Privacy policy

Version : 2026-11-01

Playtest applications are currently closed. This website is not collecting applications.

Controller and purposes

Kurobara Systems (KUROBARA SYSTEMS), 173 rue de Courcelles, 75017 Paris, France, contact: [email protected]. This policy covers the website and playtest applications, not local game data.

Playtest applications

We use your email, language, adult confirmation, hardware and availability to select varied hardware, reply, send access details and organise follow-up. The legal basis is your consent, with an initially unchecked box. Fields marked * are necessary. We record receipt time and consent version. No application is stored without consent or from anyone under 18. Selection is human. There is no newsletter, sale of data or advertising use.

Minimisation and retention

We do not ask for real names, health data, walking frequency, Steam credentials, passwords or serial numbers. Do not include medical information in free text. Applications are automatically deleted at the 90-day deadline after receipt (purged every minute while running, before exports and on restart). Working copies, exports and identifiable feedback must follow the same deadline. The system does not create application backups; the organiser must include any manual copies in deletion. Truly anonymous statistics may be retained.

Recipients and transfers

Only the organiser and authorised helpers access applications. Hetzner hosts SQLite in the EEA; Cloudflare carries and protects requests. Google receives browsing data only after consent. Providers may process data outside the EEA: Cloudflare, Google: EEE/EEA, USA ; EU-US Data Privacy Framework, clauses contractuelles types / standard contractual clauses selon les conditions applicables / under the applicable terms. Safeguards and subprocessors are described in the Cloudflare terms and Google Analytics terms. Messages to our contact address are routed by Cloudflare to Gmail, a Google service, so we can reply. Steam and external links follow their own policies; Discord is optional and email feedback remains available.

Analytics

Cloudflare Web Analytics measures pages and performance without cookies or persistent identifiers for all visitors, based on our legitimate interest in understanding website performance. GA4 is optional and requires consent: no Google script or ping before acceptance. Only visit measurement is allowed; advertising cookies, ad user data and ad personalisation remain denied. Our code does not send URL parameters, fragments or form fields. Automatic interaction measurement and Google Signals are disabled.

Your cookie choice

Use “Privacy choices” in the footer to accept or reject with equal ease. Your dated, versioned choice is kept in local storage for 180 days across pages in this browser. This storage is necessary to respect your choice. If allowed, _ga and _ga_* cookies last at most 180 days without automatic renewal; GA4 user and event retention is 2 months, without resetting on new activity. Withdrawal destroys the analytics context and removes those cookies on this domain. Playtest consent is separate.

Security and logs

The receiver logs no answers, email addresses or plain IPs. Rate limiting keeps only an HMAC of the IP in memory; its key changes on restart and expired entries are removed on the next request. The container produces no access log. The website proxy does not produce an access log. Cloudflare processes IP addresses and traffic data to route and secure connections, under the purposes and retention criteria in its privacy policy.

Your rights

Write to [email protected] to withdraw consent or request access, correction, erasure, restriction, portability or object to processing based on legitimate interest. Withdrawal does not affect earlier lawful processing and stops future follow-up messages. You may complain to the CNIL or your country’s competent supervisory authority. This application does not authorise sending any game technical report.