David Freiholtz is responsible for this site’s personal-data processing. Contact: david@davidfreiholtz.com.
The site processes your IP address and technical request information to deliver and protect the service. A random browser identifier and locally saved game state remember your character and progress. Interacting shares your character, movement, pose, typing indicator and submitted speech with connected visitors. Server-hashed browser identifiers, visit dates and activity times distinguish new and returning visits. Daily interaction counters and approximate foreground duration measure use; server-hashed network identifiers enforce abuse limits. These are pseudonymous data. The purposes are providing the shared game, remembering progress, preventing abuse and measuring interacting visits; the GDPR basis is legitimate interests in operating and understanding this personal website.
Browser storage retains the identifier, tab-ownership record, game state and draft until you clear site data. Public presence ends on disconnection or after ten minutes without input; speech expires within twenty-two seconds. Daily visitor and engagement records retain thirty Stockholm calendar days, visit records thirty days since activity, and bans thirty days from imposition; expiry is automatically scheduled. There is no server chat-history or individual click-history database.
Cloudflare hosts the website and shared play. Netlify continues to provide the character-appearance identity function so existing visitors retain their characters. Google receives request information when fonts load; external asset providers receive requests when serving page resources. Their infrastructure may process data outside the EEA, including the United States. International-transfer safeguards and copies are described in Netlify’s data-processing agreement, Cloudflare’s data-processing addendum and Google’s privacy policy, including applicable adequacy decisions and EU standard contractual clauses.
You may request access, correction, deletion, restriction, objection and portability where applicable by contacting David. You may complain to IMY, Sweden’s data-protection authority. Providing chat is voluntary. Technical request data is needed to deliver the site; blocking browser storage prevents remembered progress, and not interacting avoids public presence.