Privacy policy
Unbarred (website, email list and demo) · Last updated: 14 November 2026
Who is responsible
Robert Elias, a private individual, Avenue Hergé 17, 1050 Ixelles, Belgium ("I"). I make Unbarred on my own. I decide why and how your data is used (in law, I am the "controller"). I have no data protection officer. Contact for anything about your data: [email protected].
The website
This website sets no cookies and has no analytics, no adverts and no third-party scripts. Its fonts and pictures come from this website itself.
My hosting provider, Cloudflare, processes technical data about each visit (such as your IP address and the page you asked for) to deliver the page and protect it from attacks. Legal basis: my legitimate interest in running a website that works and is safe (GDPR Art. 6(1)(f)). Cloudflare is a US company, so this data can leave the EU. That transfer is covered by Cloudflare's data-processing agreement, which uses the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Cloudflare keeps these logs only as long as it needs them for security and to meet its legal duties. I do not receive or keep them.
The email list (only if you sign up)
If you sign up, I use your email address to send you news about Unbarred: at most one email a month, more around the launch of the Kickstarter campaign. Legal basis: your consent (GDPR Art. 6(1)(a)).
I send a confirmation email first. You are only added to the list after you click the link in it. If you never click it, you are not added to the list and get no further emails.
My email service is Brevo (Brevo SAS, France). It sends the emails on my behalf under a data-processing agreement. Brevo stores your email address, when you signed up, the confirmation email it sent you and when you confirmed. This is the record of your consent.
Brevo counts how many people open my emails and how many click each link. I have switched on Brevo's anonymous tracking, and I look only at the totals, never at who opened or clicked. Brevo counts with a tiny invisible picture in each email and by sending each link through a Brevo address first. I use these totals only to see which news people want. You can stop being counted by turning off pictures in your email app, or by unsubscribing.
Brevo stores data in the EU. Some of the companies that work for Brevo are in the US; those transfers are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework. You can ask me for a copy of these safeguards at [email protected].
You can unsubscribe with the link in every email, or by writing to me. I keep your data until you unsubscribe. Then I delete it, keeping only your email address on a block list so that you are never added again by mistake.
You do not have to give your email address. Without it, you just do not get the emails.
If you email me
Email sent to [email protected] is forwarded by Cloudflare (email forwarding) to my Gmail inbox (Google, US). When I reply, my reply is sent through Brevo. I keep your message only as long as I need it to answer you, and I delete it within 12 months. Legal basis: my legitimate interest in answering you (GDPR Art. 6(1)(f)). Cloudflare and Google are US companies. Cloudflare forwards the message under the same data-processing agreement as above; Google holds it in my inbox under its own privacy terms.
The demo
The game demo runs in your browser. It saves your progress on your own device (in your browser's storage) so that "Continue" works. This stays on your device; it is not sent to me or anyone else. You can delete it at any time by clearing your browser data for the site. The demo will be shown on itch.io, which has its own privacy policy and cookies that I do not control.
Who I share data with
Only the service providers named above (Cloudflare, Brevo, Google), and only what they need to do their job. I share data with anyone else only if the law requires it. I do not sell data. I make no automated decisions about you and do no profiling.
Your rights
You can ask me to show you, correct, delete or export your data, to limit how I use it, or you can object to how I use it. Write to [email protected]. I answer within one month. You can withdraw your consent at any time; this does not affect what I did before you withdrew it.
You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels, www.autoriteprotectiondonnees.be (French) or www.gegevensbeschermingsautoriteit.be (Dutch). I would be grateful if you wrote to me first, so I can put it right.
Children
The email list and the demo are not aimed at children under 13. If you are under 13, please do not sign up. If I learn that an address belongs to a child under 13, I delete it.
Changes
If this policy changes, the date at the top changes. Older versions are available on request at [email protected].