Privacy policy draft

Draft — operator review required. This template is not legal advice or a guarantee of GDPR compliance. Replace every bracketed placeholder and have the policy checked against your actual services before production.

Who operates this website?

[Operator’s legal name], located at [operator address / country], operates [production domain]. Contact [privacy contact email] for questions about personal data.

What this version collects

This static site has no accounts, leaderboard submissions, newsletter signup, analytics script, or advertisements. It does not receive email addresses or player names. Choosing a theme may store a preference on your device; see the cookie information page.

Hosting and request data

When deployed to Cloudflare, Cloudflare processes network requests to deliver the website. Such requests can include an IP address, requested URL, and browser information. The operator must document [applicable Cloudflare entity and terms], [purpose and lawful basis], [logging settings and retention], and [international transfer safeguards]. Local development does not send site traffic to Cloudflare hosting.

Links and RSS

RSS subscriptions are managed by your feed reader. Social sharing links send you to the service you choose only when clicked. Those services apply their own privacy policies.

Future services

Before enabling Umami, Brevo, leaderboards, or an advertising network, update this policy with the data collected, purposes, legal bases, processors, retention periods, and any required consent. These services are not implemented in milestone 1.

Your rights

[Explain applicable access, correction, deletion, restriction, objection, and portability rights; how to exercise them; response timelines; and the relevant supervisory authority.] Where consent is used, explain how to withdraw it.

Policy updates

[Effective date and method of communicating material changes.] This document must describe your deployed website, not just this starter.