Legal
Privacy Policy
Last updated 13 October 2026
This policy explains what personal data Cosmic Canvas Productions collects when you visit cosmiccanvasproductions.com or get in touch, why we collect it, and the rights you have. The short version: this website uses no cookies or advertising trackers, it counts visits in a way that doesn’t identify you, and we only hold what you choose to send us.
Who we are
Cosmic Canvas Productions (“we”, “us”) is an independent game studio, and is responsible for your personal data as described in this policy. For anything about it, email us at hello@cosmiccanvasproductions.com.
What we collect
- When you email us: your email address, your name if you include it, and whatever you write or attach.
- When you visit: like any website, the servers that deliver it receive technical details with each request, such as your IP address, browser and device type, the page you asked for and when.
- Visit statistics: we use Cloudflare Web Analytics to count visits. For each page you view, it records the page’s address, the website you came from, your browser, operating system and type of device, your country, and how quickly the page loaded. It doesn’t use cookies or store anything on your device, and Cloudflare says it doesn’t use your IP address or fingerprint your device to identify you or follow you around the web. We only see totals, never individual visitors.
That’s all. There are no accounts, forms, newsletters or advertising on this website, and we don’t use any of this to identify you or build a profile of you.
Cookies
This website doesn’t set any cookies of its own or store anything on your device, and neither do the visit statistics. If Cloudflare’s security features are active, Cloudflare may set a strictly necessary cookie to tell people apart from bots; it isn’t used to track you.
Why we use it
- To reply to you and, if you ask about working with us, to discuss and plan the project. We rely on our legitimate interest in answering people who contact us, or on taking steps you’ve asked for before entering into a contract (GDPR Article 6(1)(f) and 6(1)(b)).
- To deliver the website and keep it secure, for example to protect it against attacks. We rely on our legitimate interest in running a working, secure website (GDPR Article 6(1)(f)).
- To understand how the website is used, such as which pages people visit and how quickly they load, so we can improve it. We rely on our legitimate interest in running and improving our website (GDPR Article 6(1)(f)), using statistics that don’t identify you.
Who handles it for us
- Google, through Google Workspace, which hosts our email.
- Cloudflare, which runs our domain name and the network and security in front of the website, and counts visits for us (Cloudflare Web Analytics).
- Our hosting provider, which runs the server the website is delivered from.
They only process your data on our behalf. We don’t sell your data or share it with anyone else, unless the law requires us to.
Data outside Europe
Google and Cloudflare may process data outside the European Economic Area, including in the United States. When they do, they rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep emails for as long as we need them to handle your enquiry and any work that follows, and then for up to two years after we were last in touch, unless we have to keep them longer for legal or accounting reasons. Technical request details are kept only briefly, for security and troubleshooting, and then deleted. Cloudflare keeps the detailed visit statistics for 7 days, then only a small sample of them, and we can see them for six months.
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, limit how we use it, or send it to you or someone else in a portable format. You can also object to us using it. Email hello@cosmiccanvasproductions.com and we’ll reply within a month.
If you’re unhappy with how we’ve handled your data, you can complain to a data protection authority, for example the one in the country where you live or work.
Other websites
This website links to others we don’t control, like GitHub and social networks. When you visit them, their own privacy policies apply.
Children
This website isn’t aimed at children under 16, and we don’t knowingly collect their data. If you think a child has sent us personal data, let us know and we’ll delete it.
Changes to this policy
If anything changes, we’ll update this page and the date at the top. Our Terms of Service cover the rest of how you can use the website.
