Privacy Policy

Mountainroad DSP Sarl-S
29 Rosboesch
6870 Wecker
Luxembourg
+352-691-323979
serge@mountainroaddsp.lu
www.mountainroaddsp.lu
VAT Number: LU34196426

Last updated on May 6, 2025

We know that in this digital age, your privacy is important. This Privacy Policy reflects our commitment to protecting personal data and the choices we offer you regarding how your data is used. We welcome you to read more about how we keep your information safe, as well as how you can exercise your rights. In addition, our Privacy policy covers our treatment of data that may be personal to you.

We will review, update, and amend these policies from time to time, consistent with our business needs and technology. We encourage you to check back periodically for new updates or changes. Your continued use of the service makes up for your acceptance of any change to this Privacy Policy. We are the data controller of your information. We handle and process all data on behalf of our customers.

You may likewise decide not to give us "discretionary" Personal Data; however, please remember that without it, we will most likely be unable to provide you with the full scope of our administrations or with the best client experience when utilizing our Services.

This Privacy Policy (“Privacy Policy”) describes how Mountainroad DSP Sarl-S. will gather, use, and maintain your Personal Information on mountainroaddsp.lu. It will also explain your legal rights with respect to that information.

By using the website or services, you confirm that you have read and understood this Privacy Policy and our Terms (together referred to herein as the “Agreement”). The Agreement governs the use of mountainroaddsp.lu. We will collect, use, and maintain information consistent with the Agreement.

What personal information do we collect from the people who visit our website?

The personal information that we collect depends on the context of your interactions with us and the services, the choices you make, and the products and features you use.

When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:

• Account Data: To use certain features (like Paid or unpaid Services), you need to create a user account. When you create or update your account, we collect and store the data you provide, like your email address, password, and name, and assign you a unique identifying number ("Account Data").
• Personal Data: Personal Data is information that can be used to identify you specifically, including your names, phone numbers, email addresses, usernames, passwords, and billing addresses. You consent to give us this information by providing it to us voluntarily on our website. Your decision to disclose this data is entirely voluntary. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain benefits from our website.
• Financial Data: Financial data is related to your payment methods, such as credit card or bank transfer details. We collect financial data to allow you to purchase, order, return or exchange products or services from our website. We store limited financial data. Most financial data is transferred to our payment processor, PayPal, and you should review these processors' Privacy Policies to determine how they use, disclose, and protect your financial data.

As a courtesy, PayPal Privacy Policy can be found here: https://www.paypal.com/us/webapps/mpp/ua/privacy-full
Stripe Privacy Policy can be found here: https://stripe.com/gb/privacy

Contact information: An Authorized User is required to provide some contact information (e.g., an email address) when making an account on the Services.

Minors’ Data

We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Website. If we learn that personal information from users less than 18 years of age has been collected, We will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us.

Automatically collected information about your use of our Services or tools

This information is registered automatically with the visit by the own configuration or manual of each tool on the website.

When you visit, connect with, or utilize our service, we may gather, record, or create specific specialized data about you. We do so either autonomously or with the assistance of third-gathering Service Providers, including using "cookies" and other following innovations.

We automatically collect certain information when you visit, use or navigate the Website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser, and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website and other technical information. This information is primarily needed to maintain the security and operation of our Website and for our internal analytics and reporting purposes.

The information we collect includes:

• Log and Usage Data: Log and usage data are service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Website, which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, settings, and information about your activity on the Website (such as the date/time stamps associated with your usage, pages, and files viewed, searches and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called 'crash dumps') and hardware settings).
• Device Data: We collect device data such as information about your computer, phone, tablet, or another device you use to access the Website. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data: We collect location data, such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Website. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. Note, however, that if you choose to opt-out, you may not be able to use certain aspects of the Services.

How do we use your details?

We process personal data to operate, improve, understand, and personalize our services. We use personal data for the following purposes:

• To fulfill or meet the reason you provided the information (e.g., to help provide our Site services to you).
• To validate, confirm, verify, deliver, and track your order (including processing payment card transactions, handling returns and refunds, maintaining a record of the purchases you make, and contact you about your orders, including by telephone) or to service products you purchased from us.
• To enhance your online shopping experience, including recognizing you and welcoming you to the Site.
• To send you catalogs, information, newsletters, promotional materials, and other offerings from the Company or on behalf of our partners and affiliates.
• Analyze trends to improve our website and offerings.
• To personalize and develop our site and the services we provide you and improve our offerings.
• To provide certain features or functionality of the services on the site.
• For marketing and promotions.
• To create, maintain, customize, and secure your account with us.
• To personalize your experience and deliver content and product, and services relevant to your interests.
• Respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
• To prevent illegal activity, fraud, and abuse.
• To help our site, we will be ready to serve you better.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated, or incompatible purposes without providing you notice.

As noted in the list above, we may communicate with you if you've provided us with the means to do so. For example, if you've given us your email address, we may send you promotional email offers or email you about your use of the Services. Also, we may receive a confirmation when you open an email from us, which helps us improve our services. If you do not want to receive communications from us, please indicate your preference by emailing us at serge@mountainroaddsp.lu.

How to opt-out

When you engage us for the Services or make inquiries about our Services, you will be requested to provide your consent to us to send promotional material to you. You may stop the delivery or “opt-out” of future promotional emails by following the specific instructions in the email you receive.

Do Not Track

Currently, various browsers — such as Microsoft Edge, Firefox, and Safari — offer a “do not track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to Web sites visited by the user about the user's browser DNT preference setting. Mountainroad DSP Sarl-S does not currently commit to responding to browsers' DNT signals concerning the Company's Web sites, in part because industry groups have adopted no common industry standard for DNT, technology companies, or regulators, including no consistent standard of interpreting user intent. Mountainroad DSP Sarl-S takes privacy and meaningful choice seriously and will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.

How we use cookies

We may use cookies and other tracking technologies to collect and store information; We may use cookies and similar technologies (like web beacons and pixels) to access or store information. We use cookies and similar technologies for several purposes, depending on the context or service, including:

First-party cookies

• These cookies are necessary for the website to function and cannot be switched off in our systems. They are often set in response to actions made by you, which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms.
• These cookies enable the website to provide enhanced functionality and personalization. They may be set by third party providers whose services we have added to our pages or by us.
• These cookies allow us to count visits and traffic sources to measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site.
• These cookies may be set through our site and used to build a profile of your interests and show you relevant adverts on other sites.

Google Analytics Cookies

We use Google Analytics to investigate the utilization of our site by users and visitors. Google Analytics assembles data about site use through cookies. The data assembled identifying our site is utilized to make reports about the utilization of our site.

You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: Disable Google Analytics.

What are your choices regarding cookies?

Cookie Preferences on the website: Our cookies allow you to take advantage of some essential and useful features. Blocking some types of cookies may impact your experience of our sites. You can change your cookie preferences at any time by clicking ‘Cookie Preferences’ in the footer of the website.

Browser settings: You can also manage browser cookies through your browser settings. The 'Help' feature on most browsers will tell you how to remove cookies from your device, prevent your browser from accepting new cookies, how the browser will notify you when you receive a new cookie, how to disable cookies, and when cookies will expire. Check the support site for your browser to understand the privacy settings available to you. If you block or reject some of our cookies through your browser’s settings, you might not be able to use certain offerings that require you to sign in to an account, and some features and services may not work. You might also have to manually adjust your preferences or settings every time you visit our website.

California Consumer Rights

The California Consumer Privacy Act provides specific rights to those in California. Suppose you are a California-based consumer, as that term is defined under California law. In that case, this section shall apply in addition to all other applicable rights and information contained in this Statement.

• You have the right to request that we provide you with what personal information we collect, use, and disclose.
• You have the right to request that we delete the personal information we, or our service providers, store about you.
• We will not discriminate or retaliate against you if you elect to exercise any rights under this section of our Privacy Statement.
• You may request that we not sell your personal information. As noted above, we do not sell your personal information, and we only share your personal information with third parties, as described in this Statement.
• You have the right to designate an authorized agent to request on your behalf. Please see the Identity Verification Requirement below for information on our process for verifying that we have received a legally valid request.
• If you are a California consumer and have additional questions based on this section of our Privacy Statement or wish to submit a request to request that we not share your information with third parties, please contact us by email or through the contact us page.

See more at California Online Privacy Protection Act (CalOPPA)

According to CalOPPA, we agree to the following:

• Users can visit our site anonymously.
• You'll be notified of any ONLINE PRIVACY POLICY changes via email.

Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt-out of selling certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at serge@mountainroaddsp.lu with the subject line "Nevada Do Not Sell Request" and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Data as sales are defined in Nevada Revised Statutes Chapter 603A.

Coppa (Children Online Privacy Protection Action)

With regards to the assortment of private information from children under the age of 13 years, the Children's Online Privacy Protection Act (COPPA) puts parents in charge. The Federal Trade Commission, United States consumer safety firm, enforces the COPPA Guideline, which defines what providers of websites and online services should do to safeguard children's privacy and security online. For more details, Click Here.

GDPR - Customer Data Processing Appendix

"Customer Data" means any personal data that Mountainroad DSP Sarl-S processes on Customer's behalf via the Services, as more particularly described in this DPA.

"Data Protection Laws" means all data protection laws and regulations applicable to a party’s processing of Customer Data under the Agreement, including, where applicable, EU Data Protection Law and Non-EU Data Protection Laws.

GDPR - EU Data Protection Law

“EU Data Protection Law” means all data protection laws and regulations applicable to Europe, including:

• Regulation 2016/679 of the European Parliament and the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data (General Data Protection Regulation - “GDPR”);
• Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector;
• Applicable national implementations of the above;
• In respect of the United Kingdom (“UK”), any applicable national legislation that replaces or converts in domestic law the GDPR or other relevant law.

“Europe” means, for this DPA, the European Union, the European Economic Area and/or their member states, Switzerland, and the United Kingdom.

“Non-EU Data Protection Laws” means the California Consumer Privacy Act (CCPA); the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA); and the Brazilian General Data Protection Law (LGPD), Federal Law no. 13,709/2018.

“SCCs” means the standard contractual clauses for processors as approved by the European Commission or Swiss Federal Data Protection Authority (as applicable), applied only to transfers of Customer Data from the EU.

“Services Data” means any data relating to the Customer’s use, support, and/or operation of the Services.

Parties' Roles

If EU Data Protection Law or the LGPD applies, the Customer is the controller and Mountainroad DSP Sarl-S is a processor acting on behalf of the Customer.

Purpose Limitation

Mountainroad DSP Sarl-S shall process Customer Data only as outlined in the DPA or as required by law ("Permitted Purposes"). Processing outside these instructions requires prior written agreement.

Prohibited Data

The customer will not provide any Sensitive Data to Mountainroad DSP Sarl-S. This DPA does not apply to Sensitive Data.

Customer Compliance

The customer must comply with all Data Protection Laws, obtain required consents, and ensure accuracy and legality of Customer Data. The customer is also responsible for compliance in email content and practices.

Lawfulness of Instructions

The customer will ensure that processing of Customer Data complies with applicable law. Mountainroad DSP Sarl-S will notify the Customer if an instruction appears to violate the GDPR or UK data protection law.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.
• For investigations and fraud detection and prevention.
• For business transactions, provided certain conditions are met.
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.
• For identifying injured, ill, or deceased persons and communicating with next of kin.
• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse.
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information, and the collection is reasonable.
• Purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province.
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.
• If it was produced by an individual in the course of their employment, business, or profession, and the collection is consistent with the purposes for which the information was produced.
• If the collection is solely for journalistic, artistic, or literary purposes.
• If the information is publicly available and is specified by the regulation.

Contact Details

You can exercise any of the rights described above in the “What are your choices and how can you exercise them?” section above directly by sending an email to serge@mountainroaddsp.lu or by mailing a non-registered letter with a document proving your identity to the below address:

If you are submitting a request on behalf of another person, you must provide proof that you have been authorized by the individual to act on his or her behalf. In certain circumstances, we may ask the individual to verify his or her own identity directly with us. Please note that we may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.

How long do we keep your information?

We keep your information for as long as necessary to fulfill the purpose outlined in this privacy policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an account with us.

When we have an ongoing legitimate business need to process your personal information, we will either delete or anonymize such information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws to your data.

Your Legal Rights

You may have the following rights:

• A. Request access to your data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and check that we are lawfully processing it.
• B. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide.
• C. Request deletion of your data. This enables you to ask us to delete or remove personal data where there is no good reason to continue processing it. You also have the right to ask us to delete or remove your data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be notified to you, if applicable, at the time of your request.
• D. Object to processing your data where we are relying on a legitimate interest (or those of a third party). Something about your situation makes you want to object to processing on this ground as you feel it impacts your fundamental rights and freedoms. You also have the right to object to processing your data for direct marketing purposes.
• E. Request restriction of processing of your data. This enables you to ask us to suspend the processing of your data in the following scenarios:
  • If you want us to establish the data's accuracy.
  • Our use of the data is unlawful, but you do not want us to erase it.
  • You need us to hold the data even if we no longer require it as you need it to establish, exercise, or defend legal claims.
  • You have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
• F. Request the transfer of your data to you or a third party. We will provide your data in a structured, commonly used, machine-readable format to you or a chosen third party. Note that this right only applies to automated information; you initially provided consent for us to use or use the information to perform a contract with you.
• G. Withdraw consent at any time where we are relying on consent to process your data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

How do we protect your details?

We have implemented industry-accepted administrative, physical, and technology-based security measures to protect against the loss, misuse, unauthorized access, and alteration of personal information in our systems...

CAN-SPAM Act

The CAN-SPAM Act is a regulation that sets the guidelines for commercial email...

• Do not use untrue or misleading subject matter or email addresses.
• Identify the concept as an advertisement in some realistic way.
• Include the physical address of our site headquarters or business.
• Screen third-party email marketing services for conformity, if one can be used.
• Honor opt-out/unsubscribe demands quickly.
• Allow users to unsubscribe utilizing the link at the bottom of every email.

If anytime you want to unsubscribe from receiving future emails, you can email us by using the contact form on our website, and we'll immediately remove you from ALL communication.

Limitation of liability

Some jurisdictions do not allow the limitation or exclusion of liability for incidental or consequential damages, so some of the above limitations may not apply to you.

We make no legal representation that the website or products are appropriate or available in locations outside Luxembourg. You may access the website from outside Luxembourg at your own risk and initiative and must bear all responsibility for compliance with applicable foreign laws.

Governing Law and Jurisdiction

This website originates from Luxembourg. The laws of Luxembourg. Without regard to its conflict of law, principles will govern these terms to the contrary. You hereby agree that all disputes arising out of or in connection with these terms shall be submitted to the exclusive jurisdiction of the Luxembourg. Using this website, you consent to the jurisdiction and venue of such courts in connection with any action, suit, proceeding, or claim to arise under or because of these terms. You hereby waive any right to trial by jury arising out of these terms.

Changes to this privacy notice

We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time, but we will alert you to changes by placing a notice on the Mountainroad DSP Sarl-S website by sending you an email and/or by some other means. Please note that if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all the changes. The use of the information we collect is subject to the Privacy Policy in effect at the time such information is collected.

Contacting us

If you would like to contact us to understand more about this Policy or wish to contact us concerning any matter relating to individual rights and your Personal Information, you may do so via the contact us or email us at serge@mountainroaddsp.lu.

Privacy Policy Addendum: Outpost Games

Effective Date: May 6, 2025

This section applies to users of Outpost Games, a video game developed and operated by Mountainroad DSP SARL-S under the Outpost Games brand, including any platform on which the game is made available (e.g., Epic Games Store, Meta Quest).

1. Types of Data Collected in the Game

We may collect the following personal and technical information from game users:

• Account identifiers (Epic Games ID, Meta/Oculus ID, or other platform login)
• Display name or in-game alias
• Gameplay data, including match history, session duration, score, loadouts, etc.
• Device and network information, such as IP address, device type, operating system, and crash logs
• Communication data, such as in-game chat or voice (if implemented)
• User preferences, cosmetic purchases, and progression data

2. Third-Party Services

Outpost Games may integrate with third-party platforms, including but not limited to:

• Epic Online Services (EOS) for login, matchmaking, multiplayer features, and player stats
  See EOS privacy policy: https://www.epicgames.com/site/en-US/privacypolicy
• Platform providers such as Meta or Steam
• Analytics tools, crash reporting services, and potential anti-cheat systems

These third parties may collect or process data under their own privacy policies.

3. Use of Player Data

We use player data to:

• Provide, maintain, and improve the gameplay experience
• Enable multiplayer features such as matchmaking and stat tracking
• Prevent cheating, abuse, or fraud
• Respond to support inquiries or technical issues
• Customize your in-game experience (e.g., settings, cosmetics)
• Analyze gameplay trends to inform future development

4. Age Restrictions

Outpost Games is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected such data, we will delete it promptly.

5. Data Sharing

We do not sell your personal information. We may share it with:

• Our game development and publishing partners under contract
• Service providers (e.g., backend infrastructure, crash reporting)
• Law enforcement or government agencies when legally required

6. Retention of Game Data

We retain player data only as long as necessary for the purposes described above or as required by law. You may request deletion of your account and associated data by contacting us.

7. Contact for Game-Related Data Inquiries

For any privacy concerns related to Outpost Games, please contact:

Outpost Games / Mountainroad DSP SARL-S
Email: support@outpost.games