingdom, or to the supervisory authority where you live, if you think the handling described here is unlawful. This sentence is information about a public route. It is not a statement that a complaint has been filed or upheld.
Access, for a message you sent, means asking what correspondence the fan site still has about you. Rectification means asking for a correction where the stored message is wrong because of a typing error you identify. Erasure means asking for deletion when the purpose of keeping the correspondence has ended, subject to any record the law requires to be kept. Restriction means asking for a pause in use while a dispute about accuracy is resolved. Portability, where it applies, is limited because this site does not run an account export. Objection applies where processing is based on a legitimate interest and your situation justifies it. The fan site will not pretend that every right produces the same file, because the data it holds is ordinary correspondence, not a profile.
22. Retention of messages that you actually send
A draft that you never send is not retained by the fan site, because the fan site never receives it. An email that you do send may be kept for as long as needed to answer the question and to keep a record of the correspondence, and then deleted when that purpose has ended. The site does not publish a fixed number of months, because the length depends on the question. A letter is a paper record at the correspondence address and is handled with the same purpose. A local storage entry is retained until you delete it or the twenty-item list drops it. It is not backed up by this website.
A phone call is not recorded by these pages. If a note of a call is written down at the Hayes address in order to answer you, that note is correspondence and is kept only for that purpose. Do not assume a call is recorded. The website has no account page on which a recording would appear. If you want a written record, send the email. The mailbox at [email protected] is the written channel. The postal address is the paper channel. Both are fan-site channels.
23. Security of the draft and the mailbox
Local storage is not encrypted by these pages. The mailto link places the text into whatever mail application your device uses. That application may store drafts of its own. Use a device you trust. Do not include passwords, card numbers, or copies of identity documents. The fan site does not ask for them and cannot use them. If a mailbox is compromised, that is an incident for the mail provider and for the recipient, not a cookie event and not something the page can display. The pages also cannot tell you that a phone call was answered.
Security on a static website is mostly a matter of not collecting what the pages do not need. The scripts do not ask for a password, do not set a session cookie, and do not embed a payment field. The remaining risk is the risk you create by typing a secret into a box that was meant for a question about a guide. Leave the secret out. The Hayes address does not become a bank because a visitor posted a card number, and the fan site does not want that number. If you have already sent one, email [email protected] and say so, so the correspondence can be handled with extra care and deleted when the warning has been read.
24. Children, shared devices, and other people
The fan site is not directed at children and does not offer a children's account. If a child sends an email or submits the form, the parent who controls the device can delete the local copy, and the parent can email [email protected] to ask about a message that was actually sent. Do not submit someone else's personal data unless you have a proper reason to do so. The terms forbid using the form to impersonate the developers. This policy forbids treating the Hayes address as their office.
A shared computer needs a plainer warning. The saved list is visible to the next person who opens Contact or Guides in the same browser profile. The address bar may also still contain a name and an email if you used the short form and did not submit. Clear the list and be careful with history. The fan site cannot see that computer and cannot wipe it remotely. The Remove saved messages button is the control this website provides. The browser's site-data control is the stronger control, because it also removes other storage the browser may hold for this origin.
25. Fonts, hosting, and international transfers
Loading a page can cause your browser to contact Google for font files. That request may be processed outside the United Kingdom and outside your country. The fan site does not control Google's regions and does not receive a copy of the request log. Separately, the host that serves these HTML and JPEG files receives ordinary connection data such as an IP address. This policy does not name that host, because the pages do not print a hosting brand. If you need the host's own notice, you would need to identify the host from outside this text. The correspondence address in Hayes is the address for the fan site's own handling, not a substitute for Google's notice or for a host's notice.
Form entries that stay in local storage are not transferred by this website at all. An email you send may travel through your provider's network and be stored where that provider and the receiving mailbox operate, which may include the United Kingdom because the published address is in Hayes, Uxbridge. The fan site does not offer a standard contractual clause of its own for a transfer it does not operate. Where you send the email, you start the transfer by pressing send in your mail application.
26. Changes that would require a new policy
If the site later uploads form data to a server, adds analytics, or sets advertising cookies, this policy will be rewritten before that change is described as current. The date on the page is the date of the text you are reading. The contact details above are part of this version. A future version that removed the email address would have to say so in the contact section rather than leaving a dead link in the footer. Until that happens, [email protected], +44 20 3997 1391, and Hayes, Uxbridge, UB11 1FW, United Kingdom, are the published routes.
A change to the illustrations, from one JPEG drawing to another, does not by itself change this policy, because the pictures are not personal data about you. A change that started to embed a game store, a comment system, or a tracker would. Read the date when you return. If the date is unchanged, the practices in this version are the practices being described. The cookie policy and the terms should be read with it. None of the three documents turns the fan site into an official publisher of over the hill.
27. A plain summary of this policy
You can read the pages without creating an account. If you submit the form on Contact or Guides, the browser keeps a local copy and should open a draft to [email protected]. You decide whether to send it. If you send it, or if you call +44 20 3997 1391, or if you post to Hayes, Uxbridge, UB11 1FW, United Kingdom, you are contacting this fan site and not the developers of over the hill. The scripts do not set cookies. They do request fonts from Google. They do not run analytics or advertising tags. Local copies can be deleted on the device. Correspondence that actually arrives can be questioned, corrected, or deleted by writing to the same email or the same postal address, within the limits described above, including the right to complain to the Information Commissioner's Office where UK law applies.
The JPEG files, the guides, and the driving notes are not personal data about you. Do not put secrets into the form. Do not treat a saved list on a shared computer as private. Do not treat the Hayes address as a studio. The independent notice remains the sentence that decides the status of the project: this is an independent fan website dedicated to over the hill. It is not affiliated with, endorsed by, or officially connected to the game's developers or publishers. If a later edit changes a practice, the date at the top of this page will change with it, and the footer will keep the contact line that matches the text.