Attack and defend at the same time, block by block, over the last reliable water in 2084.
Every match runs both ways. Push into enemy blocks while holding your own.
Fight block by block through maps built on real cities.
Blow a hole through a block to open a lane, or collapse a bridge to seal your flank.
Dev progress, playtests and release news. A few emails a year.
Almost there. Check your inbox and confirm your address to finish signing up.
Something went wrong on our end. Please try again in a moment.
Gorillabyte is an independent game studio. It was active as a software development studio from 2013 to 2022 and has been back since 2026 with a focus on game development. We are working on new games for mobile and desktop.
Facts for coverage of Gorillabyte and Hardpan.
We take the protection of your personal data seriously and process it only in accordance with the law, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains which data is processed when you visit this website and when you sign up for our newsletter.
GorillabyteStefan HerndlbauerWeinheberstrasse 55, 3100 St. Pölten, AustriaEmail: [email protected]
This website is hosted by DigitalOcean, LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA ("DigitalOcean"). The server is located in DigitalOcean's Frankfurt, Germany data centre (FRA1). Details can be found in DigitalOcean's privacy policy.
We have concluded a data processing agreement with DigitalOcean pursuant to Art. 28 GDPR. It ensures that the data of visitors to this website is processed only on our instructions and in compliance with the GDPR. As DigitalOcean is a US company, access from the USA cannot be ruled out; such transfers are safeguarded by the EU Standard Contractual Clauses included in the agreement and DigitalOcean's certification under the EU-U.S. Data Privacy Framework.
When you visit the website, the web server automatically stores information in its log files, some of which your browser transmits:
This data is technically required to deliver the website reliably and to keep it secure and stable. We do not combine it with other data sources, but reserve the right to review it if we become aware of concrete indications of misuse of the website. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Log files are deleted after 90 days, unless they are needed longer to investigate a security incident.
This website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). All requests to the website pass through Cloudflare's servers before they reach our server; Cloudflare therefore processes the connection data of every visitor, in particular the IP address, the requested page, date and time, and the information your browser sends (such as browser type and operating system).
We use Cloudflare to deliver the website quickly and reliably and to protect it against attacks, spam and automated abuse. For this purpose:
cf_clearance
The legal basis is our legitimate interest in a secure, stable and fast website (Art. 6(1)(f) GDPR). Cloudflare processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, and the EU Standard Contractual Clauses are part of the agreement. Details can be found in Cloudflare's privacy policy.
If you agree in the cookie banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It helps us understand how visitors find and use this website, for example which pages are viewed, how long visits last, which device, browser and approximate location (country, city) they come from, and whether someone signed up for the newsletter (without the email address), so that we can improve the site. Google Analytics is not loaded at all unless you click "Accept".
For this purpose, Google Analytics stores the cookies _ga and _ga_PWDP01ZCT3 (valid for up to two years) in your browser, which contain a random identifier to recognise your browser on later visits. Google Analytics 4 does not log or store IP addresses; for visitors from the EU, the IP address is only used briefly to derive the approximate location and is then discarded. We have disabled Google signals and all advertising features, so the data is not linked to your Google account or used for advertising. Event data is kept for 2 months and then deleted automatically.
_ga
_ga_PWDP01ZCT3
Google processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Data may also be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework, and the EU Standard Contractual Clauses apply as well. Details can be found in Google's privacy policy and Google's information on data protection in its business products.
Legal basis and withdrawal: The use of Google Analytics and the storage of its cookies are based on your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw your consent at any time with effect for the future via Cookie settings in the footer of this website; the Google Analytics cookies are then deleted. Your choice itself is stored in your browser's local storage (key gb-consent), which is strictly necessary to remember it.
gb-consent
We also use Ahrefs Web Analytics, a web analytics service provided by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581 ("Ahrefs"). It shows us aggregated statistics on how this website is used, for example which pages are viewed and which sites visitors come from.
When you open this website, your browser loads a small script from analytics.ahrefs.com and transmits the address of the page, the referrer, your browser's user agent and your language settings. Your IP address is used to derive your approximate location (country and city). To count unique visitors per day, it is also combined with the user agent and a random value that is replaced every 24 hours. According to Ahrefs, raw IP addresses are discarded and never stored.
Ahrefs Web Analytics sets no cookies and stores nothing on your device. It does not recognise visitors across days, devices or websites. For this reason it runs without the cookie banner.
The legal basis is our legitimate interest in understanding how this website is used (Art. 6(1)(f) GDPR). You can object to this processing at any time by writing to [email protected]. As Ahrefs is based in Singapore, data may be processed outside the European Union. Details can be found in Ahrefs' description of Web Analytics and Ahrefs' privacy policy.
For security reasons and to protect the data you send to us, this website and our newsletter server use TLS encryption (often still called SSL). You can recognise an encrypted connection by the address starting with "https://" and the lock symbol in your browser's address bar. Data transmitted over an encrypted connection cannot be read by third parties. Please note that data transmission over the internet, for example unencrypted email communication, can never be protected completely against access by third parties.
If you sign up for our newsletter, we will keep you informed about news from Gorillabyte and the development of our games. We only need your email address to sign you up.
Double opt-in: After signing up, you receive an email with a confirmation link. Your address is only added to the mailing list once you click it. To be able to prove your consent, we store the time of your sign-up and confirmation.
Newsletter software: We use the open-source software listmonk, which we run ourselves at list.gorillabyte.com on a server at DigitalOcean, Germany Frankfurt (FRA1). Your data is therefore not passed on to an external newsletter service. Emails are sent via Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland, with whom we have concluded a data processing agreement.
Statistics: We count anonymously how often the newsletter is opened and links are clicked, without linking this to individual recipients.
Legal basis and withdrawal: Processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every email or by writing to [email protected]. After you unsubscribe, we remove your email address from the mailing list; we keep the records proving your earlier consent only as long as necessary to defend against possible claims.
To protect the sign-up form against automated submissions, we use ALTCHA. When you use the form, your browser loads a small computing task from our server list.gorillabyte.com and solves it in the background. No cookies are set and no data is passed on to third parties; for technical reasons, our server processes your IP address in the process. The legal basis is our legitimate interest in a sign-up form free from abuse (Art. 6(1)(f) GDPR).
If you contact us by email, we process your details to answer your enquiry. Emails to addresses at gorillabyte.com are received and stored by Proton Mail (Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland; Switzerland is recognised by the EU as providing an adequate level of data protection). Emails to addresses at hardpan-game.com are first received by Cloudflare Email Routing (see section 4) and forwarded to our mailbox. The legal basis is Art. 6(1)(b) GDPR (enquiries related to a contract) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once it is no longer needed and no statutory retention obligations apply.
Our website links to hardpan-game.com and to our profiles on Steam, YouTube, TikTok, Instagram and X. These are plain links; no data is transmitted to these sites when you visit our website. Only when you follow a link do the privacy policies of the respective provider apply.
You have the right to free information about your stored personal data, its origin, recipients and the purpose of processing (Art. 15 GDPR), as well as the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent you have given at any time. This does not include data we are required to keep for legal, administrative or security reasons. To exercise these rights, contact [email protected].
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
Last updated: October 2026
All content on this website, including the Gorillabyte logo and Hardpan artwork, is © 2026 Gorillabyte unless stated otherwise.
