Privacy note
This covers the “Tell me when I can play” email list on this site. It is short on purpose. Last updated: .
What we store
For each sign-up, in one database row:
- your email address;
- the consent line next to the button, word for word, and when you first submitted the form;
- the page the form was on;
- the platform, link type, campaign and short identifiers in the link you arrived through (utm_source, utm_medium, utm_campaign and utm_content), if present;
- the referring site's origin, if your browser provides it, without its path, query string, or fragment; and your optional answer to “Where did you hear about us?”;
- when you clicked the confirmation link, if you did;
- a salted hash of the IP address you signed up from, and of the one you confirmed from, as part of the record of your consent. A salted hash is a pseudonymised form: we never store the IP address itself, but whoever holds the salt (us) could test a guessed address against it;
- bookkeeping for the confirmation email: when it was last sent, how many were sent in the last 24 hours (at most 3), and whether it went out.
Separately, to stop abuse of the form, we keep a salted hash of the IP address (for IPv6, of its first half, the /64 network) with a count of sign-up attempts in the current hour. It is not linked to your email address, and it is deleted once it is two hours old (see below for when deletion runs).
Why, and on what basis
To tell you about playtests and the launch of our game, and to understand which development shorts bring people to the list. Attribution is saved only when you submit the form, alongside your address; we do not record visits or track you across pages. The legal basis is your consent, which you give by submitting the form and then confirming by email. You can withdraw it any time by unsubscribing.
How often
A handful of emails a year.
How long we keep it
- Confirmed addresses: until you unsubscribe. Unsubscribing deletes the row straight away.
- Unconfirmed addresses: the confirmation link stops working 7 days after it was sent. The row is deleted 30 days after you first submitted the form. The deletion runs automatically whenever anyone uses the sign-up form, a confirmation link or an unsubscribe link, so on a very quiet site it can happen a little after the 30 days. You can ask us to delete it sooner (below).
- Abuse-prevention counts: deleted once two hours old, on the same schedule.
Who processes it for us
- Cloudflare hosts this site and the database, and runs Turnstile, the human check on the form.
- Resend sends the confirmation email.
- We have not selected a service for playtest and launch announcements yet. We will update this note before using one.
Each processes the data only on our behalf. Cloudflare and Resend are US companies, so your data may be processed in the United States under their data-processing terms.
Not shared or sold
We don't share or sell your address. Our emails have no tracking pixels or tracked links, and we use no third-party analytics or cookies for attribution. Campaign details stay in the form on the current page, without browser storage, until you submit. Turnstile performs the form's bot check. Attribution is deleted with your sign-up row when you unsubscribe.
Leaving
Every email has an unsubscribe link. Use it, or email [email protected], and we delete your address.
Your rights
Ask what we hold about you, ask us to correct it, or ask us to delete it: [email protected]. We reply within a month, usually much sooner. If you are in the EU or UK you can also complain to your data protection authority.
Who we are
Tons Of Bad Ideas, a one-person studio.
Email sign-ups are not open yet.