Privacy & cookies
Last updated 4 September 2026.
Kinbarrow.com is a website about a game in development. It has no accounts and takes no payments, and it has no contact form. You can subscribe to the chronicle (a newsletter about the game) by entering an email on the landing page. The other personal data it handles is what your browser sends when you load a page, plus analytics if you allow it.
What is collected
The chronicle, only if you subscribe
If you enter your email on the landing page, it is sent to Buttondown, who send the confirmation and any later letters. Nothing is mailed until you confirm the address. You can unsubscribe from any letter, or email [email protected].
Buttondown acts as our processor for this; see the Buttondown privacy policy. We keep the list only so we can write to people who asked us to, and we delete an address when it is unsubscribed.
Analytics, only with your permission
We use Google Analytics, loaded through Google Tag Manager, to see which pages people read and roughly where they arrive from. It records the pages you view, approximate location derived from your IP address, and general device and browser information. It does not receive your name, email or anything you type.
Analytics storage is off by default in the EEA, the UK and Switzerland and does not run until you allow it. Elsewhere it is on by default and you can turn it off at any time using . If your browser sends a Global Privacy Control signal, analytics is off everywhere, without you having to ask.
Hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address and request details to deliver pages and to protect the site from abuse. This happens for every visitor and cannot be switched off, because it is how the page reaches you at all. Cloudflare acts as our processor; see the Cloudflare privacy policy.
Cloudflare Web Analytics: cookieless, and always on
The site also uses Cloudflare Web Analytics. It is a small script we load
after the page has finished, from Cloudflare's servers. You can find it
in the source we publish, in RumBeacon.astro. It records the
page you viewed, the referring page, your country, your device and browser
type, and how quickly the page loaded.
It differs from Google Analytics in the way that matters to a consent question: it stores nothing on your device. It sets no cookie and writes nothing to local storage, and it carries no identifier or fingerprint that follows you to another site. Because there is no storage to ask permission for, it is not part of the analytics choice above and does not stop when you reject analytics. We rely on legitimate interest in knowing whether the site works, and you can object to that using the contact address below. Any content blocker will also stop it, and nothing on the site depends on it.
Cloudflare additionally produces aggregate traffic statistics for us from the request logs themselves: how many requests came in and from where, and how much of it was cached. That is a by-product of hosting rather than a second tracker: it needs no script in the page at all.
Cookies and local storage
| Name | Set by | Purpose | Needs consent |
|---|---|---|---|
kb-theme | This site | Remembers whether you chose light or dark. Local storage, never sent to a server. | No. It only exists because you asked for it |
kb-consent | This site | Remembers your analytics choice, so you are not asked twice. Local storage. | No. It records the answer itself |
_ga, _ga_* | Google Analytics | Distinguishes one visit from another so page counts mean something. | Yes in the UK, EEA and Switzerland, where nothing is stored until you agree. Elsewhere it is set unless you opt out. |
Cloudflare Web Analytics is deliberately absent from that table: it sets no cookie and writes no local storage, which is the whole point of it.
No advertising cookies are set, and no data is sold. We do not run cross-site advertising tags, and the site tells Google so directly: advertising storage, ad user data and ad personalisation are signalled as denied for every visitor, everywhere, including anyone who presses "Allow analytics". Allowing analytics does not enable advertising storage.
Your choices
- Change your mind at any time with the Privacy choices control in the footer of every page.
- Global Privacy Control is honoured everywhere. If your browser or an extension sends it, analytics stays off.
- Block it entirely in your browser settings, or with any content blocker. Nothing on this site depends on analytics working.
Your rights
If you are in the UK, the EEA or Switzerland, you have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy, and to withdraw consent at any time. You may also complain to your data protection authority, which in the UK is the Information Commissioner's Office.
If you are in California, you have the right to know what is collected, to have it deleted, to correct it, and to opt out of any sale or sharing of personal information, without being treated differently for doing so. We do not sell personal information. We honour Global Privacy Control as an opt-out signal.
To exercise any of these, email [email protected]. Because the site has no accounts, we usually hold nothing that identifies you personally unless you subscribed to the chronicle. In that case we hold the address you gave us, and we will delete it on request.
Retention and transfers
Google Analytics data is retained for the period configured in that property and is processed by Google, which may involve transfers outside the UK and EEA under its standard contractual clauses. Cloudflare Web Analytics data and Cloudflare's request logs are retained per Cloudflare's own policy, and both may be processed outside the UK and EEA under its standard contractual clauses. Chronicle addresses are held by Buttondown until you unsubscribe or we delete them, and may likewise be processed outside the UK and EEA. We keep no separate copy of the analytics; the chronicle list exists only so we can send the letters.
Changes
If what the site collects changes, this page and the date at the top are updated. The page is versioned in the same repository as the site, so its history is public.
Who we are
Kinbarrow is an independent game project. For privacy questions, contact [email protected].