§01Stance
IN SHORTWe don't watch you. We don't even know you're here.
We don't sell data. We don't measure clicks. We use no analytics, neither our own nor the host's. There is no Facebook pixel, no Google one, no anyone else's, and no measurement beacon: the content security policy on every page would block one even if somebody added it. If you're here, we won't know unless you choose to write us.
§02Data we collect
IN SHORTOnly what you voluntarily write to us.
Only what you give us voluntarily: your email if you subscribe, your message if you write us. Nothing else. No third-party cookies, no fingerprints, no inferences. The contact forms on this site compose an email inside your own mail client: the text never touches a server of ours.
§03How we use it
IN SHORTTo reply to you. End of list.
To reply to you, to send newsletters if you subscribe, to process orders if you buy directly from us. Nothing else.
§04Your rights
IN SHORTAccess, rectification, deletion, portability. In < 72 h.
You can request access, rectification, deletion and portability at any time, by writing to [email protected]. We answer in less than 72h, guaranteed.
§05Hosting and logs
IN SHORTThe server records connections in order to serve them. Nothing more.
The site is static, served from a server behind a CDN. Like any server, it notes the requests it receives — IP address, user agent, time — in order to answer them and to stop abuse. Those logs are joined to nothing, are not used to profile anybody, and feed no analytics. In July 2026 the CDN was injecting a measurement beacon into every response; it is switched off, and the content security policy on every page permits no beacon at all.
§06The one third-party call
IN SHORTThe front page asks GitHub for its own public numbers. That is all.
The front page shows public telemetry about the studio's own GitHub organisation, and asks api.github.com for it from your browser. GitHub sees that request and its own policy applies to it; the answer is cached in your browser for an hour so it is not repeated. It is the only third-party request this site makes, and the content security policy allows no other — no fonts, no embedded video, nobody else's scripts.
§07Storage
IN SHORTOne server in Virginia, USA, encrypted, and only the studio with access.
The site is served from a server in Vint Hill, Virginia, United States. Encryption in transit and at rest. Internal access limited to the five people of the studio. We name the place because the studio is a US LLC and this page used to say “EU servers”, which was not the case.
§08External platforms
IN SHORTSteam, GOG and Itch have their own policies.
Steam, GOG and Itch.io have their own privacy policies. When you buy there, we don't share data with you — nor you with us.