Nonna's Oven Games is a small independent game studio based in Italy. We respect your privacy and collect as little as possible. This page explains what that means for our website, our games and the tools we use.
This website
nonnasovengames.com has no accounts, no contact forms, no advertising and no tracking cookies. It is hosted by Cloudflare, which processes technical data such as IP addresses to deliver and protect the site, as described in Cloudflare's privacy policy.
To know how many people visit, we use Cloudflare Web Analytics. It doesn't use cookies or local storage, doesn't follow you across sites and doesn't build a profile of you: we only see totals, such as page views, countries and the pages people come from.
Fonts, images and videos, including the trailer, are served from this website itself: no third-party font or video service is contacted when you browse it.
Embedded content. When our Steam page is live, the game page shows Steam's store widget. It loads from Valve's servers when the page opens, and Valve may set its own cookies, as described in the Steam Privacy Policy. Links to Steam and to our social media profiles take you to those sites, where their own policies apply.
Our games
Bones will Fly: Tower Defense does not collect personal data. Your settings, progress and photos are saved only on your own computer. Purchases, achievements and cloud features are handled by Valve through Steam, under the Steam Privacy Policy.
Emails
If you write to us, we use your email address and message only to reply to you. We don't add you to any mailing list and we don't share your email with anyone.
Our publishing tools and Google user data
We use a private scheduling tool, "Nonna Postiz", to publish posts and videos on our own social media accounts, including our YouTube channel. It uses Google's YouTube APIs only on the studio's own Google account, to upload and schedule videos and to read the channel's statistics. It does not access, store or share data about any other Google user. Its use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can review or remove its access at any time from Google Account permissions.
Social media
When you follow or message us on YouTube, Bluesky, Discord or Instagram, those platforms' own privacy policies apply.
Your rights
Under the GDPR you can ask us what data we hold about you, and ask us to correct or delete it. Write to [email protected] and we'll answer within 30 days.
Changes
If this policy changes, we'll update this page and the date at the top.