Privacy notice
Short version: no cookies, no trackers, no ads. We store your email only if you join the Steam waitlist.
Who is responsible
[COMPANY NAME], [STREET AND NUMBER], [POSTCODE AND CITY], [COUNTRY]. Contact: [CONTACT EMAIL].
What this website does not do
- It sets no cookies and uses no local storage for tracking.
- It has no analytics, no advertising and no social media widgets.
- Fonts, images and video are served from this site, not from third parties.
Hosting
The site runs on Cloudflare (Cloudflare, Inc., USA). Like every web host, Cloudflare processes your IP address and request data to deliver pages and to protect against abuse. Legal basis: our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). [Owner: check Cloudflare's data processing terms and your standard contractual clauses.]
Steam waitlist
If you enter your email address on the waitlist form we store:
- your email address and the language of the page you used,
- the time you signed up and, if you confirm, the time you confirmed,
- a one-way hash of your IP address (not the address itself), kept only to limit spam sign-ups.
We use double opt-in. We send one email with a confirmation link, and the address only counts after you click it. Unconfirmed addresses are not used. We use confirmed addresses for one purpose: to tell you when AllBrawl is on Steam. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw at any time with the unsubscribe link in every email, or by writing to [CONTACT EMAIL]; we then delete your address. The data is stored in a Cloudflare D1 database. [Owner: add how long unconfirmed sign-ups are kept, for example 14 days, and the email service provider once chosen.]
The game
The game itself runs at https://play.allbrawl.com/. When you type a phrase to make a fighter, the phrase is sent to the game's servers and to AI services that draw the image. Do not type personal data. [Owner: list the AI providers and the game's own data handling here, or link a separate game privacy notice.]
Your rights
You can ask for access, correction, deletion, restriction and a copy of your data, and you can object to processing based on legitimate interest. You can also complain to a data protection authority. [Owner: name the competent supervisory authority.]
