The Black RabbitBETA

Privacy Policy

Last updated: February 20, 2026

1. Data Controller

The data controller is The Black Rabbit. For any information regarding the processing of personal data, you can contact us at: admin@theblackrabbit.dev

2. Data Collected

We collect the following types of data:

  • Registration data: email, username, preferred language
  • Usage data: game progress, choices made, time spent on each level
  • Technical data: IP address, browser type, device (collected anonymously via Umami analytics)

For anonymous (public) players, we store only a random identifier (pub_visitor_id cookie) to allow resuming stories. No personal data is collected for public players.

3. Analytics

We use Umami, a privacy-focused, open-source analytics service. Umami:

  • Does not use cookies or any form of persistent tracking
  • Does not collect personally identifiable information
  • Does not track users across websites
  • Collects only anonymous, aggregated data: page views, referrer URLs, browser type, operating system, device type, and country (derived from IP, which is not stored)
  • Is compliant with GDPR, CCPA, and PECR without requiring cookie consent

4. Purpose of Processing

Your data is used to:

  • Provide you with the interactive game service
  • Manage your account and preferences
  • Allow story masters to track player progress within their stories
  • Improve the service and user experience through anonymous analytics

5. Legal Basis

Data processing is based on:

  • Contractual necessity for service provision (Art. 6.1.b GDPR) — registration data, game progress
  • Legitimate interest (Art. 6.1.f GDPR) — anonymous analytics to improve the service
  • User consent (Art. 6.1.a GDPR) — optional features such as push notifications

6. Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Your data may be processed by our hosting and infrastructure providers solely for the purpose of delivering the service.

7. Data Retention

Personal data is retained for the time necessary to provide the service and in any case no longer than 24 months after cessation of account use. Anonymous analytics data is retained indefinitely as it cannot be linked to individual users.

8. Your Rights

In accordance with GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of data
  • Object to processing
  • Request data portability

9. Contact

To exercise your rights or for any privacy-related questions, contact us at: admin@theblackrabbit.dev