Privacy Policy.
The short version: we collect as little as possible, we don't sell it, we delete it when you ask. The long version is below, in plain language.
01 · Who we are
Eastbridge Games ("we," "us," "the studio") is an independent game studio operated as a sole proprietorship by Nicholas Elliott, based in the United States. This policy covers eastbridge-games.com and any direct communications sent from an @eastbridge-games.com address.
For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller. For the California Consumer Privacy Act (CCPA), we are the business.
02 · What we collect
When you visit the website
- Cloudflare Web Analytics — a small beacon loaded from
static.cloudflareinsights.com— collects aggregate, cookieless metrics: page URL, referrer, browser/OS family, country-level location, and device-type bucket. No persistent identifier, no cross-visit tracking. - Separately, Cloudflare — as our host — processes standard request metadata (IP address, user-agent) to serve and protect the site, under Cloudflare's own privacy policy. The studio runs no server and keeps no logs of its own.
When you email us
- The email, any attachments, and whatever you decide to tell us
Browsing this site does not collect: names, addresses, phone numbers, payment info, or data from minors under 13 — we don't ask for any of it, and analytics doesn't gather it either. The site takes no payments and runs no store — games are distributed on Steam, under Valve's terms. We also don't collect location beyond the country level. If you email us, that message may of course include a name, address, or anything else you choose to type — we only have what you volunteer.
03 · Why we collect it
- Analytics: to understand which pages are being read, so we can make better ones. Lawful basis: legitimate interest (GDPR Art. 6(1)(f)).
- Hosting & security: Cloudflare processes request metadata to keep the site up and spot abuse. Lawful basis: legitimate interest.
04 · Who we share it with
We use one service provider ("processor") to run the site. It does not sell or repurpose your data:
- Cloudflare (US-based) — hosts the site via Cloudflare Pages and provides Cloudflare Web Analytics. Cookieless. No data resale.
We never sell your data. We never share it with advertisers, data brokers, or "partners." If we are ever acquired or go out of business, we will notify you before any data changes hands, and you can request that we delete the personal data we hold about you before the transfer, subject to any limits the law allows.
05 · Your rights (GDPR & CCPA)
Wherever you are in the world, you can:
- Access a copy of every piece of data we hold about you
- Correct anything that's wrong
- Delete your data entirely ("the right to be forgotten")
- Export your data in a portable format (JSON)
- Object to processing, or ask us to restrict it
Email [email protected] with your request. We handle it as the law requires. No fee, no forms, no catch.
If you're in the EU and think we're doing something wrong, you have the right to complain to your national data protection authority.
06 · How long we keep it
- Analytics: aggregate, cookieless data with no personal identifier. The studio stores none of it directly.
- Request metadata: processed by Cloudflare, our host, under Cloudflare's own privacy policy.
- Emails you send us: kept as long as useful to us (usually 2–3 years). Ask us to delete and we will.
07 · Security
The site is static and served over HTTPS through Cloudflare. There's no database and no user accounts, which keeps the attack surface small. The studio's email is protected by 2FA and a hardware key.
If a breach ever happens and affects you, we will notify you without undue delay, as required by GDPR.
08 · Changes to this policy
If this policy changes in any way that affects you, we'll post a dated notice on this page. We'll never make a change that reduces your rights without asking first.
09 · Contact
For any privacy question, data request, or concern:
[email protected] — mark the subject line [PRIVACY].